ForumPostersUnion.com


   

Go Back   Forum Posters Union > Forum Management > General Forum Administration
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Closed Thread
 
Thread Tools
  #281  
Old 05-14-2007, 05:37 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Angry

08:19 PM Guest Registering 68.61.199.82
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1

08:17 PM Guest Registering 67.83.136.69
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1
  #282  
Old 05-14-2007, 06:44 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
08:22 PM Guest Registering 83.130.1.199
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3

08:24 PM Guest Viewing Forum
Advertising Programs IGLD-83-130-1-199.inter.net.il
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.3) Gecko/20060426 Firefox/1.5.0.3
  #283  
Old 05-14-2007, 06:54 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Full blown Criminal Hacker trying to find a hole in the vB script.

08:50 PM Guest Modifying Options 58.65.239.201
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3a)

08:50 PM Guest Modifying Options 58.65.239.201
Opera/7.21 (Windows NT 5.0; U) [en]

Ref: SBL54249

58.65.238.0/23 is listed on the Spamhaus Block List (SBL)

05-May-2007 08:55 GMT | SR04

Dirty block (escalation)

Nothing but malware hosting for months. Fully criminal operation.



timestamp | ip | asn | category | URL
---------------------+---------------+-------+------------ +--------------------------------------------------------------------
2007-02-15 | 58.65.239.10 | 27595 | malwareurl | http:// airwaybill.info/v2/funny.php?adv=4&spl=fi
2007-03-22 | 58.65.239.10 | 27595 | malwareurl | http:// daoway.biz/clear.html
2007-03-29 | 58.65.239.10 | 27595 | malwareurl | http:// daoway.biz/limbo/d.exe
2007-03-30 | 58.65.239.10 | 27595 | malwareurl | http:// mazaing.ws/zloy/spl/get.php?file=exe
2007-04-13 | 58.65.239.10 | 27595 | malwareurl | http:// mazaing.ws/zloy/spl/index.php
2007-02-17 | 58.65.239.10 | 27595 | malwareurl | http:// pussucat.info/bin/svchost.exe
2007-02-18 | 58.65.239.10 | 27595 | malwareurl | http:// pussucat.info/bin/update.exe
2007-02-12 | 58.65.239.10 | 27595 | malwareurl | http:// pussucat.info/count/index.php?a=1&c=1
2007-02-02 | 58.65.239.10 | 27595 | malwareurl | http:// pussucat.info/count/index.php?j=1
2007-03-29 | 58.65.239.10 | 27595 | malwareurl |daoway.biz/lim.exe?e=JO4Fs6h4.com
2007-03-28 | 58.65.239.10 | 27595 | malwareurl | http:// daoway.biz/lim.exe?e=L3UAh3F7.com
2007-02-02 | 58.65.239.10 | 27595 | malwareurl | http:// nownames.org/images/crtdcghcn.jar
2007-03-21 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/doc/
2007-03-22 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/doc/do.exe
2007-03-30 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/gr/
2007-04-24 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/gr/014.html
2007-03-29 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/gr/gri.exe
2007-03-09 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/rosh/index.php
2007-03-24 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/rosh/r.exe
2007-03-27 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/rosh1/bot.exe
2007-04-24 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/ru/014.html
2007-04-04 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/ru/ru.exe
2007-04-14 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/ru/ru666.exe
2007-03-24 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/site/
2007-03-24 | 58.65.239.13 | 27595 | malwareurl | http:// 58.65.239.13/site/1.exe
2007-02-21 | 58.65.239.34 | 27595 | malwareurl | http:// adult.step57.info/exp/exploit.php
2007-03-02 | 58.65.239.34 | 27595 | malwareurl | http:// adult.step57.info/loads/loader.php
2007-03-24 | 58.65.239.34 | 27595 | malwareurl | http:// artsklimited.info/
2007-03-22 | 58.65.239.34 | 27595 | malwareurl | http:// artsklimited.info/case_conf/in/exp/load.php
2007-03-24 | 58.65.239.34 | 27595 | malwareurl | http:// artsklimited.info/case_conf/in/exp/open.exe
2007-02-27 | 58.65.239.34 | 27595 | malwareurl | http:// cleo.step57.info/exp/exploit.php
2007-03-28 | 58.65.239.34 | 27595 | malwareurl | http:// me.step57.com/exp/exploit.php
2007-02-21 | 58.65.239.34 | 27595 | malwareurl | http:// me.step57.info/exp/exploit.php
