Thanks for your replies. Upon further review I think that the IP is probably not spoofed. I just received a scam ebay email that directs me to a scam ebay site. Below is a truncated version of the website address. I will post the entire address if it's permissable (I don't want to be accused of promoting traffic to a scam site).


http://195.22.226.174/.ws/login/security/index.htm

IP 195.22.226.174 is traced to Chisinau (a country between the Ukraine and Romania), probably the same guys. Also the header information in the ebay email give me this IP address...

85.204.159.121

A whois search of this address also says that it is from Romania. I don't think they are spoofing me. Again, probably the same guys and not a spoof. They found my ebay name and the email associated with my ebay account (and thus my paypal email address).