• About the 419 scam
  
• Email addresses used by 419 scammers
• Phone numbers used by 419 scammers
  
• Company names mentioned in 419 spam
  
• How to report 419 spam to us
• Frequently asked Questions (419 FAQ)
• IP addresses / ISPs used by 419 scammers
• Domains registered by 419 scammers
  
• Names of people mentioned in 419 spam
  
• Opinions about the scammers and their victims
  
• What can you do when you receive 419 spam
  
  

The criminals who perpetrate "419" fraud try to conceal their identity by using disposable webmail accounts, insecure PHP-Nuke servers and internet service providers with inadequate abuse handling procedures.

We track scammers by email addresses. Spam recipients can easily search for these and find them on our list of known fraud email addresses. They can also file abuse complaints to get these accounts shut down, which interrupts many scams. That also means new email addresses get created at a rapid pace. We add about 2000 new scam email addresses per week, which gives you a rough idea how many criminals are involved.

We also track scammers by IP address wherever possible. These IP addresses are much more static, as criminals use the same internet cafes to send and receive email. We will try to document some ISPs here whose networks are frquently abuse by 419 scammers.

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!

Bellsouth is a large broadband ISP in the USA. As of February 2007 we see it as the largest source of 419 scams within the USA.

Request: 209.214.255.22

WHOIS details for network (BELLSNET-BLK4):

OrgName:    BellSouth.net Inc. 
OrgID:      BELL
Address:    575 Morosgo Drive
City:       Atlanta
StateProv:  GA
PostalCode: 30324
Country:    US

ReferralServer: rwhois://rwhois.eng.bellsouth.net:4321

NetRange:   209.214.0.0 - 209.215.255.255 
CIDR:       209.214.0.0/15 
NetName:    BELLSNET-BLK4
NetHandle:  NET-209-214-0-0-1
Parent:     NET-209-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.BELLSOUTH.NET
NameServer: NS.ATL.BELLSOUTH.NET
NameServer: NS.MIA.BELLSOUTH.NET
NameServer: NS.RDU.BELLSOUTH.NET
RegDate:    1998-03-19
Updated:    2003-05-05

RAbuseHandle: ABUSE81-ARIN
RAbuseName:   Abuse Group 
RAbusePhone:  +1-404-499-5224
RAbuseEmail:  abuse(at)bellsouth.net 

Email addresses and date/time by IP address:

209.214.255.22
2006-01-21 01:48:16 UTC	[email protected]
2006-03-02 01:02:40 UTC	[email protected]
2006-09-01 05:06:29 UTC	[email protected]
2006-09-06 02:36:22 UTC	[email protected]
2006-09-18 11:18:32 UTC	[email protected]
2006-09-20 02:14:09 UTC	[email protected]
2006-09-20 04:59:40 UTC	[email protected]
2006-09-20 04:59:46 UTC	[email protected]
2006-09-22 01:10:44 UTC	[email protected]
2006-09-22 03:49:41 UTC	[email protected]
2006-09-22 22:45:24 UTC	[email protected]
2006-09-25 10:57:26 UTC	[email protected]
2006-09-27 23:42:19 UTC	[email protected]
2006-10-10 14:50:21 UTC	[email protected]
2006-10-18 22:10:02 UTC	[email protected]
2006-10-19 03:34:12 UTC	[email protected]
2006-10-19 03:44:00 UTC	[email protected]
2006-10-21 04:09:18 UTC	[email protected]
2006-11-18 09:41:57 UTC	[email protected]
2006-11-22 10:23:14 UTC	[email protected]
2006-11-25 03:31:10 UTC	[email protected]
2006-12-01 16:10:58 UTC	[email protected]
2006-12-15 04:05:40 UTC	[email protected]
2006-12-15 04:41:23 UTC	[email protected]

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!