2007-03-06 | 58.65.239.34 | 27595 | malwareurl | http:// traff.step57.info/snow/data/exe.php
2007-02-25 | 58.65.239.42 | 27595 | malwareurl | http:// web5trust.com/nnews/get.php?file=exe
2007-02-26 | 58.65.239.42 | 27595 | malwareurl | http:// web5trust.com/nnews4/get.php?file=exe
2007-02-27 | 58.65.239.42 | 27595 | malwareurl | http:// web5trust.com/trn/get.php?file=exe
2007-03-24 | 58.65.239.58 | 27595 | malwareurl | http:// 58.65.239.58/~botcom/client/roshik_new.exe
2007-03-20 | 58.65.239.58 | 27595 | malwareurl | http:// 58.65.239.58/~botcom/spazm.exe
2007-03-01 | 58.65.239.59 | 27595 | malwareurl | http:// 58.65.239.59/1.exe
2007-02-21 | 58.65.239.59 | 27595 | malwareurl | http:// 58.65.239.59/index.php
2007-03-03 | 58.65.239.59 | 27595 | malwareurl |cashdevelopment.com/?rid=1961
2007-03-03 | 58.65.239.59 | 27595 | malwareurl |cashdevelopment.com/?rid=5572
2007-03-03 | 58.65.239.59 | 27595 | malwareurl //cashdevelopment.com/?rid=6991
2007-03-02 | 58.65.239.59 | 27595 | malwareurl //earngate.com/
2007-04-15 | 58.65.239.75 | 27595 | malwareurl | http:// virtuuozoonostie.info//zara2//targ.chm
2007-03-21 | 58.65.239.75 | 27595 | malwareurl | http:// virtuuozoonostie.info/zara/sploit.anr
2007-04-16 | 58.65.239.75 | 27595 | malwareurl | http:// virtuuozoonostie.info/zara2/count.jar
2007-03-22 | 58.65.239.75 | 27595 | malwareurl | http:// virtuuozoonostie.info/zara2/sploit.anr
2007-04-14 | 58.65.239.82 | 27595 | malwareurl | http:// 58.65.239.82/katie/funlib.exe
2007-04-14 | 58.65.239.82 | 27595 | malwareurl | http:// 58.65.239.82/katie/zl.exe
2007-04-15 | 58.65.239.90 | 27595 | malwareurl | http:// screensavers4us.info/funscr/silly_bear32_funny.scr
2007-03-22 | 58.65.239.90 | 27595 | malwareurl | http:// stelaartois.ru//file.php
2007-03-18 | 58.65.239.90 | 27595 | malwareurl | http:// stelaartois.ru/3.html
2007-04-21 | 58.65.239.90 | 27595 | malwareurl | http:// stelaartois.ru/file.exe
2007-04-03 | 58.65.239.90 | 27595 | malwareurl | http:// stelaartois.ru/file.jpg
2007-03-16 | 58.65.239.90 | 27595 | malwareurl | http:// stelaartois.ru/update.exe
2007-03-22 | 58.65.239.90 | 27595 | malwareurl | http:// sweetymail.ru/pp/777.exe
2007-03-11 | 58.65.239.90 | 27595 | malwareurl | http:// sweetymail.ru/pp/999.exe
2007-03-07 | 58.65.239.90 | 27595 | malwareurl | http:// webcounterstat.info/screensavers/screen_030_rover.scr
2007-03-06 | 58.65.239.90 | 27595 | malwareurl | http:// webcounterstat.info/screensavers/wallpapers_gold_bear_b.scr
2007-04-21 | 58.65.239.90 | 27595 | malwareurl | http:// webcounterstat.info/zu.exe
2007-03-16 | 58.65.239.106 | 27595 | malwareurl | http:// 58.65.239.106/cosmos/cmp/get.php?file=exe
2007-04-14 | 58.65.239.114 | 27595 | malwareurl | http:// mdfc.info/soft/
2007-04-13 | 58.65.239.114 | 27595 | malwareurl | http:// mdfc.info/soft/2.php
2007-04-15 | 58.65.239.114 | 27595 | malwareurl | http:// mdfc.info/soft/get.php?e=xBdVb4wo.com
2007-04-13 | 58.65.239.114 | 27595 | malwareurl | http:// mdfc.info/soft/zip.php
2007-03-27 | 58.65.239.114 | 27595 | malwareurl | http:// tiger.werew0lf.net/bot.exe
2007-04-12 | 58.65.239.114 | 27595 | malwareurl | http:// werew0lf.net/soft/get.php
2007-04-12 | 58.65.239.114 | 27595 | malwareurl | http:// werew0lf.net/zaraza/get.php?file=exe
2007-04-04 | 58.65.239.146 | 27595 | malwareurl | http:// wc- host.com/limpopo/out2.exe
2007-03-14 | 58.65.239.226 | 27595 | malwareurl | http:// 58.65.239.226/amage/scriptsun.php
2007-04-27 | 58.65.239.227 | 27595 | malwareurl | http:// coco32.org/tn/axt.exe
2007-04-27 | 58.65.239.227 | 27595 | malwareurl |coco32.org/clients/137-15.exe
2007-03-08 | 58.65.239.242 | 27595 | malwareurl | http:// 58.65.239.242/_vti/index.php
2007-03-01 | 58.65.239.242 | 27595 | malwareurl | http:// bidtrust.net/_vti/crtdcghcn.jar
2007-03-04 | 58.65.239.242 | 27595 | malwareurl | http:// bidtrust.net/_vti/index.php
2007-04-15 | 58.65.239.252 | 27595 | malwareurl | http:// viewprotectp.com/install.php
2007-04-14 | 58.65.239.252 | 27595 | malwareurl | http:// viewprotectp.com/myspace.php
  #284  
Old 05-15-2007, 07:36 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
09:31 AM Guest Creating Thread
Advertising Programs 85.84.174.215 eu85-84-174-215.clientes.euskaltel.es
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060612 Minefield/3.0a1

