the thing is, the person who replied in the whatsapp didnt explicitly said he has changed his password now. just said
password changed. (that keeps me in doubt.
me to the person in screenshot to whom this account belonged to " abe tu bata raha hai ki puchh raha hai?? why do people hesitate to type/talk. par jab kisiko target karna hai, gariyana hai, negative light mai dikhana tab to paragraph par paragraph pel dete hai, nice try diddy jaise comment paas kiye jaate hair aur phir darke/sharam-se delete/edit bhi kar lete hai " )
-----------
scammer was quite adamant on paypal/crypto which give him chance to use same account but ability to bs on whether he is the same or different person.
-----------
the ip address in the whatsapp when i looked more about it points in maharashtra
------------
https://www.abuseipdb.com/check/152.58.0.194
-
The IP address
152.58.0.194 is associated with
Reliance Jio Infocomm Limited, a major mobile internet service provider in India. This IP falls within the range
152.58.0.0/16, which is allocated to Reliance Jio and is commonly used for mobile broadband connections across various regions in India.
WHOIS-Service+5WHOIS-Service+5IPAddress.com+
It's important to note that IP geolocation can sometimes be imprecise, especially with mobile networks, as IP addresses can be dynamically assigned and may not accurately reflect the user's physical location.
According to
AbuseIPDB, this IP address has been reported
twice for abusive activities, specifically for
Brute-Force SSH attacks. The reports were filed in July and August 2024, with the most recent being approximately six months ago. The confidence of abuse is listed as 0%, which may indicate limited corroborating evidence or that the reports are outdated.
-----------------
According to AbuseIPDB, this IP address has been reported twice for abusive activities, specifically for Brute-Force SSH attacks. The reports were filed in July and August 2024, with the most recent being approximately six months ago.
what does that mean???
Good question — let me explain it clearly:
- Brute-Force SSH Attacks mean someone tried to force their way into a computer or server by rapidly guessing usernames and passwords over the SSH (Secure Shell) protocol.
SSH is a secure way computers talk to each other, often used by system administrators to manage servers remotely.
- Reported twice means that two different reports were filed by individuals or systems that detected suspicious or malicious behavior coming from that IP address.
- In July and August 2024, means these hacking attempts (or suspected attempts) were detected around mid-2024, and no recent reports have been filed since then.
- Approximately six months ago (since it's now April 2025) tells us that this IP hasn't been caught doing anything suspicious recently — or at least, not reported publicly.
In simple terms:
This IP address, belonging to Reliance Jio in India, was
caught trying to hack into servers by guessing passwords about half a year ago. It hasn't been flagged recently, but it's
not fully clean in reputation either.
Would you also like me to explain what risk you face if you interacted with this IP (and how serious it might be)?
It’s important depending on how you encountered the scammer.
4o
wait does that mean person tried or someone else tried to get in their account?
Good question — here's the clear answer:
It means that
someone using that IP address tried to hack into other people's accounts or servers, not the other way around.
- The IP (152.58.0.194) was the attacker, not the victim.
- They (or someone using that internet connection) were sending thousands of password guesses trying to break into systems they did not own.
So
they were the one trying to get into others' accounts,
not someone trying to hack them.
Bottom line:
The IP you mentioned has a
history of being used for hacking attempts — which
supports your claim that the person might be a scammer.
(i had said might be a scammer to the chatgpt)
--------------
I am leaning towards that person may be same, nahi-to chatgpt galat hai. if not atleast he had tried to hack servers. also his account was online 6:41 pm today. but didnt bother to comment that he was hacked.