DelphiFAQ Home Search:

Dating scammer IP-Address 91.144.161 (...)

 

comments397 comments. Current rating: 4 stars (71 votes). Leave comments and/ or rate it.

Name: IP-Address 91.144.161 (...)


Email:


Address:
Yoshkar Ola (but not really)


Other Comments:
This is an article I wanted to write for a long time. It is not on one special scammer (or is it?). It is on an IP- address, that links several scammers on Delphi and other anti-scamsites: 91.144.161 (...).

91.144.161 (...) leads to Yoshkar-Ola, the Red City, the Centre of Scam. Thats to say... Somebody wants us to believe that! IP 91.144.161 ... is forged.

This article will be full of links. I do my best to post pictures of supposed scammers in between.

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '91.144.160.0 - 91.144.163.255'

inetnum: 91.144.160.0 - 91.144.163.255
netname: ERTH-YOLA-NET
descr: ZAO 'Company 'ER-Telecom' Yoshkar-Ola address space
country: RU
admin-c: ETHD12-RIPE
tech-c: ETHD12-RIPE
status: ASSIGNED PA
mnt-by: MNT-ERTHOLDING
changed: ******@ertelecom.ru 20070123
source: RIPE

role: Network Operation Center CJSC ER-Telecom Company Mari El branch
address: 12, Lenina st., 424000, Yoshkar-Ola, Russia
phone: +7 8362 210035
fax-no: +7 8362 210035
e-mail: ***@yola.ertelecom.ru
admin-c: SMS68-RIPE
tech-c: ALB49-RIPE
tech-c: AVA89-RIPE
nic-hdl: ETHD12-RIPE
changed: ***@ertelecom.ru 20070123
notify: ***@ertelecom.ru
source: RIPE
mnt-by: MNT-ERTHOLDING

% Information related to '91.144.160.0/22AS41786'

route: 91.144.160.0/22
descr: 'Company 'ER-Telecom' Yoshkar-Ola route object
origin: AS41786
mnt-by: MNT-ERTHOLDING
changed: ******@ertelecom.ru 20061025
source: RIPE

% Information related to '91.144.161.0/24AS41786'

route: 91.144.161.0/24
descr: 'Company 'ER-Telecom' Yoshkar-Ola route object
origin: AS41786
mnt-by: MNT-ERTHOLDING
changed: ****@ertelecom.ru 20080402
source: RIPE



Content-type: text/html

Comments:

You are on page 1 of 27, other pages: [1] 2 3 4 24 25 26 27
2008-04-11, 22:40:13   (updated: )
[hidden] from Netherlands  



Keywords:
2008-04-11, 22:40:13   (updated: )
[hidden] from Netherlands  



Keywords:
2008-04-11, 22:40:13   (updated: )
[hidden] from Netherlands  



Keywords:
2008-04-12, 10:43:29
Dirk from Heerlen, Netherlands  
Why are all IP-addresses forged? All... Except the ones that lead to Yoshkar-Ola! This question is on my mind all the time. My (!) answer is: Too good to be true! It would be nice if it was. The scammingbusiness in the Mari-El Republic would be over before you blink your eyes.

Every computer has an unique IP-address. It is the fingerprint of that device in your livingroom (or whereever). It can be traced. Delphi has a build-in tracer. Just look at the information on top of this comment. I typed my (real) name into the Anonymousbox and then pushed the button 'Show city and country'. Correct! My computer is in Heerlen, The Netherlands. Since I am the one (trust me) on the keyboard...

Scammers have longer arms than mine. They claim to be in one city in the Russian Federation (or West-Africa for whom it concerns), while their computer is on the other side of the planet. Scammers don't like it when the police comes to their doorstep. They forge or hijack the IP-address/fingerprint. Yes... All IP's (including the Yoshkar-Ola ones).

Before launching my quest to IP 91.144.161.(...), I answer a question that has been asked and answered on many Delphi-threads: How do I find the IP?

