KaS caught spammer red handed

Comment spammer banned:

lizasychka
[email protected]
178.150.51.131
131.51.150.178.triolan.net
Joined: Sun Oct 17, 2010 7:58 pm
Last visited: Mon Oct 18, 2010 5:31 pm

http://www.icq.com/whitepages/about_me.php?uin=525
[url]http://members.msn.com/mil.itaryboygotohappybeach[/url]@gmail.com
[url]http://777drugs.com/[/url]
[url]http://search.san-ta-maria.org/link/viagra/1_workathome3.html[/url]
[url]http://search.san-ta-maria.org/link/viagra/2_workathome3.html[/url]
[url]http://search.san-ta-maria.org/link/viagra/3_workathome3.html[/url]
[url]http://search.san-ta-maria.org/link/viagra/4_workathome3.html[/url]
[url]http://search.san-ta-maria.org/link/viagra/5_workathome3.html[/url]
[url]http://pharmacyheads.com/?aid=200741&q=tramadol[/url]
[url]http://www.viagra.com/[/url]

Then it came back!! So this time I banned 178.150.51.* for this reason: "repeat illegal pharmacy spammer"

lizasasychka
[email protected]
178.150.51.125
125.51.150.178.triolan.net
inetnum: 178.150.0.0 - 178.151.255.255
Spam signature: viagra er | aan agcode viagra
Spam link in signature: http://777drugs.com/
Spammer's Profile website: viagra onde comprar | medicamentos viagra
Spammer profile site links to: http://777drugs.com/
Joined: Thu Oct 21, 2010 1:46 pm
Last visited: Thu Oct 21, 2010 2:04 pm

I have had to ban this one from 3 bulletin boards already in 3 days (2 I admin on and one I moderate)!

So far:
178.150.51.131
178.150.51.125

Other IP's seen by Project Honeypot in the same range:

IPs In The Neighborhood
178.150.51.15 [Unknown]
178.150.51.21 [Unknown]
178.150.51.40 | S [Unknown]
178.150.51.49 | SD [Unknown]
178.150.51.52 | SD [Unknown]
178.150.51.125 | C [Unknown]
178.150.51.131 | C [Unknown]
178.150.51.145 | S [Unknown]
178.150.51.196 | S [Unknown]
178.150.51.198 | S [Unknown]
178.150.51.213 | S [Unknown]
178.150.51.216 | S [Unknown]
178.150.51.245 [Unknown]

Seen under these email addresses so far:

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]

Seen under these user names:

lizasychka
lizasasychka
lizasychkaw
lizasychkaf
lizasych

and spamming websites such as:

hXXp://777drugs.com/
hxxp://search.san-ta-maria.org/link/viagra/1_workathome3.html
hxxp://pharmacyheads.com/?aid=200741&q=tramadol
hxxp://www.viagra.com/
hxxp://nazakaz.com.ua
hxxp://twitter.com/Salomefub
hxxp://precision-blackjack.ahill.biz/roulette-game-download.html
hxxp://precision-blackjack.ahill.biz/roulette-game-download.html
hxxp://precision-blackjack.ahill.biz/map-2.html
hxxp://precision-blackjack.ahill.biz/how-to-win-at-blackjack.html
hxxp://altace.best-searcher.net/cheap-generic-altace-rx-mex-altace-discount-code-in-brisbane.html
hxxp://atrovent.better-search.biz/comprare-atrovent-generico.html
hxxp://brethaire.bidssearcher.net/take-brethaire-cheap.html
hxxp://casodex.click-search.biz/buy-casodex-generic-columbus.html
hxxp://chloroquine.eng-search.net/lowest-price-chloroquine-in-juneau.html
hxxp://diltiazem.fast-searcher.biz/diltiazem-order-online-no-membership-overnight-.html
hxxp://epitol.good-searcher.net/buy-epitol-w-o-rx.html
hxxp://flagyl.iesercher.net/flagyl-problems.html
hxxp://grifulvin.insearcher.net/grifulvin-order-online-no-membership-overnight.html
hxxp://lariam.lookupsearch.biz/get-prescription-online-for-oxycontilariam-price.html
hxxp://micronase.outsearcher.net/micronase-cod-saturday-delivery-fedex.html
hxxp://adoxa.posterous.com/
hxxp://adoxa.ahill.biz/buy-adoxa-in-houston.html
hxxp://forum.ea.com/eaforum/posts/list/2080837.page
hxxp://forum.ea.com/eaforum/posts/list/2080411.page

and a lot more but I am not going to post them all!!

This forum has NOT deleted the spam so the spam has went crazy posting up to 228 posts (10.364 per day) already between September 28, 2010 and Oct 21st 2010!!

http://fvfoa.com/index.php?action=profile;u=14414

Another site it has spammed on and not been deleted is (as listed on http://www.siteadvisor.com/sites/uptodatearticles.com) has spammed 102 posts (4.435 per day) between September 28, 2010 and October 21, 2010!!

http://uptodatearticles.com/forum/index.php?action=profile;u=34

And this next one is really REALLY bad!:

http://titanhobbyshop.com/forum/index.php?action=profile;u=21221

It has spammed and been not deleted .. 1644 posts (71.478 per day) between September 28, 2010 and October 21, 2010!!

According to Google's cache however I guess it has slowed down on spamming as on October 7th, 2010 the profile said its spam rate was at 133.556 per day!!

Also I noticed using that, that it edits its profile a lot:

On Oct 7th its "website" was called:
tramadol prescriptions | tramadol overnight no script mastercard accepted

and today its "website" is called:
buy cheap tramadol prescriptions online | or buy tramadol order cod