Dating scammer IP-Address 91.144.161 (...)

397 comments. Current rating: (71 votes). Leave comments and/ or rate it.

Name: IP-Address 91.144.161 (...)


Email:


Address:
Yoshkar Ola (but not really)


Other Comments:
This is an article I wanted to write for a long time. It is not on one special scammer (or is it?). It is on an IP- address, that links several scammers on Delphi and other anti-scamsites: 91.144.161 (...).

91.144.161 (...) leads to Yoshkar-Ola, the Red City, the Centre of Scam. That´s to say... Somebody wants us to believe that! IP 91.144.161 ... is forged.

This article will be full of links. I do my best to post pictures of supposed scammers in between.

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '91.144.160.0 - 91.144.163.255'

inetnum: 91.144.160.0 - 91.144.163.255
netname: ERTH-YOLA-NET
descr: ZAO 'Company 'ER-Telecom' Yoshkar-Ola address space
country: RU
admin-c: ETHD12-RIPE
tech-c: ETHD12-RIPE
status: ASSIGNED PA
mnt-by: MNT-ERTHOLDING
changed: ******@ertelecom.ru 20070123
source: RIPE

role: Network Operation Center CJSC ER-Telecom Company Mari El branch
address: 12, Lenina st., 424000, Yoshkar-Ola, Russia
phone: +7 8362 210035
fax-no: +7 8362 210035
e-mail: ***@yola.ertelecom.ru
admin-c: SMS68-RIPE
tech-c: ALB49-RIPE
tech-c: AVA89-RIPE
nic-hdl: ETHD12-RIPE
changed: ***@ertelecom.ru 20070123
notify: ***@ertelecom.ru
source: RIPE
mnt-by: MNT-ERTHOLDING

% Information related to '91.144.160.0/22AS41786'

route: 91.144.160.0/22
descr: 'Company 'ER-Telecom' Yoshkar-Ola route object
origin: AS41786
mnt-by: MNT-ERTHOLDING
changed: ******@ertelecom.ru 20061025
source: RIPE

% Information related to '91.144.161.0/24AS41786'

route: 91.144.161.0/24
descr: 'Company 'ER-Telecom' Yoshkar-Ola route object
origin: AS41786
mnt-by: MNT-ERTHOLDING
changed: ****@ertelecom.ru 20080402
source: RIPE

Content-type: text/html

Comments:

You are on page 1 of 27, other pages: [1] 2 3 4 24 25 26 27

2008-04-11, 22:40:13   (updated: )

[hidden] from Netherlands

Keywords:

2008-04-11, 22:40:13   (updated: )

[hidden] from Netherlands

Keywords:

2008-04-11, 22:40:13   (updated: )

[hidden] from Netherlands

Keywords:

2008-04-12, 10:43:29

Dirk from Heerlen, Netherlands

Why are all IP-addresses forged? All... Except the ones that lead to Yoshkar-Ola! This question is on my mind all the time. My (!) answer is: Too good to be true! It would be nice if it was. The scammingbusiness in the Mari-El Republic would be over before you blink your eyes. Every computer has an unique IP-address. It is the fingerprint of that device in your livingroom (or whereever). It can be traced. Delphi has a build-in tracer. Just look at the information on top of this comment. I typed my (real) name into the Anonymousbox and then pushed the button 'Show city and country'. Correct! My computer is in Heerlen, The Netherlands. Since I am the one (trust me) on the keyboard... Scammers have longer arms than mine. They claim to be in one city in the Russian Federation (or West-Africa for whom it concerns), while their computer is on the other side of the planet. Scammers don't like it when the police comes to their doorstep. They forge or hijack the IP-address/fingerprint. Yes... All IP's (including the Yoshkar-Ola ones). Before launching my quest to IP 91.144.161.(...), I answer a question that has been asked and answered on many Delphi-threads: How do I find the IP? First: Find the Header of your email. Here is a link to the commonly used emailsoftware. You don't find yours? Feel free to ask. http://www.spamcop...e/19.html http://www.johnru.c..mail.html http://www.fraudaid..orial.htm After you found the Header, you have to trace the IP. It is the LAST number in the last paragraph of your Header: Received from [ ]. http://www.wikihow...P-Address Then use a tracer of your choice. Here are two good ones: http://www.db.ripe.net/whois http://dnsstuff.com/ Have fun. Here we go...