First: Find the Header of your email. Here is a link to the commonly used emailsoftware. You don't find yours? Feel free to ask.

http://www.spamcop...e/19.html

http://www.johnru.c..mail.html

http://www.fraudaid..orial.htm

After you found the Header, you have to trace the IP. It is the LAST number in the last paragraph of your Header: Received from [ ].

http://www.wikihow...P-Address

Then use a tracer of your choice. Here are two good ones:

http://www.db.ripe.net/whois

http://dnsstuff.com/

Have fun. Here we go...

2008-04-12, 10:56:17
Dirk from Heerlen, Netherlands  
2008-04-12, 10:59:22
Dirk from Netherlands  
One of the links is about Project HoneyPot. Those links will keep coming back. Here's the info:

Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to your site. If one of these addresses begins receiving email we not only can tell that the messages are spam, but also the exact moment when the address was harvested and the IP address that gathered it.

To participate in Project Honey Pot, webmasters need only install the Project Honey Pot software somewhere on their website. We handle the rest — automatically distributing addresses and receiving the mail they generate. As a result, we anticipate installing Project Honey Pot should not increase the traffic or load to your website.

We collate, process, and share the data generated by your site with you. We also work with law enforcement authorities to track down and prosecute spammers. Harvesting email addresses from websites is illegal under several anti-spam laws, and the data resulting from Project Honey Pot is critical for finding those breaking the law.

2008-04-12, 11:12:42
Dirk from Heerlen, Netherlands  
2008-04-12, 11:14:28
Dirk from Heerlen, Netherlands  
Where did she come from? I posted this one...


This image was also posted here:
Dating scammer Ekaterina from Cheboksary
Dating scammer Ekaterina from Cheboksary



Keywords:
2008-04-12, 11:19:40
Dirk from Netherlands  
2008-04-12, 11:26:15
Dirk from Heerlen, Netherlands  
2008-04-12, 11:33:31
Dirk from Heerlen, Netherlands  
2008-04-12, 11:37:20
Dirk from Heerlen, Netherlands  
Let's have a break. Thirty more to go. And I have to add a new scammer to our list.

See you tomorrow.

2008-04-12, 12:17:29
OJAS from United States  
2 pages of hits for 91.144.161 in http://www.metacrawler.com/

@interested newbies, if the last octact after the third decimal is zero, it is the network, 255 is broadcast, that leaves potentially 254 addresses. A subscriber pays for one of these public addresses to his ISP, who keeps a cross-reference to each subscriber MAC address. In other words, the ISP has to provide the MAC address, hence the subscriber info to law enforcement, whenever a warrant is issued.
2008-04-12, 12:56:52
Dirk from Heerlen, Netherlands  
OJAS,

Thanks. I have 30 more to go. This IP will show most of Delphi's scammers and more.

One last personal remark for today:

@my friend Peter in Germany...

http://nl.youtube.c..yd9bLKqj8

2008-04-12, 14:14:51
OJAS from United States  
238 delphi hits on 91.144.161* in about 2000 scammer threads. That means on average, 10% of the threads here contain an IP from that range !!
You are on page 1 of 27, other pages: [1] 2 3 4 24 25 26 27

 

 

Are you being scammed and this is your first visit here?
Read the welcome page/ primer for newbies.
Thanks to Eddie for writing it up.

Please also read Miss Marple's article about recognizing male dating scammers.

NEW: Optional: Register   Login
Email address (not necessary):

Rate as
Hide my email when showing my comment.
Please notify me once a day about new comments on this topic.
Please provide a valid email address if you select this option, or post under a registered account.
 

Show city and country
Show country only
Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:

Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity.
The owner of this web site reserves the right to delete such material.

photo Add a picture:
Picture Search

You have received photos and wonder if these photos has been posted here before? Because you suspect this could be a dating scammer, but you do not want to post this picture? Try the Picture Search