Virus IP addresses

[orion]

When I receive a virus and look at the e-mail's properties to see where it is coming from I often see:

Received from: abc.com (an IP address)

where abc.com is my ISP server's name, and IP address in brackets has nothing to the with my ISP. When I trace the IP address I can see where it is coming from and often many viruses come from the same IP address. Is this IP address genuine and shows where the virus has been posted.

Anyone knows ?

Harry

[Andre]

Short answer is yes the IP is real but Domain name can be forged.

Show us the headers of that virus/email and you will get a definite answer.

[wicky]

Is this IP address genuine and shows where the virus has been posted.