Spam 419/Nigeria Online fraud jwSpamSpy Contact
Email Spam Filter: |
|
|
419 Scam – Spam sources by IP address (Advance Fee Fraud)
- About the 419 scam
- Email addresses used by 419 scammers
- Phone numbers used by 419 scammers
- Company names mentioned in 419 spam
- How to report 419 spam to us
- Frequently asked Questions (419 FAQ)
- IP addresses / ISPs used by 419 scammers
- Domains registered by 419 scammers
- Names of people mentioned in 419 spam
- Opinions about the scammers and their victims
- What can you do when you receive 419 spam
The criminals who perpetrate "419" fraud try to conceal their identity by using disposable webmail accounts, insecure PHP-Nuke servers and internet service providers with inadequate abuse handling procedures.
We track scammers by email addresses. Spam recipients can easily search for these and find them on our list of known fraud email addresses. They can also file abuse complaints to get these accounts shut down, which interrupts many scams. That also means new email addresses get created at a rapid pace. We add about 2000 new scam email addresses per week, which gives you a rough idea how many criminals are involved.
We also track scammers by IP address wherever possible. These IP addresses are much more static, as criminals use the same internet cafes to send and receive email. We will try to document some ISPs here whose networks are frquently abuse by 419 scammers.
|
Gilat Satcom is a broadband satellite ISP based in Israel that provides Internet connections to many customers in West Africa, including many Nigerian internet cafes.
Gilat-ART270
80.179.102.243 - El Gordo
80.179.102.131 - [email protected] (BidPay scam)
Gilat-ART1707 (80.179.102.96 - 80.179.102.127)
80.179.102.100 - [email protected] (violin teacher scam)
| 2006-10-17 09:03:26 UTC | [email protected] |
| 2006-10-18 12:10:46 UTC | [email protected] |
| 2006-10-30 14:08:19 UTC | [email protected] |
| 2007-01-02 15:41:14 UTC | [email protected] |
| 2007-01-03 13:25:05 UTC | [email protected] |
| 2007-01-04 19:06:24 UTC | [email protected] |
| 2007-01-04 19:06:24 UTC | [email protected] |
| 2007-01-06 10:27:43 UTC | [email protected] |
| 2007-01-06 10:27:03 UTC | [email protected] |
| 2007-01-08 09:00:57 UTC | [email protected] |
| 2007-03-20 16:45:28 UTC | [email protected] |
| 2005-03-01 23:13:53 UTC | [email protected] |
| 2005-03-01 23:17:45 UTC | [email protected] |
| 2005-03-08 06:20:17 UTC | [email protected] |
| 2005-03-09 22:16:25 UTC | [email protected] |
| 2005-03-09 23:34:10 UTC | [email protected] |
| 2005-03-12 06:42:23 UTC | [email protected] |
| 2005-03-17 17:13:18 UTC | [email protected] |
| 2005-03-31 08:07:14 UTC | [email protected] |
| 2005-04-17 01:12:15 UTC | [email protected] |
| 2005-04-25 17:38:41 UTC | [email protected] |
| 2005-04-26 01:27:28 UTC | [email protected] |
| 2005-04-27 14:09:32 UTC | [email protected] |
| 2005-04-28 09:37:20 UTC | [email protected] |
| 2005-04-28 21:41:23 UTC | [email protected] |
| 2005-05-03 02:15:18 UTC | [email protected] |
| 2005-05-04 13:54:49 UTC | [email protected] |
| 2005-05-04 14:05:03 UTC | [email protected] |
| 2005-05-05 01:13:57 UTC | [email protected] |
Gilat-ART228
80.179.103.131 - [email protected] (+872 762
919750/Fax +872 762 919751, 2005-03-12)
Gilat-ART4211 (Israel, Africa)
80.179.191.228 - SUDDEUTSCHE KLASSENLOTTERIE
80.179.191.232 - British International Lottery
Gilat-ART296 (Israel, Africa)
80.179.236.35 - Dr. Green Tito
Gilat-ART2036
80.179.242.228 - Newcastle Trust Private Bank
80.179.242.228 - Banco Platinum (Brian Lloyds, 2004-12)
80.179.242.228 - Euro American Lottery
