ForumPostersUnion.com


   

Go Back   Forum Posters Union > Forum Management > General Forum Administration
Reload this Page Stopping spammers and forum scams
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Closed Thread
Page 7 of 8 < 123456 7 8 >
 
Thread Tools
  #241  
Old 04-03-2007, 12:37 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
02:34 PM Guest Viewing Index
Forum Posters Union 69.136.89.7
Mozilla/5.0 (Windows; U; Windows NT 5.1; ja-JP; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

02:35 PM Guest Viewing Forum
Advertising Programs 221.31.35.10
Mozilla/5.0 (Windows; U; Windows NT 5.1; ja-JP; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)

02:36 PM Guest Registering 200.101.254.162
Mozilla/5.0 (Windows; U; Windows NT 5.1; ja-JP; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
  #242  
Old 04-04-2007, 08:22 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
10:18 AM Guest Viewing Forum
General Forum Topics & Gossip 85.140.229.75
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

10:49 AM Guest Registering 91.124.36.19 19-36-124-91.pool.ukrtel.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
  #243  
Old 04-05-2007, 04:20 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
06:04 PM Guest Creating Thread
General Forum Topics & Gossip 218.94.36.155
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.7.10) Gecko/20050717 Firefox/1.0.6

06:53 PM Guest Viewing Forum
Advertising Programs 85.140.93.134 ppp85-140-93-134.pppoe.mtu-net.ru
Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)
  #244  
Old 04-06-2007, 06:30 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Look at the first IP, this is on almost every spam blacklist out there, shows that it is US based also.

08:22 AM Guest Logging In 64.203.202.29.dyn-cm-pool-63.hargray.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
  #245  
Old 04-07-2007, 07:17 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
09:07 AM demco Viewing Thread
FOR SALE:Nokia N92.......$200USD 86.62.15.90
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3

This spammer registered with this IP 196.3.62.3 and accessed forum today with the IP at the top.
  #246  
Old 04-07-2007, 12:26 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
02:20 PM Guest Registering 91.124.162.121
Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.7.10) Gecko/20050717 Firefox/1.0.6

`````````````````````````````````````````````````` ```

03:40 PM Guest Viewing Forum
The Forum Circuit 81.215.122.232
Mozilla/0.91 Beta (Windows)

03:39 PM Guest Viewing Index
Forum Posters Union 68.99.51.17
Mozilla/0.91 Beta (Windows)

03:39 PM Guest Viewing Index
Forum Posters Union 70.131.129.33
Mozilla/0.91 Beta (Windows)

`````````````````````````````````````````````````` `````

08:42 PM Guest Registering 211.55.58.14
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))

08:39 PM Guest Viewing Index
Forum Posters Union 4.156.9.21
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; (R1 1.5))
  #247  
Old 04-07-2007, 07:32 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
You're banned Numb Nuts !!!!!

Don't feel bad, this guy using this blacklisted open proxy was banned too!

http://www.dnsstuff.com/tools/ip4r.ch?ip=201.31.13.159+
  #248  
Old 04-10-2007, 04:50 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Spam IP's used for forum posting bots.

06:35 AM Guest Creating Thread
General Forum Topics & Gossip 219.64.185.32
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

06:35 AM Guest Creating Thread
General Forum Topics & Gossip 201.29.146.162
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7

Scraper Bot operator

06:05 PM Guest Logging In 207.218.210.178 ev1s-207-218-210-178.ev1servers.net

Spammer using open proxy blacklisted IP

11:11 PM Guest Viewing Index
Forum Posters Union 200.238.102.170
Mozilla/4.7 [en] (X11; U; SunOS 5.6 sun4u)

11:24 PM Guest Registering 218.155.95.24
Mozilla/4.08 [en] (X11; U; IRIX 5.3 IP5; Nav)

11:24 PM Guest Viewing Index
Forum Posters Union 172.200.221.176
Mozilla/4.08 [en] (X11; U; IRIX 5.3 IP5; Nav)

11:11 AM Guest Viewing Index
Forum Posters Union 125.231.221.238
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT)
  #249  
Old 04-11-2007, 08:06 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
09:19 AM Guest Viewing Thread
Stopping spammers and forum scams 149.9.0.59 udns1.ultradns.net
Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1.3) Gecko/20060601 Firefox/2.0.0.3 (Ubuntu-edgy)

09:42 AM Guest Viewing Thread
Stopping spammers and forum scams 222.159.242.222
Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1.3) Gecko/20060601 Firefox/2.0.0.3 (Ubuntu-edgy)

