ForumPostersUnion.com

AnthonyCea · #**161** 02-11-2007, 10:03 AM

Spam harvesting bots and content scraper crawlers using WisenutBot user agent to spoof and to fool webmasters!

11:57 AM Guest Viewing Thread
220.93.19.102
Mozilla/4.0 compatible ZyBorg/1.0 (ZyBorg@WISEnutbot.com; http://www.WISEnutbot.com)

11:59 AM Guest Registering
218.204.249.28
Mozilla/4.0 compatible ZyBorg/1.0 (ZyBorg@WISEnutbot.com; http://www.WISEnutbot.com)

11:58 AM Guest Viewing Thread
200.78.101.248
Mozilla/4.0 compatible ZyBorg/1.0 (ZyBorg@WISEnutbot.com; http://www.WISEnutbot.com)

AnthonyCea · #**162** 02-12-2007, 08:30 AM

The IP and user agent below is a bot that scans your server for AW Stats PERL components.

09:35 AM Guest Unknown Location
/links/browselinks.php?site=http://stanlley.ubbihp.com.br/cse.jpg? 202.116.3.101
DataCha0s/2.0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

This guy is a scraper bot operator.

09:35 AM Guest Viewing Index
213.140.56.3
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

09:38 AM Guest Viewing Index
64.76.51.12
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

09:38 AM Guest Registering
72.21.41.170 reverse.layeredtech.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

09:36 AM Guest Viewing Index
211.136.152.62
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Spammer using cable TV IP from Canada and Proxy at the same time

01:31 PM Guest Registering 203.138.90.141
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

01:31 PM Guest Viewing Index
201.209.173.69
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

AnthonyCea · #**163** 02-12-2007, 10:10 PM

12:07 AM Guest Creating Thread
Adsense/Adwords 59.93.196.17
Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Ta

AnthonyCea · #**164** 02-13-2007, 08:01 AM

Spammer or content scraper bot operator out of Russia

09:47 AM Guest Registering 58.65.95.162
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) NS8/0.9.6

09:42 AM Guest Viewing Index
Forum Posters Union 218.75.63.106
Mozilla/0.6 Beta (Windows)

09:39 AM Guest Registering 80.80.111.129
Mozilla/0.6 Beta (Windows)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

10:24 AM Guest Viewing Index
Forum Posters Union 205.251.237.122
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

11:37 AM Guest Registering 201.17.186.251
Mozilla/2.0 compatible; Check&Get 1.14 (Windows NT)

11:36 AM Guest Viewing Thread
Database software for development of MySQL databases 201.17.158.106
Mozilla/2.0 compatible; Check&Get 1.14 (Windows NT)

01:29 PM Guest Replying to Thread
Stopping spammers and forum scams 61.106.179.9
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.0

01:27 PM Guest Viewing Index
Forum Posters Union 201.57.111.230
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.0

AnthonyCea · #**165** 02-13-2007, 12:21 PM

02:15 PM Guest Replying to Thread
Stopping spammers and forum scams 68.185.233.193
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; APC; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET C

02:17 PM Guest Replying to Thread
Stopping spammers and forum scams 67.90.218.212
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; APC; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET C

02:26 PM Guest Registering 84.155.220.70
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; AMD64)

02:45 PM Guest Registering 195.16.57.170 ntd.co.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; APC; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET C

03:32 PM Guest Registering 200.233.52.169 user.ajato.com.br
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT) ::ELNSB50::000061100320025802a00111000000000507000 900

AnthonyCea · #**166** 02-14-2007, 09:50 PM

10:07 PM Guest Viewing Forum
Advertising Programs 60.248.94.164
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))

#**167** 02-14-2007, 11:59 PM

Quote:

Originally Posted by AnthonyCea

ThePlanet.com is famous as a base of operations for spammers

Did I ever tell you that they host my sites!!!

Did I ever tell you that under your definition of 'SPAM', I like to 'SPAM'??!!

AnthonyCea · #**168** 02-15-2007, 10:11 AM

We ban all spammers IP's here:

IP Address 66.150.160.4
Resolved Host Name route.uplinkhosting.net

11:51 AM Guest Registering 66.150.160.4
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit A

09:41 PM Guest Sending Forum Feedback 222.235.156.180
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

09:43 PM Guest Viewing Index
Forum Posters Union 220.181.31.44
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

AnthonyCea · #**169** 02-16-2007, 07:22 AM

09:10 AM Guest Registering 200.82.116.130
Mozilla/4.7 (compatible; OffByOne; Windows 2000) Webster Pro V3.4

09:21 AM Guest Replying to Thread
Open source business intelligence software 59.93.247.188
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)

09:13 AM Guest Registering 59.10.197.74
Mozilla/4.7 (compatible; OffByOne; Windows 2000) Webster Pro V3.4

09:53 AM Guest Creating Thread
General Forum Topics & Gossip 194.146.243.236 adsl-poolf243-236.vologda.ru
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

09:53 AM Guest Creating Thread
General Forum Topics & Gossip 200.103.105.102
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

10:22 AM Guest Viewing Archives 62.194.6.117
Java/1.4.1_04

10:25 AM Guest Viewing Index
Forum Posters Union 82.148.12.58
Mozilla/3.0 (compatible; Indy Library)

11:57 AM Guest Creating Thread
General Forum Administration 200.252.123.37
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2b) Gecko/20020923 Phoenix/0.1

12:17 PM Guest Viewing Forum
General Forum Administration 203.208.78.46
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.2b) Gecko/20020923 Phoenix/0.1

12:12 PM Guest Creating Thread
Search Engine Business 77.123.132.116 akin-doughnuts.volia.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

01:41 PM Guest Registering 201.11.169.180
Opera/9.00 (Windows NT 5.1; U; ru)

01:40 PM Guest Creating Thread
General Forum Topics & Gossip 83.26.73.61
Opera/9.00 (Windows NT 5.1; U; ru)

09:10 PM Guest Viewing Archives 62.163.43.213
Java/1.4.1_04

AnthonyCea · #**170** 02-17-2007, 05:51 AM

Check this clown out, he is attempting to run a posting bot to spam the forum using US based IP addresses.

