CP spam, how can I track this IP
 

Don't know if this is really accurate information or not, but this CP email has this "transaction" information in it.

* * * Transaction Posted! Payment batch #: 40485692 9 E y N* * *
--------------------------------------------------
Someone (possibly you) originating from 205.33.117.77 has requested
this information to be sent to your e-mail.
R1273740:09F1V9K2
16 .es
86377527983292782756
07
Mon, 20 Jun 2005 23:00:03 +0500
5645 18562


Can anyone trace that IP or do anything with that information?

By the way that isn't my IP.

http://www.arin.net/whois/ try this site for IP tracing.

From the looks of it, this is the information you get from the IP you provided.

Search results for: 205.33.117.77
OrgName: DoD Network Information Center
OrgID: DNIC
Address: 7990 Science Applications Ct
Address: M/S CV 50
City: Vienna
StateProv: VA
PostalCode: 22183-7000
Country: US

NetRange: 205.0.0.0 - 205.117.255.255
CIDR: 205.0.0.0/10, 205.64.0.0/11, 205.96.0.0/12, 205.112.0.0/14, 205.116.0.0/15
NetName: JMCIS-BLOCK
NetHandle: NET-205-0-0-0-1
Parent: NET-205-0-0-0-0
NetType: Direct Allocation
NameServer: NCC.NCTS.NAVY.MIL
NameServer: GATE.NCTS.NAVY.MIL
NameServer: NS1.NOSC.MIL
Comment: DOD Network Information Center
Comment: Space and Naval Warfare Systems
Comment: Washington, DC 20363-5100 US
RegDate:
Updated: 2004-09-20

TechHandle: LS529-ARIN
TechName: Slade, Lawana
TechPhone: +1-850-452-7562
TechEmail: [email protected]

OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-703-676-1051
OrgTechEmail: [email protected]

# ARIN WHOIS database, last updated 2005-06-19 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database
--------------------------------------

:1orglaugh Looks like the Department of Defence?

Thanks for the info. Although it really wouldn't surprise me all that much if it turned out to be true and someone at the DOD was buying CP. Remember that FBI agent that got caught doing the same thing last week?

Reply to the email... I dont think anyone will get it, but just in case...

Embed a hidden 1x1 transparent pixel image into the email, but make sure it is
loaded in the html off of your server... (that is, dont "attach it", but embded it in html)...

When the images loads from your server after they get the reply email you sent them, log the ip that they check it from as they have to have a web browser to view
the image so you may get a better IP to track that way.

(Note: the ip will show up in your web server logs so name the file uniquely so no one else will ever be able to load it)

Probably we received the same. Was it a blue message? I reported it to ASACP.

Good reporting it to ASACP. :-)