09:32 AM Guest Registering 24.247.156.26 24-247-156-26.dhcp.klmz.mi.charter.com
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060612 Minefield/3.0a1

09:27 AM Guest Viewing Archives 24.62.208.40
Java/1.4.1_04

09:28 AM Guest Logging In 68.119.215.165
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Notice the two hackers below, guests with no user agent at all.

10:30 AM Guest Registering 74.53.88.34 22.58.354a.static.theplanet.com

10:19 AM Guest Viewing Index
Forum Posters Union 208.53.35.63 NS1.UVNET.NET

`````````````````````````````````````````````````` `````````
Here are the same hackers looking for holes in the vBulletin script, these guys constantly try to log in as guests.

11:10 AM Guest Logging In 67.87.32.4 ool-43572004.dyn.optonline.net
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
  #285  
Old 05-16-2007, 05:59 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
10:59 PM Guest Viewing Thread
216.139.224.70 .aus.us.siteprotect.com
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0


Hacker or spammer trying to log in using blacklisted IP out of Korea.

09:49 AM Guest Logging In 125.181.228.35
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)


This cell phone seller spammer just posted 4 spam threads at the same time on Nokia SideKick phones.

12:45 PM lapepe Viewing Index
Forum Posters Union 204.16.125.44
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)


Forum spammer using two user agents on the same banned blackholed IP out of China.

01:36 PM Guest Viewing Thread
TVunetworks offers international television 159.226.26.98
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

01:36 PM Guest Viewing Thread
TVunetworks offers international television 159.226.26.98
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
  #286  
Old 05-16-2007, 04:14 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
More forum spammers and hackers.

Hacker/spammer using an open proxy trying to log in to find a hole in the forum script.

06:08 PM Guest Logging In 122.37.99.179
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
  #287  
Old 05-17-2007, 08:28 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Hackers and spammers are targeting all forums, most administrators don't understand how they work or don't care that these guys are living on their servers 24 hours a day.

Like this spammer/hacker using a blackholed IP out of Korea trying to log in.

10:12 AM Guest Logging In 125.180.148.19
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)


10:22 AM Guest Registering 211.109.234.46
Mozilla/5.0 (Windows; U; WinNT4.0; en-CA; rv:0.9.4) Gecko/20011128 Netscape6/6.2.1

`````````````````````````````````````````````````` ```
... or like this idiot running forum posting bot software ?

10:46 AM Guest Logging In 67.81.219.39
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
  #288  
Old 05-18-2007, 08:44 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Today we have a spam IP out of Russia blackholed on most spam reporting portals and a spam harvesting bot.

10:39 AM Guest Registering
85.141.68.205
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)


10:59 AM Guest Viewing Thread
190.49.140.236

10:52 AM Guest Viewing Index
85.179.107.32
ISC Systems iRc Search 2.1
  #289  
Old 05-19-2007, 06:56 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
blacklisted IP address of spammers

08:47 AM Guest Registering
91.124.106.32 32-106-124-91.pool.ukrtel.net
Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050224 Firefox/1.0+


08:50 AM Guest Replying to Thread
91.124.106.32 32-106-124-91.pool.ukrtel.net
  #290  
Old 05-19-2007, 07:20 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This professional spammer was IP banned

77.72.71.4 spamserver.lognet.ch
  #291  
Old 05-19-2007, 03:38 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
05:36 PM Guest Viewing Forum
91.124.236.253
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)


Blackholed spam IP out of China

08:19 PM Guest Creating Thread
58.241.178.139
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
  #292  
Old 05-21-2007, 11:07 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Check your own IP to see if it is on blacklists, because if you come here with one like blacklisted spam open proxy IP below you will have to find another internet connection.

