tracking scammers by IP number

Mark Andrews Mark_Andrews at isc.org
Thu Dec 28 23:17:53 UTC 2006


	If you are being scammed talk to the police.  These sorts of
	scams have been shut down in the past but they need to be
	reported to the authorities for that to happen.

	Mark

> Hi Bind Users.
> I am wondering if anyone on this list can advise me on a little personal
> project I'm working on at the moment:
> 
> Over the years I have been contacted by people who have responded to my
> profile on various internet dating sites pretending to be beautiful Russian
> princesses trying desperately to flee their lives of hardship in Russia into
> a wholesome marriage in a first-world country such as Australia, where I
> happen to live.
> 
> For the last few days I have been corresponding with a person who calls
> him/herself 'Natalya,' uses a yahoo email address, claims to be in Omsk,
> Russia, but whose email headers show in fact his/her messages are coming
> from various servers in the US.
> 
> My question is this: beyond collecting IP numbers for my own curiosity &
> watching on a map the various originating locations of these messages, what
> can I do to have these people actually put into a lovely US prison?
> 
> The originating headers always look something like this:
> 
> Received: from unknown (HELO 127.0.0.1) (drobotnat at 69.143.102.104 with
> plain)
>   by smtp111.plus.mail.re2.yahoo.com with SMTP; 28 Dec 2006 14:06:19 -0000
> X-YMail-OSG:
> xAeutlYVM1nrbM0hGg4nL0YSueszX7_Q5Pqnsg_L6tjr0BNPAyFXUjqTe4vcHI83LdQ6umEz0GZPb
> bqtCrwy93cVsZUh3m5QKT4HrZYUflT5YI5WzW2ifg--
> Date: Thu, 28 Dec 2006 16:41:43 +0300
> From: Natalya <drobotnat at yahoo.com>
> X-Mailer: The Bat! (v2.00.6)
> Reply-To: Natalya <drobotnat at yahoo.com>
> Organization: home
> X-Priority: 3 (Normal)
> Message-ID: <1567629203.20061228164143 at yahoo.com>
> To: "Alexander Harvey" <alexh19740110 at gmail.com>
> 
> Many thanks,
> 
> Alex Harvey
> UNIX Administrator
> 
> 
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org



More information about the bind-users mailing list