Forum Home
Press F1
 
Thread ID: 25347 2002-10-01 21:38:00 This could be serious. How do I find out? Pauline (641) Press F1
Post ID Timestamp Content User
85158 2002-10-01 23:50:00 Hotmails IPs are 64.4.x.x
if the mail didnt come from something withing that IP range, then it was send directly from the users computer.
Chris Wilson (431)
85159 2002-10-02 00:24:00 Hi Chris,
I copied this from the headers as you suggested but it doesn't mean anything to me
Received: from 203.97.2.243 by sea2fd.sea2.hotmail.msn.com with HTTP;
Mon, 30 Sep 2002 12:50:44 GMT
X-Originating-IP: [203.97.2.243]
Yes Lohsing you guessed right.
I might just send a message to his account & see if there is any reply. It's hard not knowing if he was serious or not.
Pauline.
Pauline (641)
85160 2002-10-02 00:36:00 Ok, not the full headers, but i does seem to be from a webbased account. This leads back to the question

Is it possible to send a delayed message with webbased hotmail?
Surely theres someone here who uses hotmail that could answer that!?
Chris Wilson (431)
85161 2002-10-02 00:40:00 Hotmail can be set up to be used like a POP account from an email client, ergo almost certainly it can be set to auto-send. Greg S (201)
85162 2002-10-02 00:46:00 Yes but surely if it was sent through an email client, it wouldn't have gone through "sea2fd.sea2.hotmail.msn.com"...

refer header exert below


Received: from 203.97.2.243 by sea2fd.sea2.hotmail.msn.com with HTTP;
Mon, 30 Sep 2002 12:50:44 GMT
X-Originating-IP: [203.97.2.243]
Chris Wilson (431)
85163 2002-10-02 01:39:00 I traced it (Search google for Neotrace Express Download)


OrgName: Asia Pacific Network Information Centre
OrgID: APNIC

NetRange: 202.0.0.0 - 203.255.255.255
CIDR: 202.0.0.0/7
NetName: APNIC-CIDR-BLK
NetHandle: NET-202-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: ns1.apnic.net
NameServer: ns3.apnic.net
NameServer: ns.ripe.net
NameServer: rs2.arin.net
NameServer: dns1.telstra.net
Comment: This IP address range is not registered in the ARIN database.
For details, refer to the APNIC Whois Database via
WHOIS.APNIC.NET or www.apnic.net
** IMPORTANT NOTE: APNIC is the Regional Internet Registry
for the Asia Pacific region. APNIC does not operate networks
using this IP address range and is not able to investigate
spam or abuse reports relating to these addresses. For more
help, refer to www.apnic.net

RegDate: 1994-04-05
Updated: 2002-09-11

OrgTechHandle: SA90-ARIN
OrgTechName: System Administrator, System
OrgTechPhone: +61 7 3858 3100
OrgTechEmail:

ARIN Whois database, last updated 2002-09-30 19:05
Enter ? for additional hints on searching ARIN's Whois database.


AKA - There's no IP addy now. AFAIK, It was from Asia Pacific which sounds right.

If they do it again, trace it ASAP
Chilling_Silence (9)
85164 2002-10-02 01:44:00 OK according to honey laser

>No. You are able to set up "reminders" which email you on a specified date, but thats all. I don't believe you have ever been able to do that.

As this message was sent from hotmails webased system, not an email client, i could not have been time delayed.
Chris Wilson (431)
85165 2002-10-02 01:49:00 Why does it have to be web-based though? It would still hav the same IP addy wouldn't it? Wether its sent from my PC via OeX of via IE and Hotmail, What about MSN Explorer??? Can that do it?

Chilling_Silence
Chilling_Silence (9)
85166 2002-10-02 02:01:00 If it went from a email client it would get sent from 203.97.2.243 > local smtp server > paulines pop3 server > paulines comp with maybe a couple of extra steps allong the way.

The posted headers show that first stop after the users computer was not the local smtp sever, but was by sea2fd.sea2.hotmail.msn.com

From this i assume it was webbased, possibly an internet café or the such like.
Chris Wilson (431)
85167 2002-10-02 02:12:00 I think everyone has missed the point.

If you (or your daughter) has received an email from someone threatening their or anyone elses life, and you suspect it is not a hoax (ie from someone you know) then I wouldn't stuff around like this, and I would contact the local police ASAP and let them know the situation so they can check it out for you. Often, a message is a cry for attention and a wish to be stopped. Do nothing and the person may go through with it. Do something and you may save their life.

For christs sake call the cops! If he is not serious, then he will get a stern telling off. If he is well...

G P

I don't beleive you guys - who cares if it is actually possible to autosend when the subject is this???
Graham Petrie (449)
1 2 3 4