Solved

I received an e-mail from 192.244.203.83?

Posted on 2012-04-09
7
3,072 Views
Last Modified: 2012-04-09
I received an e-mail in Outlook Inbox from USPS Service <status_item@usps.com> with the attachment Label_Parcel_USPS_13-114.zip

However, the ip address in the e-mail message header is 192.244.203.83

How can I find out "who is" or "what is" using 192.244.203.83 on our network?

Thanks for your help.
0
Comment
Question by:LessonsLearned
7 Comments
 

Author Comment

by:LessonsLearned
ID: 37825184
The header information is:

Received: from outlet-web.jp (192.244.203.83) by SD1.sd.local (192.168.1.253)
 with Microsoft SMTP Server id 14.1.218.12; Mon, 9 Apr 2012 12:39:03 -0700
Received: by outlet-web.jp (Postfix, from userid 2)      id DE98084436D; Tue, 10
 Apr 2012 04:38:17 +0900 (JST)
To: <jim@mmpph.com>
Subject: Postal notification
From: USPS Service <status_item@usps.com>
X-Mailer: mPOPWeb-Mail2.19
Reply-To: USPS Service <status_item@usps.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------13340002974F833AA9C4324"
Message-ID: <20120409193817.DE98084436D@outlet-web.jp>
Date: Tue, 10 Apr 2012 04:38:17 +0900
Return-Path: daemon@outlet-web.jp
X-MS-Exchange-Organization-AuthSource: SD1.sd.local
X-MS-Exchange-Organization-AuthAs: Anonymous
0
 
LVL 26

Accepted Solution

by:
pony10us earned 300 total points
ID: 37825194
0
 

Author Comment

by:LessonsLearned
ID: 37825200
Network Solutions Whois states 192.244.203.83 equates to outlet-web.jp

Domain Information:
[Domain Name]                   OUTLET-WEB.JP

[Registrant]                    STB,Inc.

[Name Server]                   01.dnsv.jp
[Name Server]                   02.dnsv.jp
[Signing Key]                  

[Created on]                    2007/06/04
[Expires on]                    2012/06/30
[Status]                        Active
[Last Updated]                  2011/07/01 01:05:05 (JST)

Contact Information:
[Name]                          STB,Inc.
[Email]                         kobayashi@stb-libman.jp
[Web Page]                      
[Postal code]                   441-8113
[Postal Address]                Toyohashi-shi
                                333 Nishimiyuki-cho Aza Hamaike
                                Sience Core 109
[Phone]                         0532-38-6595
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 3

Assisted Solution

by:tobyweston
tobyweston earned 100 total points
ID: 37825202
This is not an internal IP, it will be coming externally from one of the many spam bots around the world.

Doing an IP lookup will show you roughly where.
0
 
LVL 83

Assisted Solution

by:Dave Baldwin
Dave Baldwin earned 100 total points
ID: 37825205
The first "Received:" line tells you who it came from.  It is just spam.  They faked all the other email addresses.
0
 

Author Closing Comment

by:LessonsLearned
ID: 37825227
Thank you very much.  When I pinged 192.244.203.83, I got 4 replies.  I thought that because the IP address began with 192, that it was a computer or device located in my office, but "tobyweston" said it was not an internal IP.
0
 
LVL 26

Expert Comment

by:pony10us
ID: 37825271
tobyweston is correct.  Here are the private IP address ranges:

IANA-reserved private IPv4 network ranges Start End No. of addresses
24-bit block (/8 prefix, 1 × A) 10.0.0.0 10.255.255.255 16777216
20-bit block (/12 prefix, 16 × B) 172.16.0.0 172.31.255.255 1048576
16-bit block (/16 prefix, 256 × C) 192.168.0.0 192.168.255.255 65536
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question