Some questions about IP addresses

I have some questions that i wonder anybody can answer.

Some weeks ago i posted a thread in here (that has been deleted?).

I wrote about a person i had met on net who had a weird IP address and i didn`t know where he came from.

There is a lot of personal stuff involved with this contact that i don`t want to write about in here now.

I just have some questions.

1. Why did he have more IP addresses? He had 2 that were in US and one in Malaysia?? The Malaysian one was the right one, but why the others?

2. why did he change his IP addresse? After he saw that i was doing research to find out more about him he changed his IP addresse!? Now when search for it, it says nobody has it.

I think its a bit drastic to change the IP address, so that is why i ask.

Welcome back Nellik,

Your thread is not deleted, but I had to remove it from the public forums because there was no actual scam evidence attached to it (though there is certainly reason to suspect scam from what you posted, without seeing the actual emails, it could not be confirmed).

Looking back at your original thread and your post now, I think there is a little confusion.

Email addresses and IP addresses are two different things. An email address does not have a specific IP address that belongs to it.

A header will have multiple IP addresses. These IP addresses show how the email was routed from the sender to the receiver. The last IP address usually belongs to the computer the sender is using, unless the sender is using a proxy (which forces the email to be routed through a different server so the IP that shows up is not the sender's actual IP).

Scammers often use internet cafes to send their emails, and they may use different computers or even different cafes from one day to the next, so it is very common for IP addresses to change between emails. In addition, the headers you originally posted had some that referenced "NNFMP." Those letters are very important, because according to yahoo, they indicate a header that has most likely been forged. NNFMP is most often associated with spammers and scammers.

If you are dealing with a scammer, it is possible that he switched to a proxy to disguise his location, but it is also possible that he simply used a different computer or cafe. Some cafes do run their internet through proxies, so it is possible that the sender did not make the change himself.

In order to help you further, we would really need more background on your scenario--but if this person has asked for money at this point in time, then he's already proven himself to be a scammer.

Thank you very much for your reply i feel much more informed, if i knew you this is what i would do to thank you for that clarification

Cheers.