Results 1 to 5 of 5

Thread: Dedicated Spammer, Spambot or Scammer??

  1. #1
    scratchycat's Avatar
    scratchycat is offline Elite Scambuster
    Join Date
    Feb 2011
    Posts
    3,477
    Blog Entries
    2

    Dedicated Spammer, Spambot or Scammer??

    Yesterday I started getting comments on my Blog that seemed okay but then when it sounded more like spamming, I decided to do some more checking. Still not sure exactly why this is and exactly what is going on but I am deleting all the pingbacks from my blog.

    This is the information I have gathered on this and hopefully it will help other bloggers or website owners.


    This a portion of email received since I approve comments before they are posted:


    Website : Goozle Zones (IP: 188.165.112.229 , 188-165-112-229.kimsufi.com) see below
    URL : http://goozlereregfrezones.com/
    Trackback excerpt:
    <strong>Excellent website...</strong>

    ---
    Okay first of all, the goozlereregfrezones.com is not a viable link.

    http://188-165-112-229.kimsufi.com/

    This XRumer low life is running his forum spambot script as a dedicated spam server bot from spambot infested kimsufi/OVH data centers.

    Dedicated spam server bot running on kimsufi.com IP 178.33.249.242

    http://www.forumpostersunion.com/showthread.php?t=21414



    XRumer spam server bot host name: 178-33-249-242.kimsufi.com

    IP Location: France Paris Ovh Systems

    Resolve Host: 178-33-249-242.kimsufi.com

    inetnum: 178.33.248.0 - 178.33.255.255
    netname: OVH
    descr: OVH SAS
    descr: Dedicated Servers
    country: FR
    admin-c: OK217-RIPE
    tech-c: OTC2-RIPE
    status: ASSIGNED PA
    mnt-by: OVH-MNT
    source: RIPE # Filtered

    role: OVH Technical Contact
    address: OVH SAS
    address: 2 rue Kellermann
    address: 59100 Roubaix
    address: France
    admin-c: OK217-RIPE
    tech-c: GM84-RIPE
    nic-hdl: OTC2-RIPE
    abuse-mailbox:
    mnt-by: OVH-MNT
    source: RIPE # Filtered

    person: Octave Klaba
    address: OVH SAS
    address: 2 rue Kellermann
    address: 59100 Roubaix
    address: France
    phone: +33 9 74 53 13 23
    nic-hdl: OK217-RIPE
    abuse-mailbox:
    mnt-by: OVH-MNT
    source: RIPE # Filtered

    route: 178.32.0.0/15
    descr: OVH ISP
    descr: Paris, France
    origin: AS16276
    mnt-by: OVH-MNT
    source: RIPE # Filtered

    __________________
    Last edited by scratchycat; 10-05-2012 at 01:18 PM.
    Don't get ripped off!! Stay informed!

  2. #2
    scratchycat's Avatar
    scratchycat is offline Elite Scambuster
    Join Date
    Feb 2011
    Posts
    3,477
    Blog Entries
    2

    Re: Dedicated Spammer, Spambot or Scammer??

    I found http://goozlerzone.com/ registered to Jason Harrington. A Google Search on Jason comes up with these:


    Jason Harrington Registrant Street1:1735 S. Peoria Ave #55 at ...

    website.informer.com/Jason+Harrington+Registrant+Street1%3...

    Company: Jason Harrington Registrant Street1:1735 S. Peoria Ave #55. Address: 1735 S. Peoria Ave #55 Tulsa OK 74120 US Phone: +1.9189245895 ...

    MyWapPorn.com - My Wap Porn

    whois.domaintools.com/mywapporn.com

    Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...

    MyPornoWap.com - My Porno Wap
    whois.domaintools.com/mypornowap.com
    Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
    KatyCouric.com - Katy Couric

    whois.domaintools.com/katycouric.com

    Sep 9, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...

    ClickExAto.com - Click Ex Ato
    whois.domaintools.com/clickexato.com
    Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120 ...
    TheGoldenAngels.biz - The Golden Angels
    whois.domaintools.com/thegoldenangels.biz
    "Jason Harrington" owns about470 other domains ... Administrative Contact Address1: 1735 S. Peoria Ave #55. Administrative Contact City: Tulsa Administrative Contact State/Province: OK Administrative Contact Postal Code: 74120 ...


    EiMino.com - Ei Mino
    whois.domaintools.com/eimino.comShare

    Sep 6, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
    UltimatePowerPofIts.com - Ultimate Power Pof Its

    whois.domaintools.com/ultimatepowerpofits.com
    Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
    Kinomaniac.tv - Kinomaniac
    kinomaniac.tv.pandastats.net/
    Mar 30, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States kwelx@kwelx.com +1 9189245895. Record expires on 2013/03/30 ...
    Fivance.com - Fivance
    fivance.com.hypestat.com/
    Aug 31, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...

    Very interesting but after emailing it seems he knows nothing about this.
    Last edited by scratchycat; 10-05-2012 at 01:22 PM. Reason: changes
    Don't get ripped off!! Stay informed!