07:45 AM Guest Viewing Forum
Photo Management 75.80.183.189
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:44 AM Guest Registering 66.74.66.94
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:44 AM Guest Registering 71.130.130.59
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:45 AM Guest Registering 69.221.126.122
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:45 AM Guest Registering 68.92.251.30
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:43 AM Guest Viewing Index
Forum Posters Union 71.196.44.149
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:45 AM Guest Viewing Forum
Photo Management cpe-75-80-183-189.san.res.rr.com
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:45 AM Guest Registering adsl-68-92-251-30.dsl.stlsmo.swbell.net
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:45 AM Guest Registering adsl-69-221-126-122.dsl.akrnoh.ameritech.net
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:44 AM Guest Registering ppp-71-130-130-59.dsl.irvnca.pacbell.net
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:44 AM Guest Registering cpe-66-74-66-94.socal.res.rr.com
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

07:43 AM Guest Viewing Index
Forum Posters Union c-71-196-44-149.hsd1.fl.comcast.net
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040924 Epiphany/1.4.4 (Ubuntu)

AnthonyCea · #**171** 02-17-2007, 07:22 AM

Open proxy out of Russia used by spammers.

09:05 AM Guest Registering chr-87-253-216-6.tchercom.ru
09:05 AM Guest Registering 87.253.216.6
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.9a1) Gecko/20051102 Firefox/1.6a1

AnthonyCea · #**172** 02-17-2007, 11:20 AM

12:51 PM Guest Viewing Thread
Top IP spam abusers of DNStuff.com 64.111.110.28
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)

12:51 PM Guest Viewing Index
Forum Posters Union 68.108.160.2
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)

12:51 PM Guest Viewing Index
Forum Posters Union ip68-108-160-2.lv.lv.cox.net
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)

12:51 PM Guest Viewing Thread
Top IP spam abusers of DNStuff.com milliken.dreamhost.com
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.1) Gecko/20060601 Firefox/2.0.0.1 (Ubuntu-edgy)

AnthonyCea · #**173** 02-17-2007, 01:25 PM

03:19 PM Guest Registering 145.7.4.232 ns2.kpn.net
Opera/7.21 (Windows NT 5.0; U) [en]

03:19 PM Guest Registering 145.7.4.232
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

AnthonyCea · #**174** 02-17-2007, 08:32 PM

Check this spammer out, he programmed his posting bot but was foiled by having all the following IP addresses he was using at once banned.

10:08 PM Guest Viewing Index
Forum Posters Union 219.64.117.59 chn.bb-static.vsnl.net.in
Mozilla/5.0 (Windows; U; Windows NT 5.0; de-DE; rv:1.7) Gecko/20040707 Firefox/0.9.2

10:10 PM Guest Viewing Index
Forum Posters Union 85.214.51.126 h895424.serverkompetenz.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; de-DE; rv:1.7) Gecko/20040707 Firefox/0.9.2

10:14 PM Guest Viewing Index
Forum Posters Union 71.197.110.219 hsd1.ca.comcast.net
Mozilla/5.0 (Windows; U; WinNT4.0; en-CA; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1

10:19 PM Guest Viewing Forum
Forum News Headlines 83.142.78.194 ztpnet-78-194.ztpnet.pl
Mozilla/5.0 (Windows; U; WinNT4.0; en-CA; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1

10:24 PM Guest Creating Thread
Webmaster Forum Analysis ztpnet-78-194.ztpnet.pl
Mozilla/5.0 (Windows; U; WinNT4.0; en-CA; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1

AnthonyCea · #**175** 02-18-2007, 07:34 AM

Slimebag spammer using two Blackholed open proxies on most Banned IP Blacklists.

08:55 AM Guest Registering 211.208.224.78
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050224 Firefox/1.0+

08:57 AM Guest Registering 222.117.90.219
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050224 Firefox/1.0+

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

09:44 AM Guest Viewing Index
Forum Posters Union 200.35.34.178 pipaton.ccbarranca.org.co
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.6 (build 01425); MRSPUTNIK 1, 5, 0, 19

09:45 AM Guest Registering 125.90.64.72
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.6 (build 01425); MRSPUTNIK 1, 5, 0, 19

AnthonyCea · #**176** 02-19-2007, 07:38 AM

09:29 AM Guest Registering 59.93.254.201
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))

09:29 AM Guest Registering 76.179.12.16 maine.res.rr.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))

AnthonyCea · #**177** 02-19-2007, 12:14 PM

02:10 PM Guest Viewing Index
Forum Posters Union 62.171.194.11 proxy-08.swgfl.ifl.net
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

02:03 PM Guest Viewing Index
Forum Posters Union 211.147.215.134 Server ns2.chncomm.com is refusing to answer
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

02:09 PM Guest Viewing Index
Forum Posters Union 212.22.177.2
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

09:04 PM Guest Registering 203.94.243.2
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1

09:46 PM Guest Viewing Thread
Bush Impeachment is near, Nixon over again? 222.43.246.67

10:08 PM Guest Registering 203.227.46.120
Mozilla/5.0 (Windows; U; Win 9x 4.90) Gecko/20020502 CS 2000 7.0/7.0

11:05 PM Guest Creating Thread
Advertising Programs 218.36.104.183
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2 StumbleUpon/1.9

