received a fake email from apple requesting passwords and email addres.
This is a copy of the phishing scam I received from this IP address today. "We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?. To ensure that your service is not interrupted, please update your billing information today. Confirm your account now We're available 24 hours a day, 7 days a week. If you have recently updated your billing information, please disregard this message as we are processing the changes you have made. If you need further assistance with your order." Sincerely. Amazon Security Center" The sender was MY own email address, and addressed to myself!! Spooky and fake. Beware of this scam.
198.37.147.232 Phishing Scam, requesting that I log on to my paypal account. IP address shows owned by a company with address in Bolder, CO
Phishing Scam, sent with a spoof of my own email address. copy of the email: Account Status Update. Log in to your paypal as soon as possible Hello Recently, there's been activity in your PayPal account that seems unusual compared to your normal account activities. Please log in to PayPal to confirm your identity and update card information. We're concerned that someone is using your PayPal account without your knowledge. Recent activity from your account seems to have occurred from a suspicious location or under circumstances that may be different than usual. What do I need to do? Click here Log in to your PayPal account as soon as possible. We may ask you to confirm information you provided when you created your account to make sure you're the account holder. We'll then ask you to change your password and security questions. Yours sincerely, PayPal Ehe links at the bottom lead to mastercard.com.au linked up to cuea.edu (apparently the Catholic University of East Africa).
Please help us keep Internet safer and cleaner by leaving a descriptive comment about 198.37.147.232 IP address
- Hacked Gmail accounts
- WordPress Hacking Attempts
- SSH Hacking Attempts
- Why Can't I See The Exact Address?
DNSBL* - is a list of IP addresses published through the Internet Domain Name Service (DNS) either as a zone file that can be used by DNS server software, or as a live DNS zone that can be queried in real-time. DNSBLs are most often used to publish the addresses of computers or networks linked to spamming; most mail server software can be configured to reject or flag messages which have been sent from a site listed on one or more such lists.
WHOIS** - is a query/response protocol that is widely used for querying databases in order to determine the registrant or assignee of Internet resources, such as a domain name, an IP address block, or an autonomous system number. WHOIS lookups were traditionally performed with a command line interface application, and network administrators predominantly still use this method, but many simplified web-based tools exist. WHOIS services are typically communicated using the Transmission Control Protocol (TCP). Servers listen to requests on the well-known port number 43.
** Approximate Geographic Location - This is NOT the exact geographical location of the person/organization with the given IP address. However, this should still give you a good idea about the area/region where this person/orgranization is located.