How long ago was this attempted scam? If its recent I would assume he has run out of funds to pay back his other victims
IP and login times from the OP:
Quote
IP Addresses, and times are UTC:
166.170.49.12 (2015-02-15 17:01:57.441373+00)
166.170.51.148 (2015-02-14 15:29:12.692309+00)
166.176.59.169 (2015-02-14 19:18:28.188283+00)
166.170.50.186 (2015-02-18 02:31:19.382578+00)
166.170.49.12 (2015-02-15 17:01:57.441373+00)
166.170.51.148 (2015-02-14 15:29:12.692309+00)
166.176.59.169 (2015-02-14 19:18:28.188283+00)
166.170.50.186 (2015-02-18 02:31:19.382578+00)
If this is accurate and represent actual scam attempts, we can reasonably link where the money that he's paying back with is coming from.
I wasn't paying attention to anything past the IP address
