Spam botnet and hacker IP addresses

Online drug store, Viagra spammer.

Spambot forum user name: wekeehothedot

strathmore@mail.ru

IP of spam bot operation: 91.76.125.89 : ppp91-76-125-89.pppoe.mtu-net.ru

[Tony]

IP 89.131.113.238 is being used by a professional spam botnet operation, this is a very rare look at a spam harvester bot in action scanning a forum. Note how many connections hit the forum at one time from the same IP.

IP 89.131.113.238 is part of a large spam harvesting, mail server and dictionary attacker network and is blacklisted by ProjectHoneyPot.org.


06:09 PM Guest Viewing Thread
500 Platinum Domain Name Keywords/Words 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.1)

06:09 PM Guest Viewing Thread
500 Platinum Domain Name Keywords/Words 89.131.113.238
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7

06:09 PM Guest Viewing Thread
500 Platinum Domain Name Keywords/Words 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

06:09 PM Guest Searching Forums
User: ValuableDomains 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

06:09 PM Guest Viewing Member List 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET)

06:09 PM Guest Searching Forums 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

06:10 PM Guest Viewing Thread
Domaining Field Guide and tutorial 89.131.113.238
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7

06:10 PM Guest Replying to Thread
Domaining Field Guide and tutorial 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.1)

06:10 PM Guest Viewing Forum
Intelligence for domain name development 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

06:10 PM Guest Viewing Thread
Domaining Field Guide and tutorial 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

06:10 PM Guest Viewing Thread
Domaining Field Guide and tutorial 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

06:10 PM Guest Viewing Thread
Domaining Field Guide and tutorial 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET)

06:12 PM Guest Viewing Thread
31 Domains on Ebay Auction - No Reserve HDTVFOX.COM - 3 days 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.1)

06:12 PM Guest Viewing Printable Version
dSounds.com 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

06:12 PM Guest Viewing Thread
31 Domains on Ebay Auction - No Reserve HDTVFOX.COM - 3 days 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET)

06:11 PM Guest Viewing Thread
31 Domains on Ebay Auction - No Reserve HDTVFOX.COM - 3 days 89.131.113.238
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7

06:11 PM Guest Viewing Member List 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

06:11 PM Guest Viewing Thread
Spam botnet and hacker IP addresses 89.131.113.238
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Associated spam harvester IP's:

201.45.237.135
87.218.162.157
87.221.125.161
87.223.207.22
88.82.201.9
88.122.71.97
88.136.9.223
89.6.87.194