Email Spam Filter:
jwSpamSpy
Try it for free!


About spam / "419" / Blog
jwSpamSpy
Recent spam domains
Spam domain blacklist

Software
Links
joewein.de
joewein.net
Contact
Google

 

419 Scam – Spam sources by IP address (Advance Fee Fraud)

The criminals who perpetrate "419" fraud try to conceal their identity by using disposable webmail accounts, insecure PHP-Nuke servers and internet service providers with inadequate abuse handling procedures.

We track scammers by email addresses. Spam recipients can easily search for these and find them on our list of known fraud email addresses. They can also file abuse complaints to get these accounts shut down, which interrupts many scams. That also means new email addresses get created at a rapid pace. We add about 2000 new scam email addresses per week, which gives you a rough idea how many criminals are involved.

We also track scammers by IP address wherever possible. These IP addresses are much more static, as criminals use the same internet cafes to send and receive email. We will try to document some ISPs here whose networks are frquently abuse by 419 scammers.

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

Request: 209.214.255.22

This is an unusual IP address for 419 scams, since it's in the USA. A Google search shows the IP features in many scams involving classified ads, especially fake check scams.

WHOIS details for network (BELLSNET-BLK4):


OrgName:    BellSouth.net Inc. 
OrgID:      BELL
Address:    575 Morosgo Drive
City:       Atlanta
StateProv:  GA
PostalCode: 30324
Country:    US

ReferralServer: rwhois://rwhois.eng.bellsouth.net:4321

NetRange:   209.214.0.0 - 209.215.255.255 
CIDR:       209.214.0.0/15 
NetName:    BELLSNET-BLK4
NetHandle:  NET-209-214-0-0-1
Parent:     NET-209-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.BELLSOUTH.NET
NameServer: NS.ATL.BELLSOUTH.NET
NameServer: NS.MIA.BELLSOUTH.NET
NameServer: NS.RDU.BELLSOUTH.NET
Comment:    
Comment:    For Abuse Issues, email abuse(at)bellsouth.net. NO ATTACHMENTS. Include IP
Comment:    address, time/date, message header, and attack logs.
Comment:    For Subpoena Request, email ipoperations(at)bellsouth.net with "SUBPOENA" in
Comment:    the subject line. Law Enforcement Agencies ONLY, please.
RegDate:    1998-03-19
Updated:    2003-05-05

RAbuseHandle: ABUSE81-ARIN
RAbuseName:   Abuse Group 
RAbusePhone:  +1-404-499-5224
RAbuseEmail:  abuse(at)bellsouth.net 

RTechHandle: JG726-ARIN
RTechName:   Geurin, Joe 
RTechPhone:  +1-404-499-5240
RTechEmail:  ipoperations(at)bellsouth.net 

OrgAbuseHandle: ABUSE81-ARIN
OrgAbuseName:   Abuse Group 
OrgAbusePhone:  +1-404-499-5224
OrgAbuseEmail:  abuse(at)bellsouth.net

OrgTechHandle: JG726-ARIN
OrgTechName:   Geurin, Joe 
OrgTechPhone:  +1-404-499-5240
OrgTechEmail:  ipoperations(at)bellsouth.net

# ARIN WHOIS database, last updated 2007-01-20 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Email addresses and date/time by IP address:
209.214.255.22
2006-01-21 01:48:16 UTCcruz_rangler11@yahoo.ca
2006-03-02 01:02:40 UTCdesmondwilfred2@virgilio.it
2006-09-01 05:06:29 UTCralp111@yahoo.com
2006-09-06 02:36:22 UTCjeff_ojeii2212@hotmail.com
2006-09-18 11:18:32 UTCbarrtimamos_qebchamber@yahoo.co.uk
2006-09-20 02:14:09 UTCunoffice75@aim.com
2006-09-20 04:59:40 UTCjeff_ojeii117@hotmail.com
2006-09-20 04:59:46 UTCj_ojeei233@hotmail.com
2006-09-22 01:10:44 UTCharrisblessing3@virgilio.it
2006-09-22 03:49:41 UTCharrisblessing3@virgilio.it
2006-09-22 22:45:24 UTCmusanasser_jes@yahoo.co.uk
2006-09-25 10:57:26 UTCbusisho104070@yahoo.com
2006-09-27 23:42:19 UTCharrisblessing4@virgilio.it
2006-10-10 14:50:21 UTCusman_ibrahim555@yahoo.com
2006-10-18 22:10:02 UTCharrisblessing4@virgilio.it
2006-10-19 03:34:12 UTCharrisblessing4@virgilio.it
2006-10-19 03:44:00 UTCharrisblessing4@virgilio.it
2006-10-21 04:09:18 UTCharrisblessing4@virgilio.it
2006-11-18 09:41:57 UTCkate_cnl@hotmail.com
2006-11-22 10:23:14 UTCismia_iyesa@hotmail.com
2006-11-25 03:31:10 UTCdrharrisblessing1@virgilio.it
2006-12-01 16:10:58 UTCdrharrisblessing6@virgilio.it
2006-12-15 04:05:40 UTCj-ojei09881@hotmail.com
2006-12-15 04:41:23 UTCo-jeff76611@hotmail.com

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!