2008-04-12, 10:56:17

Dirk from Heerlen, Netherlands

IP 91.144.161.128 Location: Russian Federation (high) [City: Yoshkar-Ola, Mariy-El] NO. Look at this http://www.dnsstuff..4.161.128 What Google does... http://www.delphifa..tml?p=131 http://www.delphifa..357.shtml http://www.romances..hp?t=7051 http://www.cheboksa..33,page=2 http://www.romances..hp?t=7250 http://www.projecth..79c832ad9 This image was also posted here: Dating scammer Natalya Solce Dating scammer Vika from Cheboksary Keywords:

2008-04-12, 10:59:22

Dirk from Netherlands

One of the links is about Project HoneyPot. Those links will keep coming back. Here's the info: Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to your site. If one of these addresses begins receiving email we not only can tell that the messages are spam, but also the exact moment when the address was harvested and the IP address that gathered it. To participate in Project Honey Pot, webmasters need only install the Project Honey Pot software somewhere on their website. We handle the rest — automatically distributing addresses and receiving the mail they generate. As a result, we anticipate installing Project Honey Pot should not increase the traffic or load to your website. We collate, process, and share the data generated by your site with you. We also work with law enforcement authorities to track down and prosecute spammers. Harvesting email addresses from websites is illegal under several anti-spam laws, and the data resulting from Project Honey Pot is critical for finding those breaking the law.

2008-04-12, 11:12:42

Dirk from Heerlen, Netherlands

IP 91.144.161.129 Google! http://www.delphifa..shtml?p=1 http://www.delphifa..html?p=10 http://www.romances..hp?t=7051 http://www.romances..hp?t=6338 http://www.projecth..14183e832 Pierre, Remember this one? This image was also posted here: Dating scammer Tonya (Antonina) Keywords:

2008-04-12, 11:14:28

Dirk from Heerlen, Netherlands

Where did she come from? I posted this one... This image was also posted here: Dating scammer Ekaterina from Cheboksary Dating scammer Ekaterina from Cheboksary Keywords:

2008-04-12, 11:19:40

Dirk from Netherlands

IP 91.144.161.132 http://www.romances..hp?t=7051 http://www.romances..hp?t=7078 http://www.cheboksa..47,page=3 http://www.projecth..3528c5681

2008-04-12, 11:26:15

Dirk from Heerlen, Netherlands

IP 91.144.161.133 http://www.delphifa..618.shtml http://www.delphifa..html?p=19 http://www.cheboksa..47,page=3 http://www.romances...php?&p=2 http://www.projecth..e8c481c5c http://www.livedate..list.html

2008-04-12, 11:33:31

Dirk from Heerlen, Netherlands

IP 91.144.161.134 http://www.romances..hp?t=7469 http://www.cheboksa..47,page=3 http://www.delphifa..shtml?p=6 http://www.delphifa..shtml?p=1 http://www.mate4all..&limit=50 A lot of Dutch guys remember this one... This image was also posted here: Dating scammer Irina Keywords:

2008-04-12, 11:37:20

Dirk from Heerlen, Netherlands

Let's have a break. Thirty more to go. And I have to add a new scammer to our list. See you tomorrow.

2008-04-12, 12:17:29

OJAS from United States

2 pages of hits for 91.144.161 in http://www.metacrawler.com/ @interested newbies, if the last octact after the third decimal is zero, it is the network, 255 is broadcast, that leaves potentially 254 addresses. A subscriber pays for one of these public addresses to his ISP, who keeps a cross-reference to each subscriber MAC address. In other words, the ISP has to provide the MAC address, hence the subscriber info to law enforcement, whenever a warrant is issued.

2008-04-12, 12:56:52

Dirk from Heerlen, Netherlands

OJAS, Thanks. I have 30 more to go. This IP will show most of Delphi's scammers and more. One last personal remark for today: @my friend Peter in Germany... http://nl.youtube.c..yd9bLKqj8

2008-04-12, 14:14:51

OJAS from United States

238 delphi hits on 91.144.161* in about 2000 scammer threads. That means on average, 10% of the threads here contain an IP from that range !!

You are on page 1 of 27, other pages: [1] 2 3 4 24 25 26 27

NEW: Optional: Register   Login Email address (not necessary): Rate as Off-topic Very Helpful Helpful Ok article Not useful Very bad	Hide my email when showing my comment. Please notify me once a day about new comments on this topic. Please provide a valid email address if you select this option, or post under a registered account.
	Show city and country Show country only Hide my location
You can mark text as 'quoted' by putting [quote] .. [/quote] around it.
Please type in the code:
Please do not post inappropriate pictures. Inappropriate pictures include pictures of minors and nudity. The owner of this web site reserves the right to delete such material. Add a picture: