ForumPostersUnion.com

AnthonyCea · #**201** 03-03-2007, 05:46 AM

07:41 AM Guest Creating Thread
General Forum Topics & Gossip 86.141.121.115
Mozilla/4.0 (compatible- MSIE 6.0- Windows NT 5.1- SV1- .NET CLR 1.1.4322

07:42 AM Guest Creating Thread
General Forum Topics & Gossip 58.87.220.205
Mozilla/4.0 (compatible- MSIE 6.0- Windows NT 5.1- SV1- .NET CLR 1.1.4322

10:11 PM Guest Searching Forums 218.28.86.97
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

AnthonyCea · #**202** 03-06-2007, 09:14 AM

10:56 AM Guest Viewing Forum
Social Networking Portals 82.208.60.183 network.upl.cz
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit A

Information related to '82.208.60.0 - 82.208.63.255'

inetnum: 82.208.60.0 - 82.208.63.255
netname: HOST-SYSTEM1
descr: UPL Telecom s.r.o.
country: CZ
admin-c: CASA3-RIPE
tech-c: CASA3-RIPE
tech-c: UPL2-RIPE
status: ASSIGNED PA
source: RIPE
mnt-by: LP636-RIPE-MNT
changed: *************@casablanca.cz 20050624

role: Casablanca INT RIPE manager
address: Casablanca INT
address: Vinohradska 184, Prague 3 - 130 52
address: Czech republic
phone: +420 2 67132035
fax-no: +420 2 67132039
e-mail: **********@casablanca.cz
abuse-mailbox: *****@casablanca.cz

AnthonyCea · #**203** 03-06-2007, 09:47 AM

11:39 AM Guest Registering 200.176.17.149
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

11:40 AM Guest Registering 200.176.17.149
Opera/7.21 (Windows NT 5.0; U) [en]

01:43 PM Guest Viewing Index
Forum Posters Union 201.219.19.150
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20050512 Netscape/8.0

08:26 PM Guest Sending Forum Feedback 201.32.161.178
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.3 (build 01218))

08:20 AM Guest Logging In 59.94.98.109
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)

AnthonyCea · #**204** 03-07-2007, 07:14 AM

Spam bot attacks all blacklisted open proxy IP's or hijacked zombie computer IP's.

09:06 AM Guest Sending Forum Feedback 70.240.230.150
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.3 (build 01218))

08:57 PM Guest Sending Forum Feedback 201.29.24.38
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.3 (build 01218))

222.71.6.159

222.110.33.50

10:19 AM Guest Registering 201.21.4.168
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)

10:55 AM Guest Registering 81.88.118.106
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.5) Gecko/20031007 Firebird/0.7

AnthonyCea · #**205** 03-10-2007, 12:28 PM

02:19 PM Guest Viewing Forum 84.147.147.138 p5493938A.dip0.t-ipconnect.de
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6

02:16 PM Guest Viewing Forum 84.148.99.96 p54946360.dip.t-dialin.net
Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.10) Gecko/20050724 Firefox/1.0.6

02:34 PM Guest Creating Thread
Advertising Programs 62.141.52.248 PTR= ns.km23357-04.keymachine.de
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; T312461)

Key machine out of Germany is a major spam organization and runs spam harvesting bots, spam posting bots and content scrapers, when you find them ban their entire IP ranges as they are up to no good for sure.

ban IP range 62.141.48.0 thru 62.141.63

62.141.48.
62.141.49.
62.141.50.
62.141.51.
62.141.52.
62.141.53.
62.141.54.
62.141.55.
62.141.56.
62.141.57.
62.141.58.
62.141.59.
62.141.60.
62.141.61.
62.141.62.
62.141.63.

