joewein.de LLC
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
 jwSpamSpy
Try it for free!

Google

 

419 Scam – Spam sources by IP address (Advance Fee Fraud)

The criminals who perpetrate "419" fraud try to conceal their identity by using disposable webmail accounts, insecure PHP-Nuke servers and internet service providers with inadequate abuse handling procedures.

We track scammers by email addresses. Spam recipients can easily search for these and find them on our list of known fraud email addresses. They can also file abuse complaints to get these accounts shut down, which interrupts many scams. That also means new email addresses get created at a rapid pace. We add about 2000 new scam email addresses per week, which gives you a rough idea how many criminals are involved.

We also track scammers by IP address wherever possible. These IP addresses are much more static, as criminals use the same internet cafes to send and receive email. We will try to document some ISPs here whose networks are frquently abuse by 419 scammers.

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

Gilat Satcom is a broadband satellite ISP based in Israel that provides Internet connections to many customers in West Africa, including many Nigerian internet cafes.

Gilat-ART270
80.179.102.243 - El Gordo
80.179.102.131 - janemaria@usa.com (BidPay scam)

Gilat-ART1707 (80.179.102.96 - 80.179.102.127)
80.179.102.100 - serahdam@consultant.com (violin teacher scam)

81.199.63.122
2006-10-17 09:03:26 UTCm_miller76@mac.com
2006-10-18 12:10:46 UTCessdaniel1@mac.com
2006-10-30 14:08:19 UTCm.oh.2@hotmail.com
2007-01-02 15:41:14 UTCkfjacob@excite.com
2007-01-03 13:25:05 UTCkfjacob@excite.com
2007-01-04 19:06:24 UTCpeterson_okolie@yahoo.co.uk
2007-01-04 19:06:24 UTCpeterson_okolie@yahoo.co.uk
2007-01-06 10:27:43 UTCabeladams7000@yahoo.com
2007-01-06 10:27:03 UTCabeladams7000@yahoo.com
2007-01-08 09:00:57 UTCenglishmanform@yahoo.co.uk
2007-03-20 16:45:28 UTCtwodevine@yahoo.com
80.179.102.100
2005-03-01 23:13:53 UTCcallsnoop@zipmail.com.br
2005-03-01 23:17:45 UTCcallsnoop@zipmail.com.br
2005-03-08 06:20:17 UTChilltophouse@zipmail.com.br
2005-03-09 22:16:25 UTCcallsnoop@zipmail.com.br
2005-03-09 23:34:10 UTCmiss_mimi@zipmail.com.br
2005-03-12 06:42:23 UTCcallsnoop@zipmail.com.br
2005-03-17 17:13:18 UTCmiss_mimi@zipmail.com.br
2005-03-31 08:07:14 UTCmimi202@zipmail.com.br
2005-04-17 01:12:15 UTCthe_secretary@contractreviewpanel.net
2005-04-25 17:38:41 UTCsuhaaraf2000@terra.com.mx
2005-04-26 01:27:28 UTCnadogeri@terra.com.mx
2005-04-27 14:09:32 UTCahmed2005@terra.com.mx
2005-04-28 09:37:20 UTCsuharafat01@tsamail.co.za
2005-04-28 21:41:23 UTCnadogeri@terra.com.mx
2005-05-03 02:15:18 UTCfrank2itua@terra.com.mx
2005-05-04 13:54:49 UTCdfawaz@tsamail.co.za
2005-05-04 14:05:03 UTCdfawaz@tsamail.co.za
2005-05-05 01:13:57 UTCmrssuharft@terra.com.mx

Gilat-ART228
80.179.103.131 - sscamilo1958@yahoo.com (+872 762 919750/Fax +872 762 919751, 2005-03-12)

Gilat-ART4211 (Israel, Africa)
80.179.191.228 - SUDDEUTSCHE KLASSENLOTTERIE
80.179.191.232 - British International Lottery

Gilat-ART296 (Israel, Africa)
80.179.236.35 - Dr. Green Tito

Gilat-ART2036
80.179.242.228 - Newcastle Trust Private Bank
80.179.242.228 - Banco Platinum (Brian Lloyds, 2004-12)
80.179.242.228 - Euro American Lottery
80.179.242.228 - leechen101@tsamail.co.za (rep scam)
80.179.242.240 - Biznizz Courier Service / De Lotto
80.179.242.240 - Fred Dan <fred.dan@email.ro> (dead foreigner scam)
80.179.242.243 - Alpha Express Delivery Service
80.179.242.243 - Jack Harold, mswordpromotions.com
80.179.242.243 - Edward Pinto, CAMELOTLOTTERY
80.179.242.243 - Kelvin Chestly, Trans Global Courier Services
80.179.242.244 - Castle International (2005-02)
80.179.242.244 - Banco Platinum (Brian Lloyds, 2005-02)
80.179.242.244 - chung.lee@zipmail.com.br (rep scam)
80.179.242.244 - lee101c@tsamail.co.za (rep scam)
80.179.242.249 - duke_edwards@myway.com / Mr Donald Jones lightspeed delivery services

WHOIS details for sending network (IP 81.199.173.244):

inetnum:        81.199.172.0 - 81.199.173.255
netname:        GilatSatcom-05
descr:          Gilat Satcom range
country:        IL
admin-c:        TECH6-RIPE
tech-c:         TECH6-RIPE
status:         ASSIGNED PA
mnt-by:         AS12491-MNT
mnt-lower:      AS12491-MNT
mnt-routes:     AS12491-MNT
source:         RIPE # Filtered

person:         Tech IP Planet
address:        21 Yegia Kapaim St.
address:        Petach-Tikva
address:        Israel
phone:          +972 3 9255015
fax-no:         +972 3 9217938
abuse-mailbox:  abuse(at)gilat.net
nic-hdl:        TECH6-RIPE
mnt-by:         AS12491-MNT
source:         RIPE # Filtered

% Information related to '81.199.172.0/23AS12491'

route:          81.199.172.0/23
descr:          Gilat Satcom, Germany
origin:         AS12491
mnt-by:         AS12491-MNT
source:         RIPE # Filtered

GilatSatcom-14:

inetnum:        81.199.62.0 - 81.199.63.255
netname:        GilatSatcom-14
descr:          Gilat Satcom Range
country:        IL
admin-c:        TECH6-RIPE
tech-c:         TECH6-RIPE
status:         ASSIGNED PA
mnt-by:         AS12491-MNT
mnt-lower:      AS12491-MNT
source:         RIPE # Filtered

person:         Tech IP Planet
address:        21 Yegia Kapaim St.
address:        Petach-Tikva
address:        Israel
phone:          +972 3 9255015
fax-no:         +972 3 9217938
abuse-mailbox:  abuse(at)gilat.net

Email history for IP address:
81.199.173.244
2006-10-17 12:33:16 UTCkraftfoods16@walla.com
2006-10-18 13:56:58 UTClindaroyal_2008@walla.com
2006-12-09 03:36:52 UTCirishlotteryboardoffice@yahoo.co.uk
2006-12-09 04:02:32 UTCirishlotteryboardoffice@yahoo.co.uk
2006-12-09 04:41:25 UTCirishlotteryboardoffice@yahoo.co.uk
2006-12-09 21:01:51 UTCjamescarter67@yahoo.co.uk
2006-12-12 10:04:40 UTCpfeels@hotmail.com
2006-12-13 09:00:42 UTCpaulroskamchambers2005@yahoo.co.uk
2006-12-14 08:34:49 UTCpaulroskamchambers2005@yahoo.co.uk
2006-12-14 15:49:12 UTCdirectorcedricmorgan@yahoo.com.ph
2006-12-15 11:51:25 UTCpaulroskamchambers2005@yahoo.co.uk
2006-12-15 14:54:31 UTCmail_armstrong1@yahoo.co.uk
2006-12-16 11:33:01 UTCpaulroskamchambers2005@yahoo.co.uk
2006-12-18 11:14:33 UTCpaulroskamchambers2005@yahoo.co.uk
2006-12-18 22:49:40 UTCjenni@reedtribe.org
2006-12-18 23:54:58 UTCmarywilliamsann9@netscape.net
2006-12-29 09:18:51 UTCcocacolaonlinegames@cocacolaplc.com
2006-12-29 15:45:16 UTCjenni@reedtribe.org
2006-12-30 10:24:51 UTCsaeedahmed_4@yahoo.com
2006-12-30 15:11:18 UTCcoordinate122@yahoo.com
2006-12-31 15:45:17 UTCcocacolaclaimscc1@yahoo.co.uk
2007-01-02 14:44:20 UTCcocacolaclaimscc1@yahoo.co.uk
2007-01-03 08:10:21 UTCgenesco_company22@yahoo.ie
2007-01-04 23:33:04 UTCjenni@reedtribe.org
2007-01-04 23:33:21 UTCjenni@reedtribe.org
2007-01-06 17:35:57 UTCmarcel_martins2@yahoo.de
2007-01-06 23:08:28 UTCjenni@reedtribe.org
2007-01-06 23:10:01 UTCjenni@reedtribe.org
2007-01-07 20:11:44 UTCjenni@reedtribe.org
2007-01-08 14:21:17 UTCcocacola_advocateadams@yahoo.co.uk
2007-01-08 20:41:13 UTCjenni@reedtribe.org
2007-01-08 23:24:51 UTCjenni@reedtribe.org
2007-01-08 23:27:41 UTCjenni@reedtribe.org
2007-01-09 03:10:43 UTCjenni@reedtribe.org
2007-01-09 10:02:34 UTCgenesco_company22@yahoo.ie
2007-01-14 13:02:45 UTClady_catherine1234@yahoo.co.uk
2007-01-20 00:17:34 UTCahmad@mansoorahmad.vossnet.co.uk
2007-01-20 00:22:22 UTCahmad@mansoorahmad.vossnet.co.uk
2007-01-20 08:58:21 UTCclaimagent_jacob@yahoo.com.hk
2007-01-22 21:16:59 UTCprizeprocessingcentre2007@yahoo.co.uk
2007-01-22 21:17:59 UTCprizeprocessingcentre2007@yahoo.co.uk
2007-01-22 21:29:39 UTCvfcsdesk003@yahoo.co.uk
2007-01-23 19:23:47 UTCvfcsdesk003@yahoo.co.uk

Request: 80.178.248.138

WHOIS details for network (Gilat-Temp):

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '80.178.248.0 - 80.178.251.255'

inetnum:        80.178.248.0 - 80.178.251.255
netname:        Gilat-Temp
descr:          Please Send Abuse/SPAM complaints To Abuse@012.net.il
country:        GB
admin-c:        DR5299-RIPE
tech-c:         DR5299-RIPE
status:         ASSIGNED PA
mnt-by:         AS9116-MNT
mnt-lower:      AS9116-MNT
source:         RIPE # Filtered

role:           DNS REG
address:        25 Hsivim st. Petach-Tiikva, Israel
remarks:        trouble:      abuse@012.net.il
admin-c:        GE2074-RIPE
tech-c:         IB737-RIPE
tech-c:         AG914-RIPE
nic-hdl:        DR5299-RIPE
mnt-by:         AS9116-MNT
source:         RIPE # Filtered
abuse-mailbox:  abuse@012.net.il

% Information related to '80.178.248.0/24AS9116'

route:          80.178.248.0/24
descr:          Golden Lines
origin:         AS9116
mnt-by:         AS9116-MNT
source:         RIPE # Filtered

Email addresses by date/time for IP address:
80.178.248.138
2005-09-16 07:42:53 UTCinfo@cross-country-express.org
2005-09-16 22:37:04 UTCmark1_phl@lloydsbankofuk.com
2005-09-21 22:33:47 UTCcharles@lambertchambers.org
2005-09-21 23:58:23 UTCinfo@cross-country-express.org
2005-09-22 00:10:28 UTCavelos010@msn.com
2005-10-04 10:52:40 UTCenquiry_uknationallotto2005@msn.com
2005-10-06 00:35:20 UTCuk_lottoinfo@msn.com
2005-10-07 01:11:57 UTCblueexpresscourier@zeepost.nl
2005-10-07 23:07:27 UTCuk_lottoinfo@msn.com
2005-10-07 23:08:08 UTCuk_lottoinfo@msn.com
2005-10-07 23:08:51 UTCuk_lottoinfo@msn.com
2005-11-20 12:43:08 UTCsadowilliams@hotmail.com

Email addresses by date/time for IP address:
81.199.172.178
2007-01-25 13:41:23 UTCmaxwelljones_fiduciaryagent@yahoo.com
2007-01-27 00:28:26 UTCscarletcourier_world@excite.com
2007-01-28 10:57:52 UTCgoodnewsministry002@yahoo.com
2007-01-28 10:58:03 UTCgoodnewsministry002@yahoo.com
2007-01-28 11:21:01 UTCgoodnewsministry002@yahoo.com
2007-01-28 11:21:33 UTCgoodnewsministry002@yahoo.com
2007-01-28 11:22:21 UTCgoodnewsministry002@yahoo.com
2007-01-29 15:04:26 UTCscarletcourier_world@excite.com
2007-01-30 09:14:13 UTCgoodnewsministry002@yahoo.com
2007-01-30 09:14:44 UTCgoodnewsministry002@yahoo.com
2007-01-30 14:47:40 UTCgoodnewsministry002@yahoo.com
2007-01-31 02:30:19 UTCuklottery_claimsdept2007@yahoo.co.uk
2007-01-31 14:13:00 UTCgoodnewsministry002@yahoo.com
2007-02-01 08:11:49 UTCgoodnewsministry002@yahoo.com
2007-02-01 08:12:03 UTCgoodnewsministry002@yahoo.com
2007-02-01 15:42:33 UTCgarycooker_worldwideclaims@yahoo.co.uk
2007-02-03 22:01:07 UTCclaimsagentwinning@yahoo.co.uk
2007-02-07 09:12:34 UTCsawei_zheng@yahoo.com.cn
2007-02-07 09:28:02 UTCsawei_zheng@yahoo.com.cn
2007-02-12 20:00:26 UTCcontact_agentedwardfring@yahoo.co.uk
2007-02-13 02:45:05 UTCgoodnewsministry002@yahoo.com
2007-02-13 02:45:35 UTCgoodnewsministry002@yahoo.com
2007-02-13 03:54:20 UTCgoodnewsministry002@yahoo.com
2007-02-13 03:55:17 UTCgoodnewsministry002@yahoo.com
2007-02-14 08:51:30 UTCcontact_agentedwardfring@yahoo.co.uk
2007-02-14 15:49:59 UTCclaimsagentdeinpaddock@yahoo.co.uk
2007-02-14 22:52:57 UTCclaimsagentdeinpaddock@yahoo.co.uk
2007-02-15 13:00:16 UTCcontact_agentedwardfring@yahoo.co.uk
2007-02-15 21:05:17 UTCclaimsagentdeinpaddock@yahoo.co.uk
2007-02-16 07:40:21 UTCgoodnewsministry002@yahoo.com
2007-02-16 07:40:27 UTCgoodnewsministry002@yahoo.com
2007-02-16 07:40:46 UTCgoodnewsministry002@yahoo.com

Email addresses by date/time for IP address:
81.199.172.187
2007-04-12 13:20:06 UTCcontact_irishclaimsagentoffice@yahoo.co.uk
2007-04-12 14:00:44 UTCscarletcourierdeliverydept3@yahoo.co.uk

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!