how to trace SCAMS ip address?

Reply #6

EXCALIBUR — Thu, 14 Sep 2006 08:00:10 GMT

sysp34

Yes, these things are not worth the trouble, best just let it go, we have all gotten such emails at one time or another, even Todd has.

Best just delete it and forget about it.

Trouble is if you open them and they have a virus or trojan, but if they don't, then all is O.K.

Just don't let anything infect your hard drive, there are some free antivirus and also antitrojan programs.

Good luck.

Fernando.

Reply #5

KY Floyd — Wed, 13 Sep 2006 17:11:49 GMT

I'd say that Raven has it right. The claimed originating IP is spoofed. A good rule of thumb is that an IP in square brackets in a received: line will be correct. In this case the IP in the square brackets in the first received line is the real origin, and it shouldn't be much of a surprise that it traces back to Nigeria. Now the problem is what you'll do with the info. I'm guessing that an ISP in Nigeria isn't going to do much to help you out.

Reply #4

MillionsWanted — Wed, 13 Sep 2006 15:06:01 GMT

I am usually using Samspade.org for looking up IP's and domains.

Reply #3

Raven62 — Wed, 13 Sep 2006 14:32:18 GMT

196.220.4.182

Information related to '196.220.0.0 - 196.220.31.255'

inetnum: 196.220.0.0 - 196.220.31.255

netname: NAL1-20060123

descr: Netcom Africa Limited

country: NG

org: ORG-NAL1-AFRINIC

admin-c: YC1-AFRINIC

tech-c: YC1-AFRINIC

status: ALLOCATED PA

mnt-by: AFRINIC-HM-MNT

mnt-lower: NAL-MNT

notify: y.choi@netcomng.com

changed: hostmaster@afrinic.net 20060123

source: AFRINIC

parent: 196.220.0.... [ More ]

Reply #2

sysp34 — Wed, 13 Sep 2006 14:20:43 GMT

thank Fibonacci

but still hard to locate the originating ip address for 213.92.5.106

Whois Record

IP Information

Record Type:IP Address

Cached Whois:2006-09-01

IP Location: Italy - Lombardia - Milano - I.net S.p.a

Reverse DNS:fe-3c.inet.it

Blacklist Status:Currently Listed (history)

Whois Record

inetnum: 213.92.5.0 - 213.92.5.127

netname: INET-NET

descr: I.NET S.p.A

descr: Via Caldera, 21/C

descr: I-20153 Milano

country: IT

admin-c

Reply #1

Fibonacci — Wed, 13 Sep 2006 14:06:42 GMT

Check a site like

dnsstuff.com

whois.net etc

or google tracing ip or such

how to trace SCAMS ip address?

sysp34 — Wed, 13 Sep 2006 14:02:39 GMT

hi everybody

i have scams lottery, is it possible to trace the scams ip address?

From britishonlinelotto01@katamail.com Tue Sep 12 22:07:47 2006

X-Apparently-To: @yahoo.com via 68.142.200.123; Wed, 13 Sep 2006 02:44:10 -0700

X-Originating-IP: [213.92.5.106]

Return-Path: <britishonlinelotto01@katamail.com>

Authentication-Results: mta304.mail.re4.yahoo.com from=katamail.com; domainkeys=neutral (no sig)

Received: from 213.92.5.106 (EHLO fe-3c.inet.it) (213.92.5.106) by mt... [ More ]