11:03 PM Guest Registering 59.157.190.17
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2 StumbleUpon/1.9

AnthonyCea · #**178** 02-20-2007, 02:10 PM

03:59 PM Guest Creating Thread
Follow versus No Follow Links 220.247.225.132
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

03:59 PM Guest Viewing Forum
Follow versus No Follow Links 220.247.225.132
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**179** 02-20-2007, 08:56 PM

10:50 PM Guest Viewing Index
Forum Posters Union 61.82.12.97
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2 StumbleUpon/1.9

10:51 PM Guest Viewing Forum
Advertising Programs 210.96.208.127
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2 StumbleUpon/1.9

10:50 PM Guest Viewing Index
Forum Posters Union 64.118.85.13 server2008.dnslive.net
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2 StumbleUpon/1.9

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

12:17 AM Guest Registering 201.43.210.80
Opera/9.00 (Windows NT 5.1; U; en)

12:36 AM Guest Viewing Forum
General Forum Topics & Gossip 81.190.158.37
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**180** 02-21-2007, 09:16 AM

Check this scum bag spammer out, he is using 3 blacklisted open proxy IP addresses and one DSL IP out of the USA.

11:08 AM Guest Creating Thread
Tags & Tagging 218.209.20.79
Opera/9.00 (Windows NT 5.1; U; ru)

11:02 AM Guest Viewing Forum
Social Networking Intelligence 200.93.132.154
Opera/9.00 (Windows NT 5.1; U; ru)

11:03 AM Guest Viewing Forum
Social Networking Portals 124.51.104.28
Opera/9.00 (Windows NT 5.1; U; ru)

11:03 AM Guest Viewing Forum
Tags & Tagging 75.45.186.202 adsl-75-45-186-202.dsl.sfldmi.sbcglobal.net
Opera/9.00 (Windows NT 5.1; U; ru)

AnthonyCea · #**181** 02-21-2007, 11:02 AM

12:53 PM Guest Viewing Index
Forum Posters Union 84.204.28.103 ns.peterstar.ru
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1

12:57 PM Guest Registering 72.21.60.58 ns1.alrhost.com
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1

12:55 PM Guest Viewing Forum
General Forum Topics & Gossip 190.1.140.43
Mozilla/5.0 (Windows; U; Windows NT 5.2 x64; en-US; rv:1.9a1) Gecko/20060214 Firefox/1.6a1

07:33 PM Guest Registering 218.98.195.19
Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.0.6) Gecko/20060728 Firefox/1.5.0.6

AnthonyCea · #**182** 02-22-2007, 08:37 AM

10:11 AM Guest Viewing Forum
General Forum Topics & Gossip 195.189.81.190 uno.severen.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

10:19 AM Guest Creating Thread
Forum Madness & Insanity 195.189.81.190
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

10:20 AM Guest Registering 195.189.81.190
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

10:42 AM Guest Registering 58.177.176.164 http://www.senderbase.org/search?oOr...ng=ctinets.com
Opera/7.21 (Windows NT 5.0; U) [en]

10:42 AM Guest Registering 201.255.2.240
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

11:56 AM Guest Registering 12.227.240.189
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

11:56 AM Guest Registering 201.248.65.176
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

12:12 PM Guest Viewing Index
Forum Posters Union 216.147.215.194
Opera/7.54 (Windows NT 5.1; U) [pl]

12:23 PM Guest Registering 89.178.153.6 broadband.corbina.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54 [en]

01:30 PM Guest Viewing Forum
General Forum Topics & Gossip 83.167.108.1 ns02.comcor-tv.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**183** 02-22-2007, 04:03 PM

06:01 PM Guest Viewing Index
Forum Posters Union 200.196.234.43
Mozilla/2.02 [fr] (WinNT; I)

06:01 PM Guest Registering 221.4.162.243
Mozilla/2.02 [fr] (WinNT; I)

12:28 PM Guest Viewing Thread 84.148.105.105
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6

12:25 PM Guest Viewing Thread 84.147.135.194
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6

07:45 PM Guest Searching Forums 84.147.175.177
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6

07:52 PM Guest Viewing Thread 84.148.75.222
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6

08:18 PM Guest Viewing Index
Forum Posters Union 84.19.180.232 ns.km23002.keymachine.de

Information related to 84.19.176.0 - 84.19.191.255

84.147.175.
84.148.75.
84.19.176.
84.19.177.
84.19.178.
84.19.179.
84.19.180.
84.19.181.
84.19.182.
84.19.183.
84.19.185.
84.19.186.
84.19.187.
84.19.188.
84.19.189.
84.19.190.
84.19.191.

inetnum: 84.19.176.0 - 84.19.191.255
netname: DE-KEYWEB-II
descr: Keyweb AG IP Network
country: DE
admin-c: MERO-RIPE
tech-c: MERO-RIPE
status: ASSIGNED PA
mnt-by: KEYWEB-MNT
changed: **********@keyweb.de 20060217
source: RIPE

person: Holger Amberg
address: Keyweb AG
address: Neuwerkstrasse 45/46
address: 99084 Erfurt
address: Germany
e-mail: **@keyweb.de
abuse-mailbox: *****@keyweb.de
phone: +49 361 658530
fax-no: +49 361 6585366
nic-hdl: MERO-RIPE
mnt-by: KEYWEB-MNT
changed: **@keyweb.de 20050419
source: RIPE

AnthonyCea · #**184** 02-22-2007, 08:24 PM

10:05 PM Guest Creating Thread
General Forum Topics & Gossip 61.11.122.12 ppp122-12.dsl-mdu.eth.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

10:43 PM Guest Creating Thread
General Forum Topics & Gossip 88.155.37.125
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))

10:54 PM Guest Creating Thread
Advertising Programs 85.141.161.240
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

11:00 PM Guest Viewing Index
Forum Posters Union 218.75.97.210
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

61.11.122.
88.155.37.
85.141.161.
218.75.97.