12:57 PM Guest Viewing Thread
Buy a link farm today! 59.94.242.126
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3
  #293  
Old 05-23-2007, 03:20 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This guy is a hacker whose IP should be banned by all, he has been lurking for a few days around here !!

216.118.117.14
Mozilla/5.0/Gecko/20060808 Fedora/1.5.0.6-2.fc5 Firefox/1.5.0.6 (X11; U; Linux i686; en-US; rv:1.8.0
  #294  
Old 05-23-2007, 03:30 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Check this forum spam bot operator out !!

05:18 PM Guest Registering
66.176.235.92
Mozilla/5.0 (X11; U; Linux i686) Gecko/20030422 Galeon/1.3.4


05:18 PM Guest Creating Thread
66.67.134.174
Mozilla/5.0 (X11; U; Linux i686) Gecko/20030422 Galeon/1.3.4
  #296  
Old 05-23-2007, 05:21 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Russian spammer using dedicated hosting and a web host domain name as a front operation for guest book spamming and forum spamming.

07:17 PM Guest Sending Forum Feedback
69.46.29.159 hv4.steephost.com
Mozilla/5.0 (Windows; U; Windows NT 5.2; ru-RU; rv:1.7.12) Gecko/20050919 Firefox/1.0.7


Could be the same spamming troll out of the Ukraine that was banned above.

07:33 PM Guest Registering 194.116.194.58

Open proxy:

208.53.131.175 NS4.FDCSERVERS.NET
  #297  
Old 05-23-2007, 08:57 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
10:53 PM Guest Replying to Thread TOOT Lunacy
24.239.107.191
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2


10:52 PM Guest Viewing Thread TOOT Lunacy
201.76.26.231
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041103 Firefox/1.0RC2
  #298  
Old 05-24-2007, 09:11 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
The IP ban list gets longer each day when we ban blacklisted open proxies that spammers, content scraper bots and hackers use !!

10:55 PM Guest Creating Thread
Search Engine Business 195.222.71.77
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Would you like to be next Nintendo
  #299  
Old 05-25-2007, 05:18 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Why not, I just IP banned this idiot who is running a forum posting bot !!!

07:11 AM Guest Replying to Thread
Geffen Records picks Feedburner to distribute RSS 69.121.123.138
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Deepnet Explorer 1.5.0; .NET CLR 1.0.3705)

How about this guy running a forum archive content scraper bot ?
  #300  
Old 05-26-2007, 12:09 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Angry

02:04 PM Guest Registering 24.215.67.79
Mozilla/4.0 (compatible; MSIE 5.23; Macintosh; PPC) Escape 5.1.3

02:04 PM Guest Replying to Thread
Geffen Records picks Feedburner to distribute RSS 74.105.86.65
Mozilla/4.0 (compatible; MSIE 5.23; Macintosh; PPC) Escape 5.1.3

02:13 PM Guest Registering 211.224.128.178
Opera/8.52 (Windows NT 5.1; U; en)


03:00 PM Guest Viewing FAQ 203.72.5.173 ap.nhu.edu.tw (Taiwan)
Opera/8.52 (Windows NT 5.1; U; en)

03:20 PM Guest Viewing Index
Forum Posters Union 80.254.162.181 zux162-181.adsl.green.ch (Zürich, Switzerland)
Opera/8.52 (Windows NT 5.1; U; en)

03:37 PM Guest Unknown Location
/links/addlink.php?c=http://www.intel.com?&r97Vider08 203.72.5.173
Opera/8.52 (Windows NT 5.1; U; en)

04:01 PM Guest Searching Forums 38.114.204.7 alpha1.jonrick.com
Opera/8.52 (Windows NT 5.1; U; en)


Same spammer as above working from ThePlanet.com now that all his other IP's are banned.

