troubleshooting Question

Email header shows extra IP address in the Received: section

Avatar of Michael Fulton
Michael FultonFlag for United States of America asked on
* scam emailsAzure* Email Header
3 Comments1 Solution68 ViewsLast Modified:
Email Header analyzing.  
I am going through suspected phishing emails to verify that they are phishing and then find a way to block them since they were not already blocked.
Normally pretty straight forward approach.
I have one that has me baffled though with the analyzation portion.  I have attached the header.

I use two different sites to analyze the header;
https://mxtoolbox.com/
and
https://mha.azurewebsites.net

The question I have is in regards to the "Reeceived headers" section.  The first line reported by both of the above sites.
ON MXToolbox it shows the from as "server.curaduria2bogota.com.co 200.68.9.186"
On the Azure it shows a little more information "[200.68.9.186] (port=11638 helo=[192.3.24.36])"

So the question I have is what does this other IP tell me?  The 192.3.24.36.  The header says:
Received: from [200.68.9.186] (port=11638 helo=[192.3.24.36])       by
 server.curaduria2bogota.com.co

But the address of server.curaduria2bogota.com.co is 108.179.210.71 not that 192 address.

Looking for someone smarter than me for input on this.

thank you!
ASKER CERTIFIED SOLUTION
Michael Fulton
MCITP: Enterprise/Virtual Administrator

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros