419 Scam – Spam sources by IP address (Advance Fee Fraud)
The criminals who perpetrate "419" fraud try to conceal their identity by using disposable webmail accounts, insecure PHP-Nuke servers and internet service providers with inadequate abuse handling procedures.
We track scammers by email addresses. Spam recipients can easily search for these and find them on our list of known fraud email addresses. They can also file abuse complaints to get these accounts shut down, which interrupts many scams. That also means new email addresses get created at a rapid pace. We add about 2000 new scam email addresses per week, which gives you a rough idea how many criminals are involved.
We also track scammers by IP address wherever possible. These IP addresses are much more static, as criminals use the same internet cafes to send and receive email. We will try to document some ISPs here whose networks are frquently abuse by 419 scammers.
WHOIS details for network (EMP-MUL01):
inetnum: 126.96.36.199 - 188.8.131.52 netname: EMP-MUL01 descr: Network at EMP-MUL01 descr: Please report all abuse to the network admin-c country: NG admin-c: SE541-RIPE tech-c: EMP5-RIPE status: ASSIGNED PA remarks: - - - - - - - - - - - - - - - - - - remarks: Abuse address: firstname.lastname@example.org remarks: - or the admin-c of the network remarks: - - - - - - - - - - - - - - - - - - mnt-by: EMP-NOC-MNT source: RIPE # Filtered role: Emperion NOC Operator address: Emperion A/S address: Middelfartgade 7 address: 2100 Koebenhavn Oe address: DK phone: +45 3929 3530 abuse-mailbox: email@example.com admin-c: KW6968-RIPE tech-c: KW6968-RIPE tech-c: SRL7-RIPE tech-c: AJ163-RIPE tech-c: GB1283-RIPE tech-c: FL497-RIPE nic-hdl: EMP5-RIPE mnt-by: EMP-NOC-MNT source: RIPE # Filtered person: Sunny Ejemai address: 106,Ekenwan road, Benin City, Edo State. Nigeria phone: +2348023383606 phone: +2348033253370 mnt-by: EMP-NOC-MNT nic-hdl: SE541-RIPE source: RIPE # Filtered % Information related to '184.108.40.206/20AS21125' route: 220.127.116.11/20 descr: DK-EMPERION-20010828-ROUTE origin: AS21125 mnt-by: EMP-NOC-MNT source: RIPE # Filtered
Email addresses and date/time by IP address: