German IP, 69.50.213.1
See header info from eBay spoof email:
Return-Path:
Received: from epoch.adminz.net ([69.50.213.1]) by mailin00.sul.t-online.de
with esmtp id 1BMaYn-1Hr3Zo0; Sun, 9 May 2004 00:44:45 +0200
Received: from nobody by epoch.adminz.net with local (Exim 4.24)
id 1BMaYk-00058X-Hc
for xxxx@t-online.de; Sat, 08 May 2004 15:44:42 -0700
To: xxxx@t-online.de
Subject: xxxx@t-online.de - Paypal account limited.
From: security@paypal.com
Message-Id:
Date: Sat, 08 May 2004 15:44:42 -0700
X-MailScanner-Information: Please contact the ISP for more information
X-MailScanner: Found to be clean
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - epoch.adminz.net
X-AntiAbuse: Original Domain - t-online.de
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - paypal.com
X-Seen: true
Content-Type: text/html;
charset=iso-8859-1;
Thanks Calpernia.