AnthonyCea · #**206** 03-10-2007, 02:25 PM

04:16 PM Guest Viewing Index
Forum Posters Union 72.232.234.138 PTR= 138.234.232.72.reverse.layeredtech.com
Djmakshpw wlbj cdhbrxs

04:16 PM Guest Viewing Index
Forum Posters Union 72.232.234.138
Ztpdcwo wlpgmhrz ndhzemgki

04:16 PM Guest Viewing Index
Forum Posters Union 72.232.234.138
Logar zixj wdsrxt

04:16 PM Guest Searching Forums 72.232.234.138
Suazhkpm ljqtcrwb xtksqgpo

04:16 PM Guest Viewing Index
Forum Posters Union 72.232.234.138
Ekxnqbair keop hqnjodtwp

04:16 PM Guest Viewing Index
Forum Posters Union 202.113.82.4
Djmakshpw wlbj cdhbrxs

AnthonyCea · #**207** 03-11-2007, 01:23 PM

Here are todays spam con men, there seems to be a never ending supply of these forum spammers.

03:14 PM Guest Registering 58-65-237-161.myrdns.com

03:15 PM Guest Logging In 58.65.237.161
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]

Netblock: 58.65.236.0/23 (58.65.236.0-58.65.237.255)
Record Created: Wed Dec 6 09:38:10 2006 GMT
Record Updated: Mon Mar 5 07:55:37 2007 GMT
Additional Information: mrc-au.com // bulletproff.net // best-careers.org // job SCAM spammers

03:15 PM Guest Viewing Index
Forum Posters Union 82.115.65.55
Opera/9.00 (Windows NT 4.0; U; en)

AnthonyCea · #**208** 03-11-2007, 01:51 PM

03:46 PM Guest Viewing Forum
General Forum Topics & Gossip 201.15.83.19
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Waterunicorn/0.10 StumbleUpon/1.99

03:48 PM Guest Registering 172.186.176.16
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Waterunicorn/0.10 StumbleUpon/1.99

03:45 PM Guest Viewing Index
Forum Posters Union 217.81.168.233
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Waterunicorn/0.10 StumbleUpon/1.99

03:52 PM Guest Creating Thread
General Forum Topics & Gossip 220.119.160.188
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Waterunicorn/0.10 StumbleUpon/1.99

201.15.83.
172.186.176.
217.81.168.
220.119.160.

AnthonyCea · #**209** 03-11-2007, 02:36 PM

Automated forum posting bot trying to post spam.

04:32 PM Guest Creating Thread
General Forum Topics & Gossip 12.219.23.59
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)

04:32 PM Guest Registering 74.194.157.138
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)

04:33 PM Guest Creating Thread
General Forum Topics & Gossip 207.172.197.55
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)

12.219.23.
74.194.157.
207.172.197.

AnthonyCea · #**210** 03-11-2007, 05:39 PM

07:37 PM Guest Viewing Archives 75.33.216.246
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:37 PM Guest Viewing Archives 74.135.36.132
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:37 PM Guest Viewing Index
Forum Posters Union 69.219.178.252
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:37 PM Guest Modifying Password 72.9.179.89
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:37 PM Guest Searching Forums 72.72.36.101
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:36 PM Guest Viewing Member List 59.92.56.85
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:36 PM Guest Viewing FAQ 75.81.57.43
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:36 PM Guest Viewing Index
Forum Posters Union 64.134.44.155
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:36 PM Guest Viewing Index
Forum Posters Union 67.85.66.18
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

75.33.216.
74.135.36.
69.219.178.
72.9.179.
72.72.36.
59.92.56.
75.81.57.
64.134.44.
67.85.66.

AnthonyCea · #**211** 03-13-2007, 09:06 AM

Professional spam operator based in Eastern Europe using multiple IP addresses.

10:50 AM Guest Viewing Index
Forum Posters Union 81.30.196.187
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.6) Gecko/20011128

10:51 AM Guest Registering 82.207.33.228
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.6) Gecko/20011128

AnthonyCea · #**212** 03-13-2007, 09:16 AM

Check this spamming clown out, he even uses referral spam in his user agent, could be a virus link.