AnthonyCea · #**185** 02-23-2007, 08:00 AM

09:46 AM Guest Viewing Index
Forum Posters Union 211.104.78.107
Mozilla/4.01 (Compatible; Acorn Phoenix 2.08 [intermediate]; RISC OS 4.39) Acorn-HTTP/0.84

12:49 PM Guest Viewing Forum
Webmasters & Web Development 89.223.1.72
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040707 Firefox/0.9.2 StumbleUpon/1.9

01:05 PM Guest Registering 62.64.111.233
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

01:08 PM Guest Searching Forums 204.157.11.241
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

02:15 PM Guest Viewing Index
Forum Posters Union 201.255.167.115
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

218.75.97.
211.104.78.
89.223.1.
62.64.111.
204.157.11.
201.255.167.

02:18 PM Guest Viewing Index
Forum Posters Union 208.109.104.212 ip.secureserver.net
Mozilla/5.0 (Windows; U; Windows NT 5.1; ja-JP; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

AnthonyCea · #**186** 02-24-2007, 09:15 AM

10:54 AM Guest Registering 85.21.53.8 dns1.corbina.net
Opera/9.00 (Windows NT 5.1; U; ru)

AnthonyCea · #**187** 02-24-2007, 12:34 PM

02:23 PM Guest Viewing Thread
Stopping spammers and forum scams 168.210.90.180 stpxc01.sentechsa.net
Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)

AnthonyCea · #**188** 02-24-2007, 12:39 PM

Open Proxy IP used by spammers out of Germany

02:13 PM Guest Viewing Thread 212.227.118.24 infong96.kundenserver.de

AnthonyCea · #**189** 02-24-2007, 04:37 PM

06:30 PM Guest Viewing Forum
Advertising Programs 89.178.121.17
Mozilla/4.5 [en] (Win98; I)

09:11 PM Guest Registering 58.65.236.1 myrdns.com
Mozilla/5.0(Windows;N;Win98;m18)Gecko/20010124

AnthonyCea · #**190** 02-25-2007, 06:48 AM

08:43 AM Guest Registering 200.251.239.34
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

08:43 AM Guest Registering 200.251.239.34
Opera/7.21 (Windows NT 5.0; U) [en]

08:44 AM Guest Registering 210.113.69.158
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

AnthonyCea · #**191** 02-25-2007, 08:43 AM

04:48 PM Guest Viewing Index
Forum Posters Union 94.saidcom.com

04:48 PM Guest Viewing Index
Forum Posters Union 72.237.16.94
Mozilla/5.0

AnthonyCea · #**192** 02-25-2007, 07:17 PM

09:07 PM Guest Viewing Forum
General Forum Topics & Gossip 89.178.219.21
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**193** 02-26-2007, 11:48 AM

01:40 PM Guest Creating Thread
General Forum Topics & Gossip 221.148.243.244
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Open Proxy IP on spam blacklists out of India
10:52 AM Guest Viewing Index
Forum Posters Union 202.70.198.133
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

202.136.55.155
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

02:40 PM Guest Registering 203.148.138.70
Opera/9.00 (Windows NT 4.0; U; en)

04:48 PM Guest Registering 61.155.41.35
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**194** 02-27-2007, 06:36 AM

Check out the fake user agent this spammer is using in addition to blackholed IP addresses.

08:28 AM Guest Registering 220.202.97.39
Mozilla/3.0 (compatible; NetPositive/2.2.2; BeOS)

08:24 AM Guest Viewing Index
Forum Posters Union 210.149.120.116
Mozilla/3.0 (compatible; NetPositive/2.2.2; BeOS)

08:35 AM Guest Registering 221.39.151.15
Mozilla/3.0 (compatible; NetPositive/2.2.2; BeOS)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

09:42 PM Guest Logging In 63.147.134.5
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-GB; rv:1.7.8) Gecko/20050418 Firefox/1.0.4

09:43 PM Guest Replying to Thread
Stopping spammers and forum scams 193.194.83.31
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-GB; rv:1.7.8) Gecko/20050418 Firefox/1.0.4

10:04 PM Guest Viewing Index
Forum Posters Union 121.142.240.55
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

http://psbl.surriel.com/listing?ip=124.217.71.11

08:44 PM daveson Registering 124.217.71.11
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser; Avant Browser)

08:54 PM Guest Viewing Thread
Link Exchange 124.217.71.11
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1

AnthonyCea · #**195** 02-28-2007, 05:54 AM

Spammer using same IP but different user agents to program forum posting bot.

The first record is from 2/27/2007

02:36 PM Guest Registering 195.2.114.2 livani-ap.livani.net.microlink.lv
Mozilla/3.01-C-SYMPA (Macintosh; I; PPC)

Second record from 2/28/2007

07:36 AM Guest Creating Thread
Advertising Programs 195.2.114.2 PTR= livani-ap.livani.net.microlink.lv
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.6) Gecko/20050317 Firefox/1.0.2

AnthonyCea · #**196** 02-28-2007, 06:37 AM

08:30 AM Guest Viewing Forum
General Forum Topics & Gossip 87.248.168.106
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

10:16 AM Guest Viewing Index
Forum Posters Union 210.51.181.10
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

10:17 AM Guest Viewing Index
Forum Posters Union 89.34.57.163
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

12:09 PM Guest Logging In 201.29.78.141
Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.3a) Gecko/20021207 Phoenix/0.5

01:42 PM Guest Viewing Index
Forum Posters Union 213.46.105.134
dkuuntirXfegehasbfunadyyojr

