PDA

View Full Version : Dedicated Spammer, Spambot or Scammer??



scratchycat
10-05-2012, 01:02 PM
Yesterday I started getting comments on my Blog that seemed okay but then when it sounded more like spamming, I decided to do some more checking. Still not sure exactly why this is and exactly what is going on but I am deleting all the pingbacks from my blog.

This is the information I have gathered on this and hopefully it will help other bloggers or website owners.

This a portion of email received since I approve comments before they are posted:


Website : Goozle Zones (IP: 188.165.112.229 , 188-165-112-229.kimsufi.com) see below
URL : http://goozlereregfrezones.com/
Trackback excerpt:
<strong>Excellent website...</strong>

---
Okay first of all, the goozlereregfrezones.com is not a viable link.

http://188-165-112-229.kimsufi.com/

This XRumer low life is running his forum spambot script as a dedicated spam server bot from spambot infested kimsufi/OVH data centers.

Dedicated spam server bot running on kimsufi.com IP 178.33.249.242

http://www.forumpostersunion.com/showthread.php?t=21414



XRumer spam server bot host name: 178-33-249-242.kimsufi.com

IP Location: France Paris Ovh Systems

Resolve Host: 178-33-249-242.kimsufi.com

inetnum: 178.33.248.0 - 178.33.255.255
netname: OVH
descr: OVH SAS
descr: Dedicated Servers
country: FR
admin-c: OK217-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
source: RIPE # Filtered

role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox:
mnt-by: OVH-MNT
source: RIPE # Filtered

person: Octave Klaba
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
phone: +33 9 74 53 13 23
nic-hdl: OK217-RIPE
abuse-mailbox:
mnt-by: OVH-MNT
source: RIPE # Filtered

route: 178.32.0.0/15
descr: OVH ISP
descr: Paris, France
origin: AS16276
mnt-by: OVH-MNT
source: RIPE # Filtered

__________________

scratchycat
10-05-2012, 01:06 PM
I found http://goozlerzone.com/ registered to Jason Harrington. A Google Search on Jason comes up with these:


Jason Harrington Registrant Street1:1735 S. Peoria Ave #55 at ...

website.informer.com/Jason+Harrington+Registrant+Street1%3...

Company: Jason Harrington Registrant Street1:1735 S. Peoria Ave #55. Address: 1735 S. Peoria Ave #55 Tulsa OK 74120 US Phone: +1.9189245895 ...

MyWapPorn.com - My Wap Porn

whois.domaintools.com/mywapporn.com

Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...

MyPornoWap.com - My Porno Wap
whois.domaintools.com/mypornowap.com
Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
KatyCouric.com - Katy Couric

whois.domaintools.com/katycouric.com

Sep 9, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...

ClickExAto.com - Click Ex Ato
whois.domaintools.com/clickexato.com
Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120 ...
TheGoldenAngels.biz - The Golden Angels
whois.domaintools.com/thegoldenangels.biz
"Jason Harrington" owns about470 other domains ... Administrative Contact Address1: 1735 S. Peoria Ave #55. Administrative Contact City: Tulsa Administrative Contact State/Province: OK Administrative Contact Postal Code: 74120 ...


EiMino.com - Ei Mino
whois.domaintools.com/eimino.comShare

Sep 6, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
UltimatePowerPofIts.com - Ultimate Power Pof Its

whois.domaintools.com/ultimatepowerpofits.com
Sep 1, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...
Kinomaniac.tv - Kinomaniac
kinomaniac.tv.pandastats.net/
Mar 30, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States kwelx@kwelx.com +1 9189245895. Record expires on 2013/03/30 ...
Fivance.com - Fivance
fivance.com.hypestat.com/
Aug 31, 2012 – Jason Harrington 1735 S. Peoria Ave #55. Tulsa, OK 74120. United States Administrative Contact: Jason Harrington 1735 S. Peoria Ave #55 ...

Very interesting but after emailing it seems he knows nothing about this.

scratchycat
10-05-2012, 01:09 PM
I sent an email to kwelx@kwelx.com and asked for an explanation. My answer:


Jason Harrington kwelx@kwelx.com
12:55 PM (27 minutes ago)
to me


http://goozlereregfrezones.com isn't even a registered domain. I don't
know what Goozle Zone is (or Goozle ZoneS is, which is actually what
is in your email above). I have the domain goozlerzone.com registered
and parked.