10:54 AM Guest Viewing Index
Forum Posters Union 85.101.172.0
Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

10:59 AM djebo86 Viewing Thread
Jerry Bruckheimer Movie Producer 85.101.172.0
Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2

11:07 AM Guest Activating Registration 85.101.172.0
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Embedded Web Browser from: http:/bsalsa.co

82.103.132.
82.207.33.
81.30.196.
85.101.172.

09:54 AM Guest Viewing BB Code 82.103.132.52 ns1.korinna.net

09:54 AM Guest Viewing BB Code 82.103.132.52
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

AnthonyCea · #**213** 03-13-2007, 09:23 AM

11:22 AM Guest Registering 200.213.41.195
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

11:22 AM Guest Registering 75.138.119.224
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

11:22 AM Guest Registering 68.121.55.104
Opera/7.21 (Windows NT 5.0; U) [en]

AnthonyCea · #**214** 03-13-2007, 10:47 AM

Open Proxy out of Korea used by spammers, funny that he is still using Windows 95

12:39 PM Guest Viewing Forum
Advertising Programs 124.254.241.147
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

12:54 PM Guest Viewing Forum
Advertising Programs 216.32.81.18 master.g-cipher.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01

Layered Technologies, Inc. NET-216-32-64-0 (NET-216-32-64-0-1)
216.32.64.0 - 216.32.95.255
Layered Technologies SAVV-S250627-3 (NET-216-32-80-0-1)
216.32.80.0 - 216.32.95.255

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

08:40 PM Guest Viewing Thread
XOOPS = fantastic open source (free forum software)!! 203.131.137.51

AnthonyCea · #**215** 03-14-2007, 10:55 PM

Check this spammer out, he is using 3 IP's and capture software, next he will be running a spam harvesting spider!

12:38 AM Guest Viewing Index
Forum Posters Union 24.185.150.165
Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)

12:38 AM Guest Viewing Index
Forum Posters Union 200.198.212.3
Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)

12:40 AM Guest Viewing Forum
Advertising Programs 76.171.186.138
Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)

AnthonyCea · #**216** 03-15-2007, 07:13 AM

Spam con man using two blacklisted IP addresses out of Korea (open proxies).

09:12 AM Guest Registering 221.151.53.95
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

09:09 AM Guest Creating Thread
General Forum Topics & Gossip 218.238.211.82
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**217** 03-15-2007, 10:11 AM

Asshole spammers programming forum posting bots.

11:58 AM Guest Creating Thread
General Forum Topics & Gossip 82.120.104.24
Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.7.5) Gecko/20041220 K-Meleon/0.9

12:09 PM Guest Creating Thread
General Forum Topics & Gossip 201.2.219.29
Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.7.5) Gecko/20041220 K-Meleon/0.9

04:50 PM Guest Creating Thread
General Forum Topics & Gossip 201.253.35.104
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MyIE2; Deepnet Explorer)

05:02 PM Guest Creating Thread
General Forum Topics & Gossip 24.148.72.145
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MyIE2; Deepnet Explorer)

AnthonyCea · #**218** 03-16-2007, 05:30 PM

Check out this loser using Blacklisted IP addresses to spam.

07:18 PM Guest Logging In 125.143.167.82
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:18 PM Guest Viewing Index
Forum Posters Union 68.184.137.221
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

`````````````````````````````````````````````````` ``````````

Another spammer clown with a posting bot.

07:32 PM Guest Creating Thread
General Forum Topics & Gossip 66.192.6.131
Mozilla/5.0 (Windows; U; Windows NT 5.0; de-DE; rv:1.7) Gecko/20040707 Firefox/0.9.2

07:31 PM Guest Creating Thread
General Forum Topics & Gossip 69.119.123.28
Mozilla/5.0 (Windows; U; Windows NT 5.0; de-DE; rv:1.7) Gecko/20040707 Firefox/0.9.2

`````````````````````````````````````````````````` `````````

More spammers here, this one is using an open proxy out of Korea.