01:41 PM Guest Viewing Index
Forum Posters Union 213.46.105.134
khfrifodkw ivtbxy pyybw1ho avwgntvq

03:27 PM Guest Viewing Thread
Stopping spammers and forum scams 201.17.224.148
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

03:25 PM Guest Viewing Thread
Stopping spammers and forum scams 211.74.200.203
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

03:52 PM Guest Replying to Thread
Stopping spammers and forum scams 202.69.192.4 web.dialogsl.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

04:30 PM Guest Replying to Thread
Stopping spammers and forum scams 201.80.31.102
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

05:43 PM Guest Searching Forums 201.246.94.150
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

05:42 PM Guest Searching Forums 66.225.219.10 unknown.ord.scnet.net
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

06:41 PM Guest Logging In 222.97.56.199
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator

AnthonyCea · #**197** 03-01-2007, 07:06 AM

08:57 AM Guest Sending Forum Feedback 81.95.148.218
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.3 (build 01218))

Ref: SBL43489

81.95.144.0/20 is listed on the Spamhaus Block List (SBL)

23-Jul-2006 07:07 GMT | SR04

rbnnetwork.com / Too coin Software: iframemoney.biz / etc.

Shame shame, infecting browsers with trojans!
h t t p : / / xgbgsfmdis.biz/ dl/ xpladv737.wmf

ns1.xarwiroozc.biz [81.95.145.219]
ns1.xbtuavnxbb.biz [81.95.145.219]
ns1.xcytxcxqrb.biz [81.95.145.219]
ns1.xdnsupulub.biz [81.95.145.219]
ns1.xffsktxdul.biz [81.95.145.219]
ns2.xarwiroozc.biz [81.95.145.220]
ns2.xbtuavnxbb.biz [81.95.145.220]
ns2.xcytxcxqrb.biz [81.95.145.220]
ns2.xdnsupulub.biz [81.95.145.220]
ns2.xffsktxdul.biz [81.95.145.220]
dkadmin.biz [81.95.145.221]
xarwiroozc.biz [81.95.145.222]
xhdlkgillq.biz [81.95.145.222]
xffsktxdul.biz [81.95.145.222]
xdnsupulub.biz [81.95.145.222]
xbtuavnxbb.biz [81.95.145.222]
xgbgsfmdis.biz [81.95.145.222]
xepvdhdnzs.biz [81.95.145.222]
xcytxcxqrb.biz [81.95.145.222]
___________

buytraff.biz
iframemoney.biz
newtoolbar.biz
spyfix.biz
toolbarbest.biz

______________

81.95.145.171/32
rbnnetwork.com SR04
2006-07-23 07:07:13
SBL44765 WMF Exploit - zchxsikpgz.biz

81.95.145.216/29
rbnnetwork.com SR02
2006-06-16 21:29:35
SBL43334 iframemoney.biz

81.95.144.0/21
rbnnetwork.com SR14
2006-06-16 10:49:07
SBL43322 spam offering payment for compromising computers!

_____________

inetnum: 81.95.144.0 - 81.95.147.255
81.95.148.
81.95.144.
81.95.145.
81.95.146.
81.95.147.

netname: RBN-INFRA-NET
descr: Russian Business Network
admin-c: RBNR-ORG
tech-c: RBNR-ORG
mnt-by: RBN-MNT
status: ASSIGNED PA
country: RU
remarks: INFRA-AW
source: RIPE # Filtered

role: Russian Business Network Registry
address: Russian Business Network
address: 12 Levashovskiy pr.
address: 197110 Saint-Petersburg
address: Russia
remarks: Points of contact for RBN Network Operations
remarks: ------------------------------------------------------
remarks: Routing and peering issues: ncc@rbnnetwork.com
remarks: SPAM and Network security issues: abuse@rbnnetwork.com
remarks: Customer support: support@rbnnetwork.com
remarks: General information: info@rbnnetwork.com
remarks: ------------------------------------------------------
admin-c: ON316-RIPE
admin-c: NI212-RIPE
tech-c: MZ2231-RIPE
tech-c: NI212-RIPE
nic-hdl: RBNR-ORG
mnt-by: RBN-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@rbnnetwork.com

% Information related to '81.95.144.0/20AS40989'

route: 81.95.144.0/20
descr: TcS Network
origin: AS40989
mnt-by: RBN-MNT
source: RIPE # Filtered

______

inetnum: 81.95.144.0 - 81.95.159.255
netname: RU-RBNET-20060524
descr: Too coin Software Limited
country: RU
org: ORG-TCSL3-RIPE
admin-c: SK528-RIPE
admin-c: ON316-RIPE
tech-c: MZ2231-RIPE
tech-c: NI212-RIPE
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: RBN-MNT
mnt-routes: RBN-MNT
mnt-domains: RBN-MNT
source: RIPE # Filtered

organisation: ORG-TcSL3-RIPE
org-name: Too coin Software Limited
org-type: LIR
address: Too coin Software Limited
SHEARWAY BUSINESS PARK 16
CT19 4RH FOLKESTONE - KENT
UNITED KINGDOM
phone: +79214015843
fax-no: +13474382955
e-mail: noc@eexhost.com
admin-c: ON316-RIPE
admin-c: MZ2231-RIPE
admin-c: NI212-RIPE
admin-c: SK528-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: RBN-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Stepan Kucherenko
address: 190000, Russia, St.Petersburg
phone: +78127163698
fax-no: +13474382955
nic-hdl: SK528-RIPE
e-mail: noc@eexhost.com
source: RIPE # Filtered

person: Oleg Nechukin
address: 190000, Russia, St.Petersburg
phone: +79214015843
fax-no: +13474382955
nic-hdl: ON316-RIPE
e-mail: ripe@rbnnetwork.com
mnt-by: RBN-MNT
source: RIPE # Filtered

person: Nikolay Ivanov
address: 190000, Russia, St.Petersburg
e-mail: support@rbnnetwork.com
phone: +79214015843
nic-hdl: NI212-RIPE
mnt-by: RBN-MNT
source: RIPE # Filtered

person: Mihail Zharkih
address: 190000, Russia, St.Petersburg
phone: +79217959690
fax-no: +13474382955
nic-hdl: MZ2231-RIPE
mnt-by: RBN-MNT
source: RIPE # Filtered