  3. #3
    scratchycat's Avatar
    scratchycat is offline Elite Scambuster
    Join Date
    Feb 2011
    Posts
    3,477
    Blog Entries
    2

    Re: Dedicated Spammer, Spambot or Scammer??

    I sent an email to kwelx@kwelx.com and asked for an explanation. My answer:

    Jason Harrington kwelx@kwelx.com
    12:55 PM (27 minutes ago)
    to me


    http://goozlereregfrezones.com isn't even a registered domain. I don't
    know what Goozle Zone is (or Goozle ZoneS is, which is actually what
    is in your email above). I have the domain goozlerzone.com registered
    and parked.

    You might want to do some research before you blindly email every
    domain owner on every spam comment you receive on your blog.

    -K
    Guess I owe Mr. Jason an apology, except it was not blindly emailing every domain owner since it was only one and I did research it. Yet, I question something
    "Jason Harrington" owns about 670 other domains
    with that many domains and so closely related to Goozlerzone... hmmm....
    Last edited by scratchycat; 10-05-2012 at 01:28 PM.
    Don't get ripped off!! Stay informed!

  4. #4
    scratchycat's Avatar
    scratchycat is offline Elite Scambuster
    Join Date
    Feb 2011
    Posts
    3,477
    Blog Entries
    2

    Re: Dedicated Spammer, Spambot or Scammer??

    The first one that this person tried was using this name, so I did a search on it and found this:



    prev123456next







    IP

    From



    2012-08-17 08:55 AM googlezerlunited Wolfson5006@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Delahunt17794@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Grudzinski19955@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Sandhaus17495@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Mcnary13112@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Cheetham9105@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Codling12429@gmail.com

    188.165.112.229





    2012-08-17 08:45 AM

    googlezerlunited

    Hindall18961@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Khiev8120@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Vagt13288@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Tapanes17424@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Andreozzi10165@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Kelzer14332@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Coffinberger3820@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Begnaud2921@gmail.com

    188.165.112.229





    2012-08-17 08:25 AM

    googlezerlunited

    Breske18921@gmail.com

    188.165.112.229





    2012-08-17 08:05 AM

    googlezerlunited

    Nan10892@gmail.com

    188.165.112.229





    2012-08-17 08:05 AM

    googlezerlunited

    Spomer8529@gmail.com

    188.165.112.229





    2012-08-17 08:05 AM

    googlezerlunited

    Guderjahn18203@gmail.com

    188.165.112.229





    2012-08-17 07:55 AM

    googlezerlunited

    Zwack14675@gmail.com

    188.165.112.229





    2012-08-17 07:55 AM

    googlezerlunited

    Carmichael6160@gmail.com

    188.165.112.229





    2012-08-17 07:45 AM

    googlezerlunited

    Phelts15930@gmail.com

    188.165.112.229





    2012-08-17 07:45 AM

    googlezerlunited

    Daughterty12623@gmail.com

    188.165.112.229





    2012-08-17 07:45 AM

    googlezerlunited

    Blazejewski13293@gmail.com

    188.165.112.229





    2012-08-17 07:45 AM

    googlezerlunited

    Nalepa10748@gmail.com

    188.165.112.229





    2012-08-17 07:45 AM

    googlezerlunited

    Chesnut6678@gmail.com

    188.165.112.229





    2012-08-17 07:25 AM

    googlezerlunited

    Rief10311@gmail.com

    188.165.112.229





    2012-08-17 07:25 AM

    googlezerlunited

    Hardaway4269@gmail.com

    188.165.112.229





    2012-08-17 07:25 AM

    googlezerlunited

    Gabor7350@gmail.com

    188.165.112.229





    2012-08-17 07:05 AM

    googlezerlunited

    Huxtable5430@gmail.com

    188.165.112.229





    2012-08-17 07:05 AM

    googlezerlunited

    Flenaugh5809@gmail.com

    188.165.112.229





    2012-08-17 07:05 AM

    googlezerlunited

    Spindle14197@gmail.com

    188.165.112.229





    2012-08-17 07:05 AM

    googlezerlunited

    Seibel18355@gmail.com

    188.165.112.229





    2012-08-17 07:05 AM

    googlezerlunited

    Craker11321@gmail.com

    188.165.112.229

    They are all located in France. So what do we have here? A spammer or a spambot going on.

    BotScout.com: IP Check: 188.165.112.229
    Don't get ripped off!! Stay informed!

  5. #5
    scratchycat's Avatar
    scratchycat is offline Elite Scambuster
    Join Date
    Feb 2011
    Posts
    3,477
    Blog Entries
    2

    Re: Dedicated Spammer, Spambot or Scammer??

    Another check on this one:
    Goozle Zone it refers to a unregistered site
    18 Responses to “Kate Morant”

    Goozle Zone
    on Sep 21st, 2012
    @ 1:41 pm:

    Check this out…

    The information mentioned in the article are some of the best available…

    Goozle Zones
    on Sep 24th, 2012
    @ 3:18 am:

    Websites you should visit…

    Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose…

    Kate Morant Cornell Premedical Society

    Does anyone know anything more about this, I need to block them from my blog?
    Don't get ripped off!! Stay informed!

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Disclaimer: Opinions expressed on this website are solely those of their respective authors.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42