04:35 PM Guest Replying to Thread
Geffen Records picks Feedburner to distribute RSS 70.84.146.34 22.92.5446.static.theplanet.com.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0

05:07 PM Guest Viewing Index
Forum Posters Union 64.233.197.167
Mozilla/4.76 [en] (Windows NT 5.0; U)

05:13 PM Guest Viewing Forum
Forum Management 201.29.105.193
Mozilla/4.76 [en] (Windows NT 5.0; U)
  #301  
Old 05-27-2007, 10:21 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This idiot has programmed a posting bot that keeps trying to post a response to the same thread over and over!

12:09 PM Guest Replying to Thread
Geffen Records picks Feedburner to distribute RSS 74.120.177.10
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9a1) Gecko/20060612 Minefield/3.0a1

Needless to say, each time this spammer or hacker come here to post again his new IP is banned at the server level.
  #302  
Old 05-27-2007, 11:17 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
The same idiot spammer is back again running a forum posting bot from a blacklisted spam IP that is also a known open proxy.

01:07 PM Guest Replying to Thread
Geffen Records picks Feedburner to distribute RSS 213.51.60.227 cp415577-b.gelen1.lb.home.nl
Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)

See the link below, this loser is a known comment spammer on forums and blogs.

01:05 PM Guest Replying to Thread
Who is Israel's guy Obadiah Shoher? 212.0.126.202.es.colt.net
Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US) AppleWebKit/85 (KHTML, like Gecko) OmniWeb/v558.46




Here is a spammer/hacker trying to find a hole in the vB script.


02:57 PM Guest Logging In 122.16.231.38

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
  #303  
Old 05-28-2007, 08:16 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Here is another comment spammer who just got his IP banned.

09:54 PM Guest Logging In 203.121.79.211
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)


Here is another hacker, comment spammer or forum posting bot operator, notice this idiot's fake user agent.

10:07 PM Guest Registering 12.210.22.134
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; AMD64)
  #304  
Old 05-29-2007, 09:33 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
This comment spammer from host name "svservers.com" is programming a posting bot, the script keeps trying to log in and post in the same thread as illustrated below.

Notice the different IP's and user agents, some are cable TV ISP's and others on his dedicated host name, this guy is a hacker that has access to zombie computers taken over by virus infected computers and spyware.

10:53 AM Guest Replying to Thread
Real Estate agent in your cell phone via Smarter Agent
86.9.148.118
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.0


11:29 AM Guest Replying to Thread
Real Estate agent in your cell phone via Smarter Agent
66.199.246.154 svservers.com
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)


11:28 AM Guest Viewing Thread
Real Estate agent in your cell phone via Smarter Agent
67.87.19.134
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)


11:27 AM Guest Viewing Index
66.110.119.170 gauntlet.angolatelecom.com
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
  #305  
Old 05-29-2007, 12:37 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
02:28 PM Guest Registering
72.241.169.96
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; AMD64)

02:29 PM Guest Logging In
24.174.172.189
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; AMD64)
  #306  
Old 05-29-2007, 07:36 PM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Comment spam botnet operator programming a posting bot to hit us over and over from IP below.

09:34 PM Guest Creating Thread
200.160.251.246
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.5) Gecko/20031016 K-Meleon/0.8.2
  #307  
Old 05-31-2007, 07:17 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
Should I run a check to see if you are posting from a blackholed spam IP like this spammer is using out of Korea ???

08:43 AM Guest Viewing Index
Forum Posters Union 125.142.138.208
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322) Babya Discoverer 8.0:


Maybe your ISP and your computer and IP is a zombie being used by hackers and spammers !!!

09:50 AM Guest Viewing Thread
New P2P Distributed Search Engine 88.152.101.5

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
  #308  
Old 06-06-2007, 08:27 AM
AnthonyCea's Avatar
AnthonyCea AnthonyCea is offline
Publisher
 
Join Date: Feb 2006
Location: Deep South, USA
Posts: 29,611
DNSstuff.com is now forcing members to log in, they now render all spam report links to resolve to a "pay us first" page, so we recommend that all use the following service to run IP checks from now on.

Robtex RBL spam IP tool

SpamRats IP Blacklist tool

http://www.mxtoolbox.com/blacklists.aspx

Here is another tool for checking IP addresses for spam

Tool to Check for Blacklisted Spam IP addresses

http://www.dslreports.com/whois

We will be removing all non-working DNStuff.com links from the entire forum at time proceeds because of their lack of response and concern to our repeated inquiries about their idiotic move to take backward steps with their new pay us first policy and for their gross incompetence and disservice to the anti-spam movement, all because of their greed and desire to garner money from all users.
Closed Thread



Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -7. The time now is 12:30 PM.


Powered by vBulletin®
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
2006-2009 ForumPostersUnion.com