405 comments. Current rating: (74 votes). Leave comments and/ or rate it.
Name: IP-Address 91.144.161 (...)
Address: Yoshkar Ola (but not really)
Other Comments: This is an article I wanted to write for a long time. It is not on one special scammer (or is it?). It is on an IP- address, that links several scammers on Delphi and other anti-scamsites: 91.144.161 (...).
91.144.161 (...) leads to Yoshkar-Ola, the Red City, the Centre of Scam. That´s to say... Somebody wants us to believe that! IP 91.144.161 ... is forged.
This article will be full of links. I do my best to post pictures of supposed scammers in between.
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Information related to '188.8.131.52 - 184.108.40.206'
inetnum: 220.127.116.11 - 18.104.22.168
descr: ZAO 'Company 'ER-Telecom' Yoshkar-Ola address space
status: ASSIGNED PA
changed: ******@ertelecom.ru 20070123
role: Network Operation Center CJSC ER-Telecom Company Mari El branch
address: 12, Lenina st., 424000, Yoshkar-Ola, Russia
phone: +7 8362 210035
fax-no: +7 8362 210035
changed: ***@ertelecom.ru 20070123
Why are all IP-addresses forged? All... Except the ones that lead to Yoshkar-Ola! This question is on my mind all the time. My (!) answer is: Too good to be true! It would be nice if it was. The scammingbusiness in the Mari-El Republic would be over before you blink your eyes.
Every computer has an unique IP-address. It is the fingerprint of that device in your livingroom (or whereever). It can be traced. Delphi has a build-in tracer. Just look at the information on top of this comment. I typed my (real) name into the Anonymousbox and then pushed the button 'Show city and country'. Correct! My computer is in Heerlen, The Netherlands. Since I am the one (trust me) on the keyboard...
Scammers have longer arms than mine. They claim to be in one city in the Russian Federation (or West-Africa for whom it concerns), while their computer is on the other side of the planet. Scammers don't like it when the police comes to their doorstep. They forge or hijack the IP-address/fingerprint. Yes... All IP's (including the Yoshkar-Ola ones).
Before launching my quest to IP 91.144.161.(...), I answer a question that has been asked and answered on many Delphi-threads: How do I find the IP?
First: Find the Header of your email. Here is a link to the commonly used emailsoftware. You don't find yours? Feel free to ask.
One of the links is about Project HoneyPot. Those links will keep coming back. Here's the info:
Project Honey Pot is the first and only distributed system for identifying spammers and the spambots they use to scrape addresses from your website. Using the Project Honey Pot system you can install addresses that are custom-tagged to the time and IP address of a visitor to your site. If one of these addresses begins receiving email we not only can tell that the messages are spam, but also the exact moment when the address was harvested and the IP address that gathered it.
To participate in Project Honey Pot, webmasters need only install the Project Honey Pot software somewhere on their website. We handle the rest â automatically distributing addresses and receiving the mail they generate. As a result, we anticipate installing Project Honey Pot should not increase the traffic or load to your website.
We collate, process, and share the data generated by your site with you. We also work with law enforcement authorities to track down and prosecute spammers. Harvesting email addresses from websites is illegal under several anti-spam laws, and the data resulting from Project Honey Pot is critical for finding those breaking the law.
@interested newbies, if the last octact after the third decimal is zero, it is the network, 255 is broadcast, that leaves potentially 254 addresses. A subscriber pays for one of these public addresses to his ISP, who keeps a cross-reference to each subscriber MAC address. In other words, the ISP has to provide the MAC address, hence the subscriber info to law enforcement, whenever a warrant is issued.
Dirk from Heerlen, Netherlands
Thanks. I have 30 more to go. This IP will show most of Delphi's scammers and more.