Link to home
Start Free TrialLog in
Avatar of litmic
litmicFlag for Hong Kong

asked on

Check the owner of ip and host name

Receive a mail from ip and host from internet. How can I check the owner of the ip, I'd like to check if it is fake mail.
ASKER CERTIFIED SOLUTION
Avatar of Mal Osborne
Mal Osborne
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Tougher than it sounds as most dodgy mail comes from IPs not registered to a particular company.

You can try getting info on the IP (websites like whois, dnsstuff etc) but it usually ends with finding out the IP belongs to a large ISP or generic company.

You should look more at the email to answer your question. Check the headers and logs on your mail server to find out:
does the senders address listed in the headers match the senders address that is displayed when you view the email?
Does the reply-to address match the FQDN of the mail server that sent it?
is the sending server a known company or some un-named random company?
did the message bounce around many servers before it reached you?
check the website attached to the senders domain (eg someone@experts-exchange.com = https://www.experts-exchange.com) and see if it looks real etc.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of litmic

ASKER

Thanks command
Avatar of litmic

ASKER

Thanks for command