View Full Version : Dedicated Spammer, Spambot or Scammer??
scratchycat
10-05-2012, 01:02 PM
Yesterday I started getting comments on my Blog that seemed okay but then when it sounded more like spamming, I decided to do some more checking. Still not sure exactly why this is and exactly what is going on but I am deleting all the pingbacks from my blog.
This is the information I have gathered on this and hopefully it will help other bloggers or website owners.
This a portion of email received since I approve comments before they are posted:
Website : Goozle Zones (IP: 188.165.112.229 , 188-165-112-229.kimsufi.com) see below
URL : http://goozlereregfrezones.com/
Trackback excerpt:
<strong>Excellent website...</strong>
---
Okay first of all, the goozlereregfrezones.com is not a viable link.
http://188-165-112-229.kimsufi.com/
This XRumer low life is running his forum spambot script as a dedicated spam server bot from spambot infested kimsufi/OVH data centers.
Dedicated spam server bot running on kimsufi.com IP 178.33.249.242
http://www.forumpostersunion.com/showthread.php?t=21414
XRumer spam server bot host name: 178-33-249-242.kimsufi.com
IP Location: France Paris Ovh Systems
Resolve Host: 178-33-249-242.kimsufi.com
inetnum: 178.33.248.0 - 178.33.255.255
netname: OVH
descr: OVH SAS
descr: Dedicated Servers
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
source: RIPE # Filtered
role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox:
mnt-by: OVH-MNT
source: RIPE # Filtered
person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
abuse-mailbox:
mnt-by: OVH-MNT
source: RIPE # Filtered
route: 178.32.0.0/15
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
source: RIPE # Filtered
__________________
scratchycat
10-05-2012, 01:06 PM
I found http://goozlerzone.com/ registered to Jason Harrington. A Google Search on Jason comes up with these:
Jason Harrington Registrant Street1:1735 S. Peoria Ave #55 at ...
website.informer.com/Jason+Harrington+Registrant+Street1%3...
Company: Jason Harrington Registrant Street1:1735 S. Peoria Ave #55. Address: 1735 S. Peoria Ave #55 Tulsa OK 74120 US Phone: +1.9189245895 ...
MyWapPorn.com - My Wap Porn
whois.domaintools.com/mywapporn.com
Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
MyPornoWap.com - My Porno Wap
whois.domaintools.com/mypornowap.com
Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
KatyCouric.com - Katy Couric
whois.domaintools.com/katycouric.com
Sep 9, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
ClickExAto.com - Click Ex Ato
whois.domaintools.com/clickexato.com
Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120 ...
TheGoldenAngels.biz - The Golden Angels
whois.domaintools.com/thegoldenangels.biz
"Jason Harrington" owns about470 other domains ... Administrative Contact Address1: 1735 S. Peoria Ave #55. Administrative Contact City: Tulsa Administrative Contact State/Province: OK Administrative Contact Postal Code: 74120 ...
EiMino.com - Ei Mino
whois.domaintools.com/eimino.comShare
Sep 6, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
UltimatePowerPofIts.com - Ultimate Power Pof Its
whois.domaintools.com/ultimatepowerpofits.com
Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
Kinomaniac.tv - Kinomaniac
kinomaniac.tv.pandastats.net/
Mar 30, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States kwelx@kwelx.com +1 9189245895. Record expires on 2013/03/30 ...
Fivance.com - Fivance
fivance.com.hypestat.com/
Aug 31, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
Very interesting but after emailing it seems he knows nothing about this.
scratchycat
10-05-2012, 01:09 PM
I sent an email to kwelx@kwelx.com and asked for an explanation. My answer:
Jason Harrington kwelx@kwelx.com
12:55 PM (27 minutes ago)
to me
http://goozlereregfrezones.com isn't even a registered domain. I don't
know what Goozle Zone is (or Goozle ZoneS is, which is actually what
is in your email above). I have the domain goozlerzone.com registered
and parked.