09:42 AM Guest Viewing Thread
Stopping spammers and forum scams ntoska142222.oska.nt.adsl.ppp.infoweb.ne.jp
Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.8.1.3) Gecko/20060601 Firefox/2.0.0.3 (Ubuntu-edgy)
  #250  
Old 04-13-2007, 10:23 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
12:15 PM Guest Viewing Index
Forum Posters Union 89.110.51.134
Mozilla/4.08 [en] (X11; U; IRIX 5.3 IP5; Nav)
  #251  
Old 04-14-2007, 03:09 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
05:06 PM Guest Creating Thread
General Forum Topics & Gossip 68.184.129.153
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060612 Minefield/3.0a1


05:07 PM Guest Registering 125.91.46.127
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060612 Minefield/3.0a1
  #252  
Old 04-14-2007, 10:07 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This must be a hacker trying to get through a hole because a guest can not modify options, only a member can, notice how the IP is the same but the user agent changes using a software package spammers commonly use to manage proxy IP's. This con man is using an IP out of Malaysia.

12:06 AM Guest Modifying Options 203.223.150.95 ns2.mol.net.my
Opera/7.21 (Windows NT 5.0; U) [en]

12:03 AM Guest Modifying Options 203.223.150.95
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)
  #253  
Old 04-15-2007, 07:03 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Spammer using IP management software and forum posting bot script.

08:59 AM Guest Creating Thread
General Forum Topics & Gossip 218.224.60.234 p3234-ipad01takakise.saga.ocn.ne.jp
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040614 Firefox/0.9

08:56 AM Guest Registering 222.166.160.203 cm222-166-160-203.hkcable.com.hk
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040614 Firefox/0.9

09:02 AM Guest Creating Thread
General Forum Topics & Gossip 83.143.144.21 hst-144-21.orlandonet.net
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7) Gecko/20040614 Firefox/0.9
  #254  
Old 04-19-2007, 12:05 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Professional spam operator out of the Ukraine programming forum posting bot, this IP is on many spam blacklists.

02:01 PM Guest Creating Thread
General Forum Topics & Gossip 62.16.4.103

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Two IP addresses out of Brazil being used at the same time by professional spam con man.

02:20 PM Guest Viewing Index
Forum Posters Union 201.12.181.39
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

02:21 PM Guest Viewing Index OPEN PROXY
Forum Posters Union 201.25.237.90
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

02:32 PM Guest Viewing Forum
Social Networking Intelligence 201.29.117.121
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

02:40 PM Guest Registering 201.25.91.216
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4
  #255  
Old 04-21-2007, 10:50 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Professional spammer out of Russia using blacklisted spam IP

12:45 PM Guest Registering 85.141.202.202
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Here is another few "hacker/spammer" guests (same guy using two IP's at once)

07:43 PM Guest Viewing Index
Forum Posters Union 88.191.24.59 sd-2893.dedibox.fr
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

07:43 PM Guest Viewing Index
Forum Posters Union 213.246.63.134 hyperion.spectreanime.com
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

08:16 PM Guest Viewing Who's Online 125.215.81.188
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

08:18 PM Guest Viewing Forum
Content Management Systems & CMS ASP's 124.50.87.161
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

08:19 PM Guest Viewing User Profile 24.46.58.50
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

08:15 PM Guest Viewing Index
Forum Posters Union 125.102.207.16
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

08:23 PM Guest Viewing Forum
Forum Introductions and Reviews 211.41.112.139
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

08:22 PM Guest Viewing Thread
Google Duplicate Content Filter 221.12.149.163
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
  #256  
Old 04-21-2007, 07:25 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Here is a guest hacker trying to "modify options", what they are doing is poking around for holes in the vBulletin script.

Notice two different user agents from the same IP address.

09:21 PM Guest Modifying Options 203.223.153.128
Opera/7.21 (Windows NT 5.0; U) [en]

09:21 PM Guest Modifying Options 203.223.153.128
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)
  #257  
Old 04-22-2007, 12:18 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Blacklisted spam IP out of Russia

02:16 PM Guest Registering 213.152.157.127 pool3.darnet.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
  #258  
Old 04-23-2007, 11:10 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
01:04 PM Guest Registering 201.17.190.114
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]

01:01 PM Guest Viewing Index
Forum Posters Union 190.128.30.80
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]

01:01 PM Guest Viewing Index
Forum Posters Union 209.180.118.251
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]
  #259  
Old 04-23-2007, 10:16 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
12:12 AM Guest Viewing Index
Forum Posters Union 84.17.233.238 dp-misp.rekom.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)

12:13 AM Guest Viewing Index
Forum Posters Union 204.13.236.244
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

