IP addresses in headers

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Not quite a Newb Joined: 26 Jan 2008 Posts: 35

I always use the header analysis to check where the vlad is from.

Often i get 4 or 5 IP addresses, many using many cities in Canada or USA.
How is this possible or is it they could actually be in the FSU but using a satellite service out of America.

I can also remeber one going from Norway to Finland to Germany to Italy.That really had me confused.

You cannot assume the last IP address in the analysis is actually where they are from ?

Also the persons name is that the owner/ host of the domain or the owner of the internet cafe ?

cheers

Posted: Fri Feb 29, 2008 1:01 pm

Vlads are using proxies a lot more nowadays to hide their real location. Of course, all that actually does is give you more proof they're a scammer. And yes, the details you see in the whois will be the ISP's contact details, not the address of the scammer.