Detecting spammer IP
I am getting many spam bounce mails today. here is the header from one file. Can anyone tell me which IP is really sending the spam. I am bit confused with diffrent IP's
-------
Received: from bigfoot.com (mail.bigfoot.com [64.15.239.140]) by amsmsx02.gorillapark.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2655.55)
id MGJ0LX6P; Sat, 15 Jun 2002 04:36:05 +0200
Received: from pop.sunbeltengineering.com ([64.105.59.76])
by BFLITEMAIL3A.bigfoot.com (LiteMail v3.02(BFLITEMAIL3A)) with SMTP id 14Jun2002_BFLITEMAIL3A_34882_108382178;
Fri, 14 Jun 2002 22:36:04 -0400 EST
Received: from chorus3.cern.ch ([206.104.54.4]) by pop.sunbeltengineering.com with Microsoft SMTPSVC(5.0.2195.2966);
Fri, 14 Jun 2002 22:36:02 -0400
Message-ID: <000072b103ab$000048e4$00001db9@cic.cl>
From: dancemc@hotmail.com
Reply-To: dancemc@hotmail.com
To: jeslie@buysellphones.com, psico@aircraftsys.com, ndahl@buyfonts.com,
lneiswanger@yahoo.com, ruder@industech.com, hb@beer.com
Cc: mccourry@startmarketing.com, usri@de-water.com,
mccourry@starsbasketball.com, lneiswender@yahoo.com,
lneiswender@hotmail.com, kda@gfainc.com
Subject: Lose Weight Without Dieting 1839
Date: Sat, 15 Jun 2002 16:46:18 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C21415.681B8D20"
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C21415.681B8D20
Content-Type: text/plain;
charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
-------
