Two IP Questions

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Fri May 04, 2007 8:30 pm

Just wondering...firstly, with the piece of text here:

Code:

Country (per IP registrar): NG [Nigeria]
Country Currency: Unknown
Country IP Range: 41.205.160.0 to 41.205.191.255
Country fraud profile: High
City (per outside source): Unknown
Country (per outside source): MU [Mauritius]

Does this mean it's coming from Nigeria or Mauritius? Also, I see a lot of people figuring out what city the mugus mail from. I use DNS and that gives me country, but where do you guys find the city?

Posted: Fri May 04, 2007 8:50 pm

Posting the whole header would be more helpful.

Posted: Fri May 04, 2007 8:55 pm

Received: from [email protected] by (206.165.97.88:25) via
web23405.mail.ird.yahoo.com (217.146.189.90:36032) with [InBox.Com SMTP
Server] id 705040257669.th88 for *removed*; Fri, 4 May 2007
11:57:18 -0800
Received: (qmail 92558 invoked by uid 60001); 4 May 2007 19:56:19 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.uk;
h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;

X-YMail-OSG: IFhLaFwVM1n9ELRVwPk_KMtWwovkk3DyX_2oKHLEqyJrrIFFOfT1xLO.epFHxYV0xA--
Received: from [41.205.188.2] by web23405.mail.ird.yahoo.com via HTTP; Fri, 04 May 2007 20:56:19 BST
Date: Fri, 4 May 2007 20:56:19 +0100 (BST)
From: spibat azziz <[email protected]>
Subject: REAL BUSINESS TRANSACTION
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1629145787-1178308579=:91871"
Content-Transfer-Encoding: 8bit
Message-ID: <[email protected]>
X-Spam-Ratio: 3.51

Posted: Fri May 04, 2007 8:59 pm

Nigeria mate....You might want to edit out your email addy.. Wink

.................................................................................................
IP Address Probable Country Additional Info
206.165.97.88 United States* Whois Google
217.146.189.90 United Kingdom* Whois Google
41.205.188.2 Nigeria* Whois Google
* The last IP listed is usually the originating IP address

Here is the text you submitted, with the IP addresses highlighted:

Received: from spibxxxxxyxxxxxxxxxxx) via
web23405.mail.ird.yahoo.com (217.146.189.90:36032) with [InBox.Com SMTP
11:57:18 -0800
Received: (qmail 92558 invoked by uid 60001); 4 May 2007 19:56:19 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
sReceived: from [41.205.188.2] by web23405.mail.ird.yahoo.com via HTTP; Fri, 04 May 2007 20:56:19 BST
Date: Fri, 4 May 2007 20:56:19 +0100 (BST)
From:
Subject: REAL BUSINESS TRANSACTION
To: [email protected]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1629145787-1178308579=:91871"
Content-Transfer-Encoding: 8bit
Message-ID: <[email protected]>
X-Spam-Ratio: 3.51

Posted: Fri May 04, 2007 9:03 pm

Thanks dude, much appreciated. It's just the IP thing I ran it through told me it was in Nigeria, or Mauritius.

Email removed...

Posted: Fri May 04, 2007 9:21 pm

IP - 41.205.188.2 - Location: Mauritius [City: ]

WIKI, http://en.wikipedia.org/wiki/Mauritius

Posted: Sat May 05, 2007 3:00 am

Whois tells me that IP is owned by Starcomms Nigeria.

Posted: Sat May 05, 2007 3:41 am

The IP is registered to use in Nigeria and registered by the African Registrar located in Mauritius City.