80.179.242.228 - [email protected] (rep scam)
80.179.242.240 - Biznizz Courier Service / De Lotto
80.179.242.240 - Fred Dan <[email protected]> (dead foreigner scam)
80.179.242.243 - Alpha Express Delivery Service
80.179.242.243 - Jack Harold, mswordpromotions.com
80.179.242.243 - Edward Pinto, CAMELOTLOTTERY
80.179.242.243 - Kelvin Chestly, Trans Global Courier Services
80.179.242.244 - Castle International (2005-02)
80.179.242.244 - Banco Platinum (Brian Lloyds, 2005-02)
80.179.242.244 - [email protected] (rep scam)
80.179.242.244 - [email protected] (rep scam)
80.179.242.249 - [email protected] / Mr Donald Jones lightspeed delivery services
WHOIS details for sending network (IP 81.199.173.244):
inetnum: 81.199.172.0 - 81.199.173.255 netname: GilatSatcom-05 descr: Gilat Satcom range country: IL admin-c: TECH6-RIPE tech-c: TECH6-RIPE status: ASSIGNED PA mnt-by: AS12491-MNT mnt-lower: AS12491-MNT mnt-routes: AS12491-MNT source: RIPE # Filtered person: Tech IP Planet address: 21 Yegia Kapaim St. address: Petach-Tikva address: Israel phone: +972 3 9255015 fax-no: +972 3 9217938 abuse-mailbox: abuse(at)gilat.net nic-hdl: TECH6-RIPE mnt-by: AS12491-MNT source: RIPE # Filtered % Information related to '81.199.172.0/23AS12491' route: 81.199.172.0/23 descr: Gilat Satcom, Germany origin: AS12491 mnt-by: AS12491-MNT source: RIPE # Filtered
inetnum: 81.199.62.0 - 81.199.63.255 netname: GilatSatcom-14 descr: Gilat Satcom Range country: IL admin-c: TECH6-RIPE tech-c: TECH6-RIPE status: ASSIGNED PA mnt-by: AS12491-MNT mnt-lower: AS12491-MNT source: RIPE # Filtered person: Tech IP Planet address: 21 Yegia Kapaim St. address: Petach-Tikva address: Israel phone: +972 3 9255015 fax-no: +972 3 9217938 abuse-mailbox: abuse(at)gilat.net
| 2006-10-17 12:33:16 UTC | [email protected] |
| 2006-10-18 13:56:58 UTC | [email protected] |
| 2006-12-09 03:36:52 UTC | [email protected] |
| 2006-12-09 04:02:32 UTC | [email protected] |
| 2006-12-09 04:41:25 UTC | [email protected] |
| 2006-12-09 21:01:51 UTC | [email protected] |
| 2006-12-12 10:04:40 UTC | [email protected] |
| 2006-12-13 09:00:42 UTC | [email protected] |
| 2006-12-14 08:34:49 UTC | [email protected] |
| 2006-12-14 15:49:12 UTC | [email protected] |
| 2006-12-15 11:51:25 UTC | [email protected] |
| 2006-12-15 14:54:31 UTC | [email protected] |
| 2006-12-16 11:33:01 UTC | [email protected] |
| 2006-12-18 11:14:33 UTC | [email protected] |
| 2006-12-18 22:49:40 UTC | [email protected] |
| 2006-12-18 23:54:58 UTC | [email protected] |
| 2006-12-29 09:18:51 UTC | [email protected] |
| 2006-12-29 15:45:16 UTC | [email protected] |
| 2006-12-30 10:24:51 UTC | [email protected] |
| 2006-12-30 15:11:18 UTC | [email protected] |
| 2006-12-31 15:45:17 UTC | [email protected] |
| 2007-01-02 14:44:20 UTC | [email protected] |
| 2007-01-03 08:10:21 UTC | [email protected] |
| 2007-01-04 23:33:04 UTC | [email protected] |
| 2007-01-04 23:33:21 UTC | [email protected] |
| 2007-01-06 17:35:57 UTC | [email protected] |
| 2007-01-06 23:08:28 UTC | [email protected] |
| 2007-01-06 23:10:01 UTC | [email protected] |
| 2007-01-07 20:11:44 UTC | [email protected] |
| 2007-01-08 14:21:17 UTC | [email protected] |
| 2007-01-08 20:41:13 UTC | [email protected] |
| 2007-01-08 23:24:51 UTC | [email protected] |
| 2007-01-08 23:27:41 UTC | [email protected] |
| 2007-01-09 03:10:43 UTC | [email protected] |
| 2007-01-09 10:02:34 UTC | [email protected] |
| 2007-01-14 13:02:45 UTC | [email protected] |
| 2007-01-20 00:17:34 UTC | [email protected] |
| 2007-01-20 00:22:22 UTC | [email protected] |
| 2007-01-20 08:58:21 UTC | [email protected] |
| 2007-01-22 21:16:59 UTC | [email protected] |