You might want to do some research before you blindly email every
domain owner on every spam comment you receive on your blog.

-K

Guess I owe Mr. Jason an apology, except it was not blindly emailing every domain owner since it was only one and I did research it. Yet, I question something
"Jason Harrington" owns about 670 other domains with that many domains and so closely related to Goozlerzone... hmmm....

scratchycat
10-05-2012, 01:48 PM
The first one that this person tried was using this name, so I did a search on it and found this:



« prev123456next »







IP

From



2012-08-17 08:55 AM googlezerlunited Wolfson5006@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Delahunt17794@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Grudzinski19955@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Sandhaus17495@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Mcnary13112@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Cheetham9105@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Codling12429@gmail.com

188.165.112.229





2012-08-17 08:45 AM

googlezerlunited

Hindall18961@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Khiev8120@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Vagt13288@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Tapanes17424@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Andreozzi10165@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Kelzer14332@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Coffinberger3820@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Begnaud2921@gmail.com

188.165.112.229





2012-08-17 08:25 AM

googlezerlunited

Breske18921@gmail.com

188.165.112.229





2012-08-17 08:05 AM

googlezerlunited

Nan10892@gmail.com

188.165.112.229





2012-08-17 08:05 AM

googlezerlunited

Spomer8529@gmail.com

188.165.112.229





2012-08-17 08:05 AM

googlezerlunited

Guderjahn18203@gmail.com

188.165.112.229





2012-08-17 07:55 AM

googlezerlunited

Zwack14675@gmail.com

188.165.112.229





2012-08-17 07:55 AM

googlezerlunited

Carmichael6160@gmail.com

188.165.112.229





2012-08-17 07:45 AM

googlezerlunited

Phelts15930@gmail.com

188.165.112.229





2012-08-17 07:45 AM

googlezerlunited

Daughterty12623@gmail.com

188.165.112.229





2012-08-17 07:45 AM

googlezerlunited

Blazejewski13293@gmail.com

188.165.112.229





2012-08-17 07:45 AM

googlezerlunited

Nalepa10748@gmail.com

188.165.112.229





2012-08-17 07:45 AM

googlezerlunited

Chesnut6678@gmail.com

188.165.112.229





2012-08-17 07:25 AM

googlezerlunited

Rief10311@gmail.com

188.165.112.229





2012-08-17 07:25 AM

googlezerlunited

Hardaway4269@gmail.com

188.165.112.229





2012-08-17 07:25 AM

googlezerlunited

Gabor7350@gmail.com

188.165.112.229





2012-08-17 07:05 AM

googlezerlunited

Huxtable5430@gmail.com

188.165.112.229





2012-08-17 07:05 AM

googlezerlunited

Flenaugh5809@gmail.com

188.165.112.229





2012-08-17 07:05 AM

googlezerlunited

Spindle14197@gmail.com

188.165.112.229





2012-08-17 07:05 AM

googlezerlunited

Seibel18355@gmail.com

188.165.112.229





2012-08-17 07:05 AM

googlezerlunited

Craker11321@gmail.com

188.165.112.229

They are all located in France. So what do we have here? A spammer or a spambot going on.

BotScout.com: IP Check: 188.165.112.229 (http://botscout.com/ipcheck.htm?ip=188.165.112.229&page=4)

scratchycat
10-05-2012, 01:52 PM
Another check on this one:
Goozle Zone it refers to a unregistered site
18 Responses to “Kate Morant”

Goozle Zone
on Sep 21st, 2012
@ 1:41 pm:

Check this out…

The information mentioned in the article are some of the best available…

Goozle Zones
on Sep 24th, 2012
@ 3:18 am:

Websites you should visit…

Every once in a while we choose blogs that we read. Listed below are the latest sites that we choose…

Kate Morant « Cornell Premedical Society (http://rso.cornell.edu/premed/about/kate-morant/)

Does anyone know anything more about this, I need to block them from my blog?