12:30 AM Guest Creating Thread
General Forum Topics & Gossip 222.112.211.241
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

12:32 AM Guest Viewing Index
Forum Posters Union 222.236.215.172
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

09:30 PM Guest Viewing Index
Forum Posters Union 61.97.224.242
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4

01:36 PM Guest Searching Forums 125.244.115.145
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

01:20 PM Guest Registering 201.6.15.241
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC

01:14 PM Guest Viewing Index
Forum Posters Union 201.246.252.252
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC

AnthonyCea · #**219** 03-18-2007, 10:45 PM

Keymachine.de is a major spam harvesting and content scraper operation, they have many IP ranges and all of them should be banned when found.

12:32 AM Guest Registering 87.118.112.32 ns.km30238.keymachine.de
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54 [en]

'87.118.96.0 - 87.118.127.255'

AnthonyCea · #**220** 03-19-2007, 11:53 AM

Spam operation out of Russia with Blacklisted IP

01:47 PM Guest Logging In 217.147.29.174 node174.nthost.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

Information related to '217.147.29.0 - 217.147.29.255'

inetnum: 217.147.29.0 - 217.147.29.255
netname: TEL-NET
descr: JSC TEL Company
descr: nthost.ru - TEL hosting, dedicated and collocation services
country: RU
admin-c: AMB98-RIPE
tech-c: AMB98-RIPE
status: ASSIGNED PA
notify: ***@tel.ru
notify: ****@nthost.ru
notify: *******@tel.ru
mnt-by: TEL-NET-MNT
changed: ***@tel.ru 20050926
source: RIPE

person: Andrew M Botov
address: 3, 4th str.8 March, Moscow, Russia, 125319
e-mail: ***@tel.ru
e-mail: **@tel.ru
phone: + 7 095 7874200
nic-hdl: AMB98-RIPE
changed: ****@tel.ru 20061123

03:58 PM Guest Registering 87.249.47.234
Opera/7.60 (Windows NT 5.2; U) [en] (IBM EVV/3.0/EAK01AG9/LE)

05:57 PM Guest Viewing Forum
General Forum Topics & Gossip 85.141.139.7 ppp85-141-139-7.pppoe.mtu-net.ru

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**221** 03-19-2007, 10:08 PM

12:03 AM Guest Viewing Index
Forum Posters Union 66.167.100.59
Opera/9.00 (Windows NT 4.0; U; en)

12:04 AM Guest Registering 91.124.245.119
Opera/9.00 (Windows NT 4.0; U; en)

12:02 AM Guest Viewing Index
Forum Posters Union 200.46.241.43
Opera/9.00 (Windows NT 4.0; U; en)

07:29 PM Guest Viewing Index
Forum Posters Union 59.94.252.196
Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2) Gecko/20021126

07:31 PM Guest Registering 24.208.68.127
Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2) Gecko/20021126

10:59 AM Guest Registering 200.140.61.198
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

AnthonyCea · #**222** 03-21-2007, 08:50 AM

Notice this spammer is using US based IP addresses and has access to many of them, he could be using a network of zombie computers taken over by spyware and is using those hijacked machines to commit the cyber crime, this is a way to keep from being caught and prosecuted for spamming.