| 2007-01-22 21:17:59 UTC | [email protected] |
| 2007-01-22 21:29:39 UTC | [email protected] |
| 2007-01-23 19:23:47 UTC | [email protected] |
Request: 80.178.248.138
WHOIS details for network (Gilat-Temp):
% This is the RIPE Whois query server #1. % The objects are in RPSL format. % % Note: the default output of the RIPE Whois server % is changed. Your tools may need to be adjusted. See % http://www.ripe.net/db/news/abuse-proposal-20050331.html % for more details. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Note: This output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '80.178.248.0 - 80.178.251.255' inetnum: 80.178.248.0 - 80.178.251.255 netname: Gilat-Temp descr: Please Send Abuse/SPAM complaints To [email protected] country: GB admin-c: DR5299-RIPE tech-c: DR5299-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT source: RIPE # Filtered role: DNS REG address: 25 Hsivim st. Petach-Tiikva, Israel remarks: trouble: [email protected] admin-c: GE2074-RIPE tech-c: IB737-RIPE tech-c: AG914-RIPE nic-hdl: DR5299-RIPE mnt-by: AS9116-MNT source: RIPE # Filtered abuse-mailbox: [email protected] % Information related to '80.178.248.0/24AS9116' route: 80.178.248.0/24 descr: Golden Lines origin: AS9116 mnt-by: AS9116-MNT source: RIPE # Filtered
Email addresses by date/time for IP address:
| 2005-09-16 07:42:53 UTC | [email protected] |
| 2005-09-16 22:37:04 UTC | [email protected] |
| 2005-09-21 22:33:47 UTC | [email protected] |
| 2005-09-21 23:58:23 UTC | [email protected] |
| 2005-09-22 00:10:28 UTC | [email protected] |
| 2005-10-04 10:52:40 UTC | [email protected] |
| 2005-10-06 00:35:20 UTC | [email protected] |
| 2005-10-07 01:11:57 UTC | [email protected] |
| 2005-10-07 23:07:27 UTC | [email protected] |
| 2005-10-07 23:08:08 UTC | [email protected] |
| 2005-10-07 23:08:51 UTC | [email protected] |
| 2005-11-20 12:43:08 UTC | [email protected] |
Email addresses by date/time for IP address:
| 2007-01-25 13:41:23 UTC | [email protected] |
| 2007-01-27 00:28:26 UTC | [email protected] |
| 2007-01-28 10:57:52 UTC | [email protected] |
| 2007-01-28 10:58:03 UTC | [email protected] |
| 2007-01-28 11:21:01 UTC | [email protected] |
| 2007-01-28 11:21:33 UTC | [email protected] |
| 2007-01-28 11:22:21 UTC | [email protected] |
| 2007-01-29 15:04:26 UTC | [email protected] |
| 2007-01-30 09:14:13 UTC | [email protected] |
| 2007-01-30 09:14:44 UTC | [email protected] |
| 2007-01-30 14:47:40 UTC | [email protected] |
| 2007-01-31 02:30:19 UTC | [email protected] |
| 2007-01-31 14:13:00 UTC | [email protected] |
| 2007-02-01 08:11:49 UTC | [email protected] |
| 2007-02-01 08:12:03 UTC | [email protected] |
| 2007-02-01 15:42:33 UTC | [email protected] |
| 2007-02-03 22:01:07 UTC | [email protected] |
| 2007-02-07 09:12:34 UTC | [email protected] |
| 2007-02-07 09:28:02 UTC | [email protected] |
| 2007-02-12 20:00:26 UTC | [email protected] |
| 2007-02-13 02:45:05 UTC | [email protected] |
| 2007-02-13 02:45:35 UTC | [email protected] |
| 2007-02-13 03:54:20 UTC | [email protected] |
| 2007-02-13 03:55:17 UTC | [email protected] |
| 2007-02-14 08:51:30 UTC | [email protected] |
| 2007-02-14 15:49:59 UTC | [email protected] |
| 2007-02-14 22:52:57 UTC | [email protected] |
| 2007-02-15 13:00:16 UTC | [email protected] |
| 2007-02-15 21:05:17 UTC | [email protected] |
| 2007-02-16 07:40:21 UTC | [email protected] |
| 2007-02-16 07:40:27 UTC | [email protected] |
| 2007-02-16 07:40:46 UTC | [email protected] |
Email addresses by date/time for IP address:
| 2007-04-12 13:20:06 UTC | [email protected] |
| 2007-04-12 14:00:44 UTC | [email protected] |
|