% Information related to '81.95.144.0/20AS40989'

route: 81.95.144.0/20
descr: TcS Network
origin: AS40989
mnt-by: RBN-MNT
source: RIPE # Filtered

_____________

Domain Name: RBNNETWORK.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: NS1.INFOBOX.ORG
Name Server: NS2.INFOBOX.ORG
Status: ACTIVE
Updated Date: 07-jun-2006
Creation Date: 06-jun-2006
Expiration Date: 06-jun-2007

Registration Service Provided By: INFOBOX
Contact: manager@infobox.ru
Visit: http://www.infobox.ru

Domain name: rbnnetwork.com

Administrative Contact:
INFOBOX
Alexey Bakhtiarov (manager@infobox.ru)
+1.8123232323
Fax: +7.8123232323
29 Vyborgskaya Emb.
Saint-Petersburg, 194044
RU

Technical Contact:
INFOBOX
Alexey Bakhtiarov (manager@infobox.ru)
+1.8123232323
Fax: +7.8123232323
29 Vyborgskaya Emb.
Saint-Petersburg, 194044
RU

Registrant Contact:
INFOBOX
Alexey Bakhtiarov (manager@infobox.ru)
+1.8123232323
Fax: +7.8123232323
29 Vyborgskaya Emb.
Saint-Petersburg, 194044
RU

Status: Active

Name Servers:
ns1.infobox.org
ns2.infobox.org

Creation date: 06 Jun 2006 17:42:03
Expiration date: 06 Jun 2007 17:42:03

__________

Checking server [whois.neulevel.biz]
Results:
Domain Name: IFRAMEMONEY.BIZ
Domain ID: D13656822-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6576675-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6576676-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6576676-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6576677-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.NAMESELF.COM
Name Server: NS2.NAMESELF.COM
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Sat Jun 10 18:51:50 GMT 2006
Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007
Domain Last Updated Date: Fri Jun 16 11:02:16 GMT 2006

____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: SPYFIX.BIZ
Domain ID: D13383772-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6563302-SRSPLUS
Registrant Name: Jason Coffman
Registrant Organization: Private person
Registrant Address1: 908 Alder St
Registrant City: Philadelphia
Registrant State/Province: PA
Registrant Postal Code: 19147
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@toolbarbest.biz
Administrative Contact ID: 6563303-SRSPLUS
Administrative Contact Name: Jason Coffman
Administrative Contact Organization: Private person
Administrative Contact Address1: 908 Alder St
Administrative Contact City: Philadelphia
Administrative Contact State/Province: PA
Administrative Contact Postal Code: 19147
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@toolbarbest.biz
Billing Contact ID: 6563303-SRSPLUS
Billing Contact Name: Jason Coffman
Billing Contact Organization: Private person
Billing Contact Address1: 908 Alder St
Billing Contact City: Philadelphia
Billing Contact State/Province: PA
Billing Contact Postal Code: 19147
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@toolbarbest.biz
Technical Contact ID: 6563304-SRSPLUS
Technical Contact Name: Jason Coffman
Technical Contact Organization: Private person
Technical Contact Address1: 908 Alder St
Technical Contact City: Philadelphia
Technical Contact State/Province: PA
Technical Contact Postal Code: 19147
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@toolbarbest.biz
Name Server: NS1.SPYFIX.BIZ
Name Server: NS2.SPYFIX.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Mon May 15 21:30:35 GMT 2006
Domain Expiration Date: Mon May 14 23:59:59 GMT 2007
Domain Last Updated Date: Mon May 15 22:12:55 GMT 2006

___________

Checking server [whois.neulevel.biz]
Results:
Domain Name: TOOLBARBEST.BIZ
Domain ID: D11890133-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6488994-SRSPLUS
Registrant Name: Alexander Pushkin
Registrant Organization: Home Home
Registrant Address1: Pushkina str. - 1 - 1
Registrant City: Moscow
Registrant Postal Code: 123456
Registrant Country: Russian Federation
Registrant Country Code: RU
Registrant Phone Number: +78.462788201
Registrant Email: admin@newtoolbar.biz
Administrative Contact ID: 6488995-SRSPLUS
Administrative Contact Name: Alexander Pushkin
Administrative Contact Organization: Home Home
Administrative Contact Address1: Pushkina str. - 1 - 1
Administrative Contact City: Moscow
Administrative Contact Postal Code: 123456
Administrative Contact Country: Russian Federation
Administrative Contact Country Code: RU
Administrative Contact Phone Number: +78.462788201
Administrative Contact Email: admin@newtoolbar.biz
Billing Contact ID: 6488995-SRSPLUS
Billing Contact Name: Alexander Pushkin
Billing Contact Organization: Home Home
Billing Contact Address1: Pushkina str. - 1 - 1
Billing Contact City: Moscow
Billing Contact Postal Code: 123456
Billing Contact Country: Russian Federation
Billing Contact Country Code: RU
Billing Contact Phone Number: +78.462788201
Billing Contact Email: admin@newtoolbar.biz
Technical Contact ID: 6488996-SRSPLUS
Technical Contact Name: Alexander Pushkin
Technical Contact Organization: Home Home
Technical Contact Address1: Pushkina str. - 1 - 1
Technical Contact City: Moscow
Technical Contact Postal Code: 123456
Technical Contact Country: Russian Federation
Technical Contact Country Code: RU
Technical Contact Phone Number: +78.462788201
Technical Contact Email: admin@newtoolbar.biz
Name Server: NS1.TOOLBARBEST.BIZ
Name Server: NS2.TOOLBARBEST.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Fri Dec 30 06:30:45 GMT 2005
Domain Expiration Date: Fri Dec 29 23:59:59 GMT 2006
Domain Last Updated Date: Fri Dec 30 09:04:33 GMT 2005

_____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: NEWTOOLBAR.BIZ
Domain ID: D11805387-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6484261-SRSPLUS
Registrant Name: Ezhi Brozkevitsh
Registrant Organization: Ezhi Brozkevitsh
Registrant Address1: Al. Armii Ludowej 24
Registrant City: Warszawa
Registrant Postal Code: 00-609
Registrant Country: Poland
Registrant Country Code: PL
Registrant Phone Number: +21.225798400
Registrant Email: admin@buytraff.biz
Administrative Contact ID: 6484262-SRSPLUS
Administrative Contact Name: Ezhi Brozkevitsh
Administrative Contact Organization: Ezhi Brozkevitsh
Administrative Contact Address1: Al. Armii Ludowej 24
Administrative Contact City: Warszawa
Administrative Contact Postal Code: 00-609
Administrative Contact Country: Poland
Administrative Contact Country Code: PL
Administrative Contact Phone Number: +21.225798400
Administrative Contact Email: admin@buytraff.biz
Billing Contact ID: 6484262-SRSPLUS
Billing Contact Name: Ezhi Brozkevitsh
Billing Contact Organization: Ezhi Brozkevitsh
Billing Contact Address1: Al. Armii Ludowej 24
Billing Contact City: Warszawa
Billing Contact Postal Code: 00-609
Billing Contact Country: Poland
Billing Contact Country Code: PL
Billing Contact Phone Number: +21.225798400
Billing Contact Email: admin@buytraff.biz
Technical Contact ID: 6484263-SRSPLUS
Technical Contact Name: Ezhi Brozkevitsh
Technical Contact Organization: Ezhi Brozkevitsh
Technical Contact Address1: Al. Armii Ludowej 24
Technical Contact City: Warszawa
Technical Contact Postal Code: 00-609
Technical Contact Country: Poland
Technical Contact Country Code: PL
Technical Contact Phone Number: +21.225798400
Technical Contact Email: admin@buytraff.biz
Name Server: NS1.NEWTOOLBAR.BIZ
Name Server: NS2.NEWTOOLBAR.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Mon Dec 19 22:45:19 GMT 2005
Domain Expiration Date: Mon Dec 18 23:59:59 GMT 2006
Domain Last Updated Date: Tue Dec 20 11:01:01 GMT 2005

_____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: BUYTRAFF.BIZ
Domain ID: D11259227-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientHold
Registrant ID: 6449120-SRSPLUS
Registrant Name: Ezhi Brozkevitsh
Registrant Organization: Ezhi Brozkevitsh
Registrant Address1: Al. Armii Ludowej 24
Registrant City: Warszawa
Registrant Postal Code: 00-609
Registrant Country: Poland
Registrant Country Code: PL
Registrant Phone Number: +21.225798400
Registrant Email: darkgt@mail.ru
Administrative Contact ID: 6449121-SRSPLUS
Administrative Contact Name: Ezhi Brozkevitsh
Administrative Contact Organization: Ezhi Brozkevitsh
Administrative Contact Address1: Al. Armii Ludowej 24
Administrative Contact City: Warszawa
Administrative Contact Postal Code: 00-609
Administrative Contact Country: Poland
Administrative Contact Country Code: PL
Administrative Contact Phone Number: +21.225798400
Administrative Contact Email: darkgt@mail.ru
Billing Contact ID: 6449121-SRSPLUS
Billing Contact Name: Ezhi Brozkevitsh
Billing Contact Organization: Ezhi Brozkevitsh
Billing Contact Address1: Al. Armii Ludowej 24
Billing Contact City: Warszawa
Billing Contact Postal Code: 00-609
Billing Contact Country: Poland
Billing Contact Country Code: PL
Billing Contact Phone Number: +21.225798400
Billing Contact Email: darkgt@mail.ru
Technical Contact ID: 6449122-SRSPLUS
Technical Contact Name: Ezhi Brozkevitsh
Technical Contact Organization: Ezhi Brozkevitsh
Technical Contact Address1: Al. Armii Ludowej 24
Technical Contact City: Warszawa
Technical Contact Postal Code: 00-609
Technical Contact Country: Poland
Technical Contact Country Code: PL
Technical Contact Phone Number: +21.225798400
Technical Contact Email: darkgt@mail.ru
Name Server: NS1.BUYTRAFF.BIZ
Name Server: NS2.BUYTRAFF.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Thu Oct 20 18:46:16 GMT 2005
Domain Expiration Date: Thu Oct 19 23:59:59 GMT 2006
Domain Last Updated Date: Thu Dec 29 21:27:46 GMT 2005
____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: XGBGSFMDIS.BIZ
Domain ID: D13656871-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6576686-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6576687-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6576687-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6576688-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.XGBGSFMDIS.BIZ
Name Server: NS2.XGBGSFMDIS.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Sat Jun 10 18:57:53 GMT 2006
Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007
Domain Last Updated Date: Sat Jun 10 20:22:38 GMT 2006

_____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: XFFSKTXDUL.BIZ
Domain ID: D13656843-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6576682-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6576683-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6576683-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6576684-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.XFFSKTXDUL.BIZ
Name Server: NS2.XFFSKTXDUL.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Sat Jun 10 18:55:52 GMT 2006
Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007
Domain Last Updated Date: Sat Jun 10 20:22:37 GMT 2006