10:49 AM Guest Viewing Thread
The Oil Industry and the Cheney White House c-71-235-45-102.hsd1.ct.comcast.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:49 AM Guest Creating Thread
Advertising Programs ip68-99-2-129.om.om.cox.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:48 AM Guest Registering adsl-69-208-142-184.dsl.ipltin.ameritech.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:48 AM Guest Registering c-67-181-223-110.hsd1.ca.comcast.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:49 AM Guest Creating Thread
Advertising Programs 68.99.2.129
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:49 AM Guest Viewing Thread
The Oil Industry and the Cheney White House 71.235.45.102
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:48 AM Guest Registering 68.99.2.129
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:48 AM Guest Registering 69.208.142.184
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

10:48 AM Guest Registering 67.181.223.110
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a) Gecko/20040416 Firefox/0.8.0+

I believe this to be a spammer out of the Netherlands hiding behind IP 85.12.45.22

Information related to '85.12.45.0 - 85.12.45.255'

inetnum: 85.12.45.0 - 85.12.45.255
netname: NL-WORLDTOSTART
descr: WorldToStart PA Assignment #1
country: NL
admin-c: ENO8-RIPE
tech-c: ENO8-RIPE
status: ASSIGNED PA
mnt-by: EUROACCESS-MNT
changed: ****@euroaccess.nl 20060712
source: RIPE

role: EuroAccess Network Operations
address: Alsacelaan 5
address: 5627 CA Eindhoven
address: The Netherlands
phone: +31 (0)20-7173209
fax-no: +31 (0)40-2488764
e-mail: ****@euroaccess.nl

AnthonyCea · #**223** 03-22-2007, 07:32 AM

08:46 PM Guest Registering 60.190.94.227
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

09:28 PM Guest Registering 89.149.196.221

Another IP for InternetServiceTeam.com 217.20.112.72
internetserviceteam.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET C

This is a image grabbing bot to ban.

AnthonyCea · #**224** 03-23-2007, 05:20 AM

07:10 AM Guest Viewing Index
Forum Posters Union 207.112.66.143 unused-tor-143.primus.ca
Mozilla/4.0 (compatible; ICS)

Proxy on spam blacklists out of Korea

02:03 PM Guest Viewing Index
Forum Posters Union 211.201.208.166
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoP

AnthonyCea · #**225** 03-24-2007, 05:04 PM

06:58 PM Guest Registering 87.0.224.101
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)

06:58 PM Guest Registering 68.160.6.135
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

08:18 PM Guest Viewing Forum
Google Intelligence 59.93.19.233
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)

08:15 PM Guest Creating Thread
Google news archive 69.149.34.240
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

08:37 PM Guest Registering 213.230.130.54
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; MRA 4.6 (build 01425); .NET

AnthonyCea · #**226** 03-25-2007, 03:06 PM

04:57 PM Guest Modifying Options 68.77.36.200 dsl.emhril.ameritech.net
Opera/7.21 (Windows NT 5.0; U) [en]

04:57 PM Guest Modifying Options 60.49.56.21

04:56 PM Guest Modifying Options 60.33.40.62
Opera/7.21 (Windows NT 5.0; U) [en]

04:56 PM Guest Modifying Options 72.189.149.54
Opera/7.21 (Windows NT 5.0; U) [en]

04:56 PM Guest Modifying Options 201.17.61.51
Opera/7.21 (Windows NT 5.0; U) [en]

04:55 PM Guest Modifying Options 201.34.206.35
Opera/7.21 (Windows NT 5.0; U) [en]

04:53 PM Guest Viewing Index
Forum Posters Union 61.185.224.99
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

04:52 PM Guest Registering 194.236.110.194 customer.telia.com
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

AnthonyCea · #**227** 03-25-2007, 03:28 PM

05:25 PM Guest Replying to Thread
Simple Machines Forum (SMF) Software 218.97.217.34
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)

05:24 PM Guest Viewing Thread
Simple Machines Forum (SMF) Software 200.78.117.239
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)

213.230.130.
68.77.36.
60.49.56.
60.33.40.
72.189.149.
201.17.61.
201.34.206.
61.185.224.
194.236.110.
218.97.217.
200.78.117.

AnthonyCea · #**228** 03-25-2007, 03:37 PM

Check this spam source IP and professional spam botnet out !!!

He is on nearly every IP blacklist for spam that exists.

