Suspicious pm on forum

[Grief therapy]

Some wanker named razzar pmed me on here saying i have multiple viruses, ect... wants you to follow a link to have a free scan, ignore this dripdick, prolly trying to hack into your comp, i saw alot of others on his mailing list, seems shady, just delete it heh

[cannibus]

or he tryin 2 fuk our systems up

[cateye]

I know the site admins are playing whack-a-mole with this guy lately; they're deleting the accounts and messages as they see them. Don't click it, it'll probably just try to download malware.

[moeone]

Same here got one, also razzerman

[moses]

i got 2 of the same thing from a Dersterman

[rainbow Eric]

MannInBlackk
RazzorrMan
GafarozzMan
Dersterman

All the same crap
I would not click the link from any of these Jokers...
all the same guy i am betting

Why do these folks bother?

Rambo Eric

[BladeRunner]

MannInBlackk
RazzorrMan
GafarozzMan
Dersterman

All the same crap
I would not click the link from any of these Jokers...
all the same guy i am betting

Why do these folks bother?

Rambo Eric

Did a whois arin report on some of those guys ip numbers,
it reports the ip's are from:

This one is from a member named "Dersterman"
ip = 91.207.6.77
They seem to be coming from Amsterdam.

whois arin report:
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 91.0.0.0 - 91.255.255.255
CIDR: 91.0.0.0/8
NetName: 91-RIPE
NetHandle: NET-91-0-0-0-1

[Jack]

Did a whois arin report on some of those guys ip numbers,
it reports the ip's are from:

This one is from a member named "Dersterman"
ip = 91.207.6.77
They seem to be coming from Amsterdam.

whois arin report:
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 91.0.0.0 - 91.255.255.255
CIDR: 91.0.0.0/8
NetName: 91-RIPE
NetHandle: NET-91-0-0-0-1

Nope. You've queried the ARIN database, and all that has thrown up is that the IP you've entered is controlled not by ARIN, but by the RIPE organisation (whom is based in Amsterdam), which controls IP address space in Europe.

Querying the RIPE database with this IP displays the following. http://whois.domaintools.com/91.207.6.77

This says the IP is in a range aportioned to a hosting company in Ukraine called Steephost. Now, Ukraine is only the postal address of that outfit, their servers/customers may not necessarily be located there. Doing a WHOIS is not the same as running a GEOIP.

Furthermore it is likely that the origin is using a zombied PC/server or a botnet to mask their own identity.

[BladeRunner]

Thanks for the info Jack.
I know very little about how the internet works, only enough to get
myself in trouble.

[picmip]

Just got this PM 2 hours ago...



Hello, friend. There are viruses' activities from your computer in last few days. Strongly recommend you to scan your computer. You can find a report about your computer's security and solve every problem with it here: (link removed for obvious reasons) Forum member.


From GafarozzMan

[SuPer PuZZy]

Did a whois arin report on some of those guys ip numbers,
it reports the ip's are from:

This one is from a member named "Dersterman"
ip = 91.207.6.77
They seem to be coming from Amsterdam.

whois arin report:
OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 91.0.0.0 - 91.255.255.255
CIDR: 91.0.0.0/8
NetName: 91-RIPE
NetHandle: NET-91-0-0-0-1

[SIZE="7"]wan't me[/SIZE]:love:

[Errorist]

[SIZE="7"]wan't me[/SIZE]:love:

[color="Red"][SIZE="6"]YES I WAN'T YOU![/SIZE][/color] had 2 pm's from two of the mentioned above guys, deleted without reading, thanks for the warnings,...[bla bla long story]..., i just wanted to say hi to Puzzy
btw it wasn't me either

[gowhitesox99]

i got those pm's too... ass hats

[Unsobering]

Last night I got 3 of these. 2 about my computer being infected and 1 from some chick that wants me.

[SavageParrot]

Does anyone still open anything with a link that mentions viruses or viagra?

Maybe they deserve to get crashed for not learning anything from the 999 previous messages that they have done the same thing...