12:13 AM Guest Searching Forums 69.13.8.97 ns.cihost.com
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

12:16 AM Guest Viewing Index
Forum Posters Union 64.180.2.208
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)

09:09 AM Guest Registering 59.95.11.67
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-GB; rv:1.8.1) Gecko/20060918 Firefox/2.0

09:11 AM Guest Viewing Forum
Advertising Programs 200.233.135.245
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-GB; rv:1.8.1) Gecko/20060918 Firefox/2.0

09:10 AM Guest Registering 201.3.49.86
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-GB; rv:1.8.1) Gecko/20060918 Firefox/2.0

11:06 AM Guest Logging In 200.45.179.105
Mozilla/4.0 (compatible; MSIE 6.0; Windows XP)
  #260  
Old 04-24-2007, 07:47 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Major cyber criminal network
This criminal hacker and spam operation cernel.net is back, this is a known scammer and their entire IP range should be banned from all servers.

09:32 AM Guest Viewing Archives 64-28-183-146-rev.cernel.net

OrgName: Cernel, Inc
OrgID: CERNE-3
Address: 23404 W. Lyons Ave #223
City: Santa Clarita
StateProv: CA
PostalCode: 91321
Country: US

NetRange: 64.28.176.0 - 64.28.191.255
CIDR: 64.28.176.0/20
NetName: CERNELNETWORK
NetHandle: NET-64-28-176-0-1
Parent: NET-64-0-0-0-0
NetType: Direct Allocation
NameServer: ALPHA.CERNEL.NET
NameServer: BETA.CERNEL.NET
  #261  
Old 04-24-2007, 04:43 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This IP was running a content scraper bot and was moving fast before we banned it.

06:38 PM Guest Viewing Thread
Video search engine from Blinkx 220-135-19-216.HINET-IP.hinet.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
  #262  
Old 04-25-2007, 08:31 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Notice this spammer trolling in the Advertising program forum, also see how his user agent changes in an attempt to fool forum managers.

07:49 AM Guest Viewing Forum
Advertising Programs 213.133.166.250 ns2.itsinternet.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)

10:19 AM Guest Viewing Forum
Advertising Programs 213.133.166.250
Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0 ; .NET CLR 2.0.50215; SL Commerce Client v1.0; Ta
  #263  
Old 04-25-2007, 08:48 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
It looks like we have a major hacker and guestbook spammer here:

10:35 AM Guest Viewing Thread 88.191.29.36 sd-4985.dedibox.fr

http://www.dslreports.com/forum/remark,17749240
  #264  
Old 04-27-2007, 07:50 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Open proxys used by spammers:

09:32 AM Guest Searching Forums 81.24.114.234
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

02:25 PM Guest Viewing Index
Forum Posters Union 81.169.183.122 OPEN PROXY
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

09:46 AM Guest Viewing Forum
Advertising Programs 201.93.249.73
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2
  #265  
Old 04-28-2007, 07:27 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This spammer from host name SVservers.com is trolling around again, this is not the first time for him to be banned here, seems he has many IP's and user agents at his disposal.

09:21 PM Guest Viewing Forum
Advertising Programs 66.199.252.154.svservers.com
Mozilla/4.0 (compatible; MSIE 5.0; Windows 3.1)

07:36 PM Guest Registering 209.67.220.86 svservers.com
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)

It seems having his IP banned pisses him off, so he comes back with this proxy out of Japan with another idiotic user agent common to spammers.

09:27 PM Guest Registering 219.21.240.123
Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.7.5) Gecko/20041109 Firefox/1.0

Back again with another open proxy:

09:56 PM Guest Viewing Index
Forum Posters Union 203.116.61.164
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.50

Spammers never give up, back once more:

10:01 PM Guest Registering 68.75.233.38
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.50

More hackers and spam operators below:

11:19 PM Guest Logging In 69.64.37.97 fonapp.com
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

11:20 PM Guest Registering 75.126.48.146 hidemyass.com
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3
  #266  
Old 04-30-2007, 11:54 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This guy looks like a hacker using ThePlanet.com as his base of operations, he was looking for a hole, wanting to log in with this ID, notice lack of user agent.

01:50 PM Guest Logging In 70.84.208.234

Asking NS1.THEPLANET.COM. for 234.208.84.70.in-addr.arpa PTR record: Reports srv6.glob2.com. [from 70.87.7.70]

Answer:
70.84.208.234 PTR record: srv6.glob2.com, it looks like this guy is a big time guest book spammer too, in all likelihood he leaves spam and virus links on any page he can.
  #267  
Old 04-30-2007, 06:17 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Spam Harvesting bot or scraper bot out of China


202.112.113.39
larbin_2.6.3 gqnmgsp@ruc.edu.cn
  #269  
Old 05-01-2007, 07:49 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Big time blog and forum spam operation out of Russia using USA IP and hosting account.