05:30 PM Guest Registering 200.104.159.139
Mozilla/4.5 RPT-HTTPClient/0.3-2

AnthonyCea · #**229** 03-25-2007, 03:43 PM

Spammers never give up until they run out of Proxy IP addresses to use!

05:35 PM Guest Registering 195.189.47.80
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**230** 03-25-2007, 06:00 PM

07:58 PM Guest Viewing Index
Forum Posters Union 222.231.42.193
Mozilla/4.0 (compatible; MSIE is not me; DAUMOA/1.0.1; DAUM Web Robot; Daum Communications Corp., Ko

AnthonyCea · #**231** 03-26-2007, 07:49 AM

09:47 AM Guest Replying to Thread
The Oil Industry and the Cheney White House 203.116.63.105
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20050512 Netscape/8.0

09:46 AM Guest Registering 82.247.237.30
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20050512 Netscape/8.0

AnthonyCea · #**232** 03-27-2007, 06:54 AM

Today's Blackholed IP addresses served with pride with a side of spam.

08:31 AM Guest Registering 59.94.10.70
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051019 Flock/0.4 Firefox/1.0+

08:34 AM Guest Registering 59.95.209.117
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051019 Flock/0.4 Firefox/1.0+

08:46 AM Guest Creating Thread
General Forum Topics & Gossip 59.95.209.117
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b5) Gecko/20051019 Flock/0.4 Firefox/1.0+

08:46 AM Guest Creating Thread
General Forum Topics & Gossip 201.83.60.186
Opera/9.0 (Macintosh; PPC Mac OS X; U; en)

10:40 AM Guest Creating Thread
General Forum Topics & Gossip 91.124.192.47
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

10:40 AM Guest Registering 80.93.186.195
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Information related to '80.93.184.0 - 80.93.187.255'

inetnum: 80.93.184.0 - 80.93.187.255
netname: RZT-OBLAST
descr: netblock for Kolpino City
country: RU
admin-c: RZT1-RIPE
tech-c: RZT1-RIPE
status: ASSIGNED PA
mnt-by: RZT-MNT
mnt-lower: RZT-MNT
mnt-routes: RZT-MNT
changed: ***@ensitele.com 20070213
source: RIPE

person: Network Admins RZT-SERVICE
address: 191011 Saint-Petersburg, Russia
address: Lomonosova sq. 1
phone: +78123142643
e-mail: ******@sysadmins.spb.ru
nic-hdl: RZT1-RIPE
changed: ******@sysadmins.spb.ru 20060130
mnt-by: RZT-MNT
source: RIPE

AnthonyCea · #**233** 03-27-2007, 01:11 PM

02:57 PM Guest Viewing Thread
Paper clip guy gets his house 58-65-233-17.myrdns.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

http://groups.google.as/group/news.a...afe2af216d3dea

AnthonyCea · #**234** 03-28-2007, 09:31 AM

11:23 AM Guest Viewing Index
Forum Posters Union dsl-189-178-4-83.prod-infinitum.com.mx
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

10:12 PM Guest Viewing Forum
SpamKill.org 222.240.139.125
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)

10:09 PM Guest Viewing Forum
SpamKill.org 210.43.40.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)

AnthonyCea · #**235** 03-28-2007, 11:13 PM

12:58 AM Guest Creating Thread
General Forum Topics & Gossip 218.63.252.219
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95; BCD2000)

10:14 AM Guest Registering 201.15.77.35
Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2) Gecko/20021126

10:16 AM Guest Logging In 201.80.171.226
Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2) Gecko/20021126

10:51 AM Guest Viewing Forum
General Forum Topics & Gossip 217.97.160.6 unregister006160097217.c160.msk.pl
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**236** 03-29-2007, 11:27 AM