You might want to do some research before you blindly email every
domain owner on every spam comment you receive on your blog.
-K
Guess I owe Mr. Jason an apology, except it was not blindly emailing every domain owner since it was only one and I did research it. Yet, I question something
"Jason Harrington" owns about 670 other domains with that many domains and so closely related to Goozlerzone... hmmm....
scratchycat
10-05-2012, 01:48 PM
The first one that this person tried was using this name, so I did a search on it and found this:
« prev123456next »
IP
From
2012-08-17 08:55 AM googlezerlunited Wolfson5006@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Delahunt17794@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Grudzinski19955@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Sandhaus17495@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Mcnary13112@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Cheetham9105@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Codling12429@gmail.com
188.165.112.229
2012-08-17 08:45 AM
googlezerlunited
Hindall18961@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Khiev8120@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Vagt13288@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Tapanes17424@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Andreozzi10165@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Kelzer14332@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Coffinberger3820@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Begnaud2921@gmail.com
188.165.112.229
2012-08-17 08:25 AM
googlezerlunited
Breske18921@gmail.com
188.165.112.229
2012-08-17 08:05 AM
googlezerlunited
Nan10892@gmail.com
188.165.112.229
2012-08-17 08:05 AM
googlezerlunited
Spomer8529@gmail.com
188.165.112.229
2012-08-17 08:05 AM
googlezerlunited
Guderjahn18203@gmail.com
188.165.112.229
2012-08-17 07:55 AM
googlezerlunited
Zwack14675@gmail.com
188.165.112.229
2012-08-17 07:55 AM
googlezerlunited
Carmichael6160@gmail.com
188.165.112.229
2012-08-17 07:45 AM
googlezerlunited
Phelts15930@gmail.com
188.165.112.229
2012-08-17 07:45 AM
googlezerlunited
Daughterty12623@gmail.com
188.165.112.229
2012-08-17 07:45 AM
googlezerlunited
Blazejewski13293@gmail.com
188.165.112.229
2012-08-17 07:45 AM
googlezerlunited
Nalepa10748@gmail.com
188.165.112.229
2012-08-17 07:45 AM
googlezerlunited
Chesnut6678@gmail.com
188.165.112.229
2012-08-17 07:25 AM
googlezerlunited
Rief10311@gmail.com
188.165.112.229
2012-08-17 07:25 AM
googlezerlunited
Hardaway4269@gmail.com
188.165.112.229
2012-08-17 07:25 AM
googlezerlunited
Gabor7350@gmail.com
188.165.112.229
2012-08-17 07:05 AM
googlezerlunited
Huxtable5430@gmail.com
188.165.112.229
2012-08-17 07:05 AM
googlezerlunited
Flenaugh5809@gmail.com
188.165.112.229
2012-08-17 07:05 AM
googlezerlunited
Spindle14197@gmail.com
188.165.112.229
2012-08-17 07:05 AM
googlezerlunited
Seibel18355@gmail.com
188.165.112.229
2012-08-17 07:05 AM
googlezerlunited
Craker11321@gmail.com
188.165.112.229
They are all located in France. So what do we have here? A spammer or a spambot going on.
BotScout.com: IP Check: 188.165.112.229 (http://botscout.com/ipcheck.htm?ip=188.165.112.229&page=4)
scratchycat
10-05-2012, 01:52 PM
Another check on this one:
Goozle Zone it refers to a unregistered site
18 Responses to “Kate Morant”
Goozle Zone
on Sep 21st, 2012
@ 1:41 pm:
Check this out…
The information mentioned in the article are some of the best available…
Goozle Zones
on Sep 24th, 2012
@ 3:18 am:
Websites you should visit…
Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose…
Kate Morant « Cornell Premedical Society (http://rso.cornell.edu/premed/about/kate-morant/)
Does anyone know anything more about this, I need to block them from my blog?
Powered by vBulletin® Version 4.2.5 Copyright © 2024 vBulletin Solutions Inc. All rights reserved.