66.232.113.98 PTR record: host.a1hosting4u.com

Big time proxy for spammers out of Korea on many IP blocklists.

58.141.235.84
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5
  #270  
Old 05-02-2007, 11:04 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
12:57 PM Guest Viewing Forum
85.140.217.125
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

08:33 PM Guest Viewing Index
201.53.37.165
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
  #271  
Old 05-02-2007, 10:31 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
12:28 AM Guest Registering 72.9.105.42.svservers.com
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4b) Gecko/20030504 Mozilla Firebird/0.5+

`````````````````````````````````````````````````` ``````

10:34 AM Guest Logging In
72.66.73.130
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

10:35 AM Guest Creating Thread
201.56.67.70 E.DNS.BR (OPEN PROXY Exploitable Server USED BY SPAMMERS, HACKERS)
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

10:40 AM Guest Logging In
85.235.197.34.ptspb.ru
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0
  #272  
Old 05-06-2007, 09:35 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
When a large number of guests hit Forum Posters Union at one time we know it is a spammer, spam harvesting bot, forum posting bot, hacker or a content scraper bot operator using blacklisted IP addresses, many of which are open proxies commonly used by hackers and spammer con men.

This guy hit us with 65 guest slots at once mixing up different user agents on the same IP in many cases, in addition he includes spam live links in his user agent as an SEO referral spam scam for .tropicdesigns.net, this is not the first time we have seen this guy either.

11:34 AM Guest Viewing Index
Forum Posters Union 89.178.37.17
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

11:33 AM Guest Viewing Index
Forum Posters Union 62.40.18.5
Mozilla/5.0 (Windows NT 5.1; U) Opera 7.54 [ru]

11:33 AM Guest Viewing Index
Forum Posters Union 83.97.26.124 emperor.ddns.HomeLan.BG
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)

11:34 AM Guest Viewing Index
Forum Posters Union 121.135.30.168 (Blackholed IP out of Korea)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)

11:32 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)

11:34 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:34 AM Guest Searching Forums 62.40.18.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:34 AM Guest Searching Forums 89.32.125.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:34 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:34 AM Guest Viewing Forum
MSN 121.135.30.168
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)

11:34 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MyIE2; MRA 4.4 (build 01348))

11:34 AM Guest Viewing Index
Forum Posters Union 89.32.125.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;tropicdesigns.net

11:33 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

11:34 AM Guest Viewing Index
Forum Posters Union 89.32.125.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50

11:33 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

11:33 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)

11:32 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

11:32 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

11:34 AM Guest Searching Forums 89.178.37.17
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:31 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50

11:34 AM Guest Viewing Index
Forum Posters Union 89.178.37.17
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.1 (build 00975))

11:31 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/5.0 (Windows NT 5.1; U) Opera 7.54 [ru]

11:32 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.1 (build 00975))

11:34 AM Guest Viewing Forum
Links and Linking technology 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

11:34 AM Guest Logging In 121.135.30.168
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; MRA 4.0 (build 00768))

11:33 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; tropicdesigns.net

11:33 AM Guest Viewing Index
Forum Posters Union 213.202.80.249
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

11:33 AM Guest Viewing Index
Forum Posters Union 89.32.125.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

11:32 AM Guest Viewing Index
Forum Posters Union 81.252.104.137
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MyIE2; MRA 4.4 (build 01348))

11:34 AM Guest Viewing Index
Forum Posters Union 89.178.37.17
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

11:34 AM Guest Viewing Index
Forum Posters Union 121.135.30.168
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:34 AM Guest Searching Forums 81.252.104.137
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)

11:33 AM Guest Viewing Index
Forum Posters Union 89.178.37.17 (Russian professional spam operation)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; tropicdesigns.net

11:32 AM Guest Viewing Index
Forum Posters Union 89.32.125.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1)

11:32 AM Guest Viewing Index
Forum Posters Union 62.40.18.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.1 (build 00975))

11:34 AM Guest Viewing Index
Forum Posters Union 89.32.125.5
Mozilla/5.0 (Windows NT 5.1; U) Opera 7.54 [ru]

11:34 AM Guest Viewing Index
Forum Posters Union 81.252.104.137
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

11:33 AM Guest Viewing Index
Forum Posters Union 62.40.18.5
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; MRA 4.0 (build 00768))

11:34 AM Guest Viewing Index
Forum Posters Union 89.178.37.17 broadband.corbina.ru
Mozilla/5.0 (Windows NT 5.1; U) Opera 7.54 [ru]

11:33 AM Guest Viewing Index
Forum Posters Union 89.32.125.5
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

11:34 AM Guest Viewing Index
Forum Posters Union 81.252.104.137
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

11:34 AM Guest Viewing Index
Forum Posters Union 121.135.30.168
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

11:33 AM Guest Viewing Index
Forum Posters Union 121.135.30.168
Mozilla/5.0 (Windows NT 5.1; U) Opera 7.54 [ru]

11:32 AM Guest Viewing Index
Forum Posters Union 81.252.104.137
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

11:34 AM Guest Viewing Index
Forum Posters Union 81.252.104.137
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50

11:31 AM Guest Viewing Index
Forum Posters Union 83.97.26.124 emperor.ddns.homelan.bg
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

11:32 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50

11:34 AM Guest Viewing Forum
New Search Engines 81.252.104.137
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

11:34 AM Guest Logging In 121.135.30.168
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; tropicdesigns.net

11:34 AM Guest Viewing Index
Forum Posters Union 83.97.26.124
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; MRA 4.0 (build 00768))

68.43.26.166
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Maxthon)
  #273  
Old 05-06-2007, 10:46 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
As a side note to this spam, hacker, content scraper bot attack, we get a new record guests online figure.

Most users ever online was 118, Today at 11:47 AM.

Be very wary of large numbers of guests, this is the biggest unknown threat to forum owners, many do not pay attention to this situation at all and are unaware that "forum guests" are actually, hackers, spammers, people programming posting bots, content and spam harvesting bots and so on.

This may have been the attacker scoping out the forum this morning to set up his programmed attack later in the day !!

10:31 AM Guest Viewing Index
Forum Posters Union 86.34.4.118
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; WOW64; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Wi
  #274  
Old 05-07-2007, 08:12 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Open proxy out of Korea on spam blacklists below:

10:08 AM Guest Registering 218.51.148.221
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060319 Firefox/2.0a1

Notice same user agent this spammer uses with different blackholed spam IP which is an open proxy, most likely he is programming a forum posting bot.

10:09 AM Guest Creating Thread
General Forum Topics & Gossip 200.254.132.135
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060319 Firefox/2.0a1