01:19 PM Guest Viewing Index
Forum Posters Union 210.6.31.208 210006031208.ctinets.com
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-GB; rv:1.8.1) Gecko/20060918 Firefox/2.0

http://www.trendmicro.com/en/securit...ish051014a.htm

AnthonyCea · #**237** 03-29-2007, 11:39 AM

01:34 PM Guest Searching Forums 85.238.100.43 officeshoes.tenet.odessa.ua
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

01:33 PM Guest Viewing Index
Forum Posters Union 166.70.207.2 anon.xmission.com
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

`````````````````````````````````````````````````` ```````````

Check out this spammer, he is still using Windows 95, LOL

09:57 PM Guest Registering 66.232.118.54 hv51.steephost.com
Mozilla/5.0 (Windows; U; Win95; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

AnthonyCea · #**238** 03-30-2007, 08:12 AM

10:04 AM Guest Viewing Forum
General Forum Topics & Gossip 217.114.34.90
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

AnthonyCea · #**239** 03-30-2007, 09:42 AM

These kooks are back again, RBNet is a giant spam operation out of Russia, ban entire IP ranges, these guys try to spam to leave virus links to infect surfers browsers with viruses to convert their computers to zombies and hijack their IP address to commit even more cyber crime.

Information related to '81.95.144.0 - 81.95.159.255'

11:29 AM Guest Viewing Index
Forum Posters Union 81.95.149.42

Ref: SBL43489

81.95.144.0/20 is listed on the Spamhaus Block List (SBL)

23-Jul-2006 07:07 GMT | SR04

rbnnetwork.com / Too coin Software: iframemoney.biz / etc.

Shame shame, infecting browsers with trojans!
h t t p : / / xgbgsfmdis.biz/ dl/ xpladv737.wmf

ns1.xarwiroozc.biz [81.95.145.219]
ns1.xbtuavnxbb.biz [81.95.145.219]
ns1.xcytxcxqrb.biz [81.95.145.219]
ns1.xdnsupulub.biz [81.95.145.219]
ns1.xffsktxdul.biz [81.95.145.219]
ns2.xarwiroozc.biz [81.95.145.220]
ns2.xbtuavnxbb.biz [81.95.145.220]
ns2.xcytxcxqrb.biz [81.95.145.220]
ns2.xdnsupulub.biz [81.95.145.220]
ns2.xffsktxdul.biz [81.95.145.220]
dkadmin.biz [81.95.145.221]
xarwiroozc.biz [81.95.145.222]
xhdlkgillq.biz [81.95.145.222]
xffsktxdul.biz [81.95.145.222]
xdnsupulub.biz [81.95.145.222]
xbtuavnxbb.biz [81.95.145.222]
xgbgsfmdis.biz [81.95.145.222]
xepvdhdnzs.biz [81.95.145.222]
xcytxcxqrb.biz [81.95.145.222]
___________

buytraff.biz
iframemoney.biz
newtoolbar.biz
spyfix.biz
toolbarbest.biz

______________

81.95.145.171/32
rbnnetwork.com SR04
2006-07-23 07:07:13
SBL44765 WMF Exploit - zchxsikpgz.biz

81.95.145.216/29
rbnnetwork.com SR02
2006-06-16 21:29:35
SBL43334 iframemoney.biz

81.95.144.0/21
rbnnetwork.com SR14
2006-06-16 10:49:07
SBL43322 spam offering payment for compromising computers!

_____________

inetnum: 81.95.144.0 - 81.95.147.255
netname: RBN-INFRA-NET
descr: Russian Business Network
admin-c: RBNR-ORG
tech-c: RBNR-ORG
mnt-by: RBN-MNT
status: ASSIGNED PA
country: RU
remarks: INFRA-AW
source: RIPE # Filtered

role: Russian Business Network Registry
address: Russian Business Network
address: 12 Levashovskiy pr.
address: 197110 Saint-Petersburg
address: Russia
remarks: Points of contact for RBN Network Operations
remarks: ------------------------------------------------------
remarks: Routing and peering issues: ncc@rbnnetwork.com
remarks: SPAM and Network security issues: abuse@rbnnetwork.com
remarks: Customer support: support@rbnnetwork.com
remarks: General information: info@rbnnetwork.com
remarks: ------------------------------------------------------
admin-c: ON316-RIPE
admin-c: NI212-RIPE
tech-c: MZ2231-RIPE
tech-c: NI212-RIPE
nic-hdl: RBNR-ORG
mnt-by: RBN-MNT
source: RIPE # Filtered
abuse-mailbox: abuse@rbnnetwork.com

inetnum: 81.95.144.0 - 81.95.159.255
netname: RU-RBNET-20060524
descr: Too coin Software Limited
country: RU
org: ORG-TCSL3-RIPE
admin-c: SK528-RIPE
admin-c: ON316-RIPE
tech-c: MZ2231-RIPE
tech-c: NI212-RIPE
notify: ***@rbnnetwork.com
status: ALLOCATED PA
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: RBN-MNT
mnt-routes: RBN-MNT
mnt-domains: RBN-MNT
changed: **********@ripe.net 20060524
changed: **********@ripe.net 20060608
source: RIPE

organisation: ORG-TcSL3-RIPE
org-name: Too coin Software Limited
org-type: LIR
address: SHEARWAY BUSINESS PARK 16
address: CT19 4RH FOLKESTONE
address: KENT
address: United Kingdom
phone: +1 401 369 8152
e-mail: ***@rbnnetwork.com
admin-c: ON316-RIPE
admin-c: MZ2231-RIPE
admin-c: NI212-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: RBN-MNT
mnt-by: RIPE-NCC-HM-MNT
changed: **********@ripe.net 20060518
changed: *********@ripe.net 20060523
changed: **********@ripe.net 20060524
changed: *********@ripe.net 20060524
changed: *********@ripe.net 20060526
changed: *********@ripe.net 20060526
changed: *********@ripe.net 20060607
changed: *********@ripe.net 20060621
changed: *********@ripe.net 20060712
changed: *********@ripe.net 20070307
changed: *********@ripe.net 20070319
source: RIPE

person: Stepan Kucherenko
address: 190000, Russia, St.Petersburg
phone: +78127163698
fax-no: +13474382955
nic-hdl: SK528-RIPE
e-mail: ***@eexhost.com
changed: ***@eexhost.com 20060427
source: RIPE

person: Oleg Nechukin
address: 190000, Russia, St.Petersburg
e-mail: ****@rbnnetwork.com
phone: +79214015843
nic-hdl: ON316-RIPE
mnt-by: RBN-MNT
changed: *******@rbnnetwork.com 20060607
source: RIPE

person: Nikolay Ivanov
address: 190000, Russia, St.Petersburg
e-mail: *******@rbnnetwork.com
phone: +79214015843
nic-hdl: NI212-RIPE
changed: *******@rbnnetwork.com 20060607
mnt-by: RBN-MNT
source: RIPE

person: Mihail Zharkih
address: 190000, Russia, St.Petersburg
e-mail: ****@rbnnetwork.com
phone: +79217959690
nic-hdl: MZ2231-RIPE
mnt-by: RBN-MNT
changed: *******@rbnnetwork.com 20060607
source: RIPE

% Information related to '81.95.144.0/20AS40989'

route: 81.95.144.0/20
descr: TcS Network
origin: AS40989
mnt-by: RBN-MNT
changed: *******@rbnnetwork.com 20060608
source: RIPE

AnthonyCea · #**240** 03-30-2007, 08:05 PM

10:01 PM Guest Registering 221.133.161.128
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.7.10) Gecko/20050717 Firefox/1.0.6

10:01 PM Guest Registering 59.149.219.46
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.7.10) Gecko/20050717 Firefox/1.0.6

10:01 PM Guest Viewing Forum
SpamKill.org 24.202.36.76
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.7.10) Gecko/20050717 Firefox/1.0.6