_____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: XDNSUPULUB.BIZ
Domain ID: D13656777-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6576665-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6576666-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6576666-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6576667-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.XDNSUPULUB.BIZ
Name Server: NS2.XDNSUPULUB.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Sat Jun 10 18:45:27 GMT 2006
Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007
Domain Last Updated Date: Sat Jun 10 20:22:34 GMT 2006

____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: XCYTXCXQRB.BIZ
Domain ID: D13656792-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6576668-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6576669-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6576669-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6576670-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.XCYTXCXQRB.BIZ
Name Server: NS2.XCYTXCXQRB.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Sat Jun 10 18:47:32 GMT 2006
Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007
Domain Last Updated Date: Sat Jun 10 20:22:35 GMT 2006

____________

Checking server [whois.neulevel.biz]
Results:
Domain Name: XBTUAVNXBB.BIZ
Domain ID: D13683328-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6577415-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6577416-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6577416-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6577417-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.XBTUAVNXBB.BIZ
Name Server: NS2.XBTUAVNXBB.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Mon Jun 12 18:20:28 GMT 2006
Domain Expiration Date: Mon Jun 11 23:59:59 GMT 2007
Domain Last Updated Date: Mon Jun 12 18:23:35 GMT 2006

_________

Checking server [whois.neulevel.biz]
Results:
Domain Name: XARWIROOZC.BIZ
Domain ID: D13656800-BIZ
Sponsoring Registrar: TLDS INC.
Sponsoring Registrar IANA ID: 320
Domain Status: clientTransferProhibited
Registrant ID: 6576671-SRSPLUS
Registrant Name: Charles Manuel
Registrant Organization: Private person
Registrant Address1: Hallman St.
Registrant City: Fairfax
Registrant State/Province: VA
Registrant Postal Code: 22030
Registrant Country: United States
Registrant Country Code: US
Registrant Phone Number: +1.74952171179
Registrant Email: admin@spyfix.biz
Administrative Contact ID: 6576672-SRSPLUS
Administrative Contact Name: Charles Manuel
Administrative Contact Organization: Private person
Administrative Contact Address1: Hallman St.
Administrative Contact City: Fairfax
Administrative Contact State/Province: VA
Administrative Contact Postal Code: 22030
Administrative Contact Country: United States
Administrative Contact Country Code: US
Administrative Contact Phone Number: +1.74952171179
Administrative Contact Email: admin@spyfix.biz
Billing Contact ID: 6576672-SRSPLUS
Billing Contact Name: Charles Manuel
Billing Contact Organization: Private person
Billing Contact Address1: Hallman St.
Billing Contact City: Fairfax
Billing Contact State/Province: VA
Billing Contact Postal Code: 22030
Billing Contact Country: United States
Billing Contact Country Code: US
Billing Contact Phone Number: +1.74952171179
Billing Contact Email: admin@spyfix.biz
Technical Contact ID: 6576673-SRSPLUS
Technical Contact Name: Charles Manuel
Technical Contact Organization: Private person
Technical Contact Address1: Hallman St.
Technical Contact City: Fairfax
Technical Contact State/Province: VA
Technical Contact Postal Code: 22030
Technical Contact Country: United States
Technical Contact Country Code: US
Technical Contact Phone Number: +1.74952171179
Technical Contact Email: admin@spyfix.biz
Name Server: NS1.XARWIROOZC.BIZ
Name Server: NS2.XARWIROOZC.BIZ
Created by Registrar: TLDS INC.
Last Updated by Registrar: TLDS INC.
Domain Registration Date: Sat Jun 10 18:49:42 GMT 2006
Domain Expiration Date: Sat Jun 09 23:59:59 GMT 2007
Domain Last Updated Date: Sat Jun 10 20:22:35 GMT 2006

_____________

A posting about these spammers
http://www.cidr-report.org/cgi-bin/as-report?as=40989

AnthonyCea · #**198** 03-02-2007, 05:03 AM

07:01 AM Guest Creating Thread
General Forum Administration 203.136.125.141
Mozilla/5.0 (X11; U; NetBSD i386; en-GB; rv:1.7) Gecko/20040708 Firefox/0.9.1

07:01 AM Guest Creating Thread
General Forum Administration 220.221.32.222
Mozilla/5.0 (X11; U; NetBSD i386; en-GB; rv:1.7) Gecko/20040708 Firefox/0.9.1

06:57 AM Guest Creating Thread
General Forum Administration 61.17.178.100
Mozilla/5.0 (X11; U; NetBSD i386; en-GB; rv:1.7) Gecko/20040708 Firefox/0.9.1

AnthonyCea · #**199** 03-02-2007, 06:36 AM

Spammer caught programming a posting bot and IP banned.

07:55 AM Guest Viewing Index
Forum Posters Union 64.191.50.141
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)

07:58 AM Guest Registering 64.191.50.141
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)

07:56 AM Guest Viewing Index
Forum Posters Union 64.191.50.141
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)

07:56 AM Guest Viewing Forum
Advertising Programs 64.191.50.141
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)

07:57 AM Guest Creating Thread
Advertising Programs 64.191.50.141
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)

AnthonyCea · #**200** 03-02-2007, 06:29 PM

08:26 PM Guest Viewing Index
Forum Posters Union 190.1.154.213
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC) Opera 5.0 [en]

08:26 PM Guest Viewing Index
Forum Posters Union 59.93.72.59
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC) Opera 5.0 [en]

08:32 PM Guest Registering 68.166.16.242 atlngahp.dynamic.covad.net
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC) Opera 5.0 [en]