`````````````````````````````````````````````````` `

IP out of Russia blackholed on many spam blacklists

12:15 PM Guest Viewing Thread
Google Adwords AdsBot 85.140.255.119 ppp85-140-255-119.pppoe.mtu-net.ru
Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3
  #275  
Old 05-08-2007, 08:16 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Angry
Exploitable Server, banned organization, Banned origination area (CN). NOT Removable! Contact your correspondents for white listing."

218.242.245.230
Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)
  #276  
Old 05-11-2007, 05:19 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Below is an open proxy out of Korea on many spam IP blacklists.

07:11 AM Guest Logging In 125.186.84.132

Another Korean open proxy blackholed on spam IP blocklists.

07:38 AM Guest Viewing Index
Forum Posters Union 211.47.94.30
Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)

`````````````````````````````````````````````````` ``````

IP out of Russia used by spammers and hackers.

222.223.173.76
  #277  
Old 05-12-2007, 04:48 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Big time spam IP address blacklisted on most major spammer blackhole listing services.

80.250.68.21
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
  #278  
Old 05-13-2007, 06:05 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
07:56 AM Guest Registering 84.228.1.86
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; KTXN)

09:46 AM Guest Viewing Index
Forum Posters Union 86.126.210.232 rdsnet.ro
dvjinotrvqqviqnaw id
  #279  
Old 05-14-2007, 07:45 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Angry
Comment spam bots running posting automated agent scripts.

09:30 AM Guest Logging In 211.213.242.112
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)


02:23 PM Guest Creating Thread
Advertising Programs 189.29.40.235
Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Waterunicorn/0.10 StumbleUpon/1.99

02:57 PM Guest Viewing User Profile
59.92.67.67
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR 1.1.4322)

05:20 PM Guest Registering 200.122.126.45
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; YPC 3.0.2; .NET
  #280  
Old 05-14-2007, 04:00 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
  
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Spam botnet running from dedicated host.


72.36.228.2 2.228.36.72.static.reverse.layeredtech.com
Closed Thread
Page 7 of 8 < 123456 7 8 >

« Previous Thread | Next Thread »


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -7. The time now is 12:23 PM.

Contact Us - Forum Posters Union - Archive - Top

Powered by vBulletin®
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
2006-2009 ForumPostersUnion.com