WebProWorld Part of WebProNews.com
Page One Link To Us Edit Profile Private Messages Archives FAQ RSS Feeds  
 

Go Back   WebProWorld > Webmaster, IT and Security Discussion > Database Discussion Forum
Subscribe to the Newsletter FREE!


Register FAQ Members List Calendar Arcade Chatbox Mark Forums Read

Database Discussion Forum This is the place to find help resolving those nagging questions you have about implementing and using all kinds of databases. Need help writing a query? Need an opinion on Oracle? Post here!

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 03-28-2006, 05:28 AM
kgun's Avatar
WebProWorld 1,000+ Club
 

Join Date: May 2005
Location: Norway
Posts: 5,125
kgun RepRank 3kgun RepRank 3
Default

A related problem: Look at my forum ForumNorway how it has been spammed by a spammer before I delete the posts. Did you know how excellent phpBB is to log info about visitors?:

IP address for this post:
200.121.30.204 [ 1 Post ]
Guest [ 1 Post ]

Other IP addresses this user has posted from

217.218.42.253 [ 3 Posts ] [ Look up IP address ]

134.83.1.225 [ 3 Posts ] [ Look up IP address ]

202.15.39.180 [ 2 Posts ] [ Look up IP address ]

203.115.1.135 [ 2 Posts ] [ Look up IP address ]

68.109.146.151 [ 2 Posts ] [ Look up IP address ]

202.88.129.254 [ 2 Posts ] [ Look up IP address ]

219.33.138.58 [ 1 Post ] [ Look up IP address ]

218.224.232.202 [ 1 Post ] [ Look up IP address ]

210.101.39.200 [ 1 Post ] [ Look up IP address ]

212.77.192.62 [ 1 Post ] [ Look up IP address ]

81.57.109.99 [ 1 Post ] [ Look up IP address ]

220.41.224.87 [ 1 Post ] [ Look up IP address ]

193.255.141.15 [ 1 Post ] [ Look up IP address ]

210.200.105.217 [ 1 Post ] [ Look up IP address ]

221.145.241.34 [ 1 Post ] [ Look up IP address ]

81.189.62.106 [ 1 Post ] [ Look up IP address ]

212.175.113.60 [ 1 Post ] [ Look up IP address ]

220.245.178.140 [ 1 Post ] [ Look up IP address ]

202.28.204.123 [ 1 Post ] [ Look up IP address ]

66.185.85.69 [ 1 Post ] [ Look up IP address ]

83.236.196.13 [ 1 Post ] [ Look up IP address ]

201.224.73.226 [ 1 Post ] [ Look up IP address ]

70.72.51.58 [ 1 Post ] [ Look up IP address ]

219.37.12.67 [ 1 Post ] [ Look up IP address ]

195.39.170.102 [ 1 Post ] [ Look up IP address ]

195.140.178.218 [ 1 Post ] [ Look up IP address ]

148.243.189.26 [ 1 Post ] [ Look up IP address ]

216.52.234.240 [ 1 Post ] [ Look up IP address ]

194.179.85.15 [ 1 Post ] [ Look up IP address ]

221.114.194.12 [ 1 Post ] [ Look up IP address ]

219.211.140.145 [ 1 Post ] [ Look up IP address ]

85.214.33.173 [ 1 Post ] [ Look up IP address ]

59.165.190.38 [ 1 Post ] [ Look up IP address ]

212.138.47.14 [ 1 Post ] [ Look up IP address ]

69.133.103.54 [ 1 Post ] [ Look up IP address ]

200.164.36.58 [ 1 Post ] [ Look up IP address ]

211.106.179.66 [ 1 Post ] [ Look up IP address ]

63.241.242.65 [ 1 Post ] [ Look up IP address ]

222.228.173.153 [ 1 Post ] [ Look up IP address ]

66.98.186.40 [ 1 Post ] [ Look up IP address ]

213.10.119.162 [ 1 Post ] [ Look up IP address ]

82.127.56.211 [ 1 Post ] [ Look up IP address ]

210.20.10.109 [ 1 Post ] [ Look up IP address ]

125.248.157.82 [ 1 Post ] [ Look up IP address ]

203.130.202.85 [ 1 Post ] [ Look up IP address ]

218.236.202.167 [ 1 Post ] [ Look up IP address ]

83.14.88.171 [ 1 Post ] [ Look up IP address ]

218.248.18.131 [ 1 Post ] [ Look up IP address ]

81.56.211.83 [ 1 Post ] [ Look up IP address ]

125.245.24.170 [ 1 Post ] [ Look up IP address ]

212.175.113.58 [ 1 Post ] [ Look up IP address ]

203.115.1.134 [ 1 Post ] [ Look up IP address ]

200.49.222.51 [ 1 Post ] [ Look up IP address ]

69.151.54.142 [ 1 Post ] [ Look up IP address ]

212.138.64.180 [ 1 Post ] [ Look up IP address ]

202.58.86.3 [ 1 Post ] [ Look up IP address ]

66.166.127.226 [ 1 Post ] [ Look up IP address ]

193.224.189.2 [ 1 Post ] [ Look up IP address ]

61.43.42.142 [ 1 Post ] [ Look up IP address ]

198.87.97.129 [ 1 Post ] [ Look up IP address ]

85.18.175.238 [ 1 Post ] [ Look up IP address ]

83.160.180.101 [ 1 Post ] [ Look up IP address ]

212.49.85.94 [ 1 Post ] [ Look up IP address ]

221.162.92.30 [ 1 Post ] [ Look up IP address ]

217.153.7.238 [ 1 Post ] [ Look up IP address ]

219.223.122.20 [ 1 Post ] [ Look up IP address ]

201.245.28.74 [ 1 Post ] [ Look up IP address ]

212.174.26.182 [ 1 Post ] [ Look up IP address ]

201.252.179.103 [ 1 Post ] [ Look up IP address ]

208.34.72.8 [ 1 Post ] [ Look up IP address ]

62.233.185.58 [ 1 Post ] [ Look up IP address ]

202.65.147.54 [ 1 Post ] [ Look up IP address ]

219.117.221.193 [ 1 Post ] [ Look up IP address ]

132.248.103.131 [ 1 Post ] [ Look up IP address ]

222.235.53.42 [ 1 Post ] [ Look up IP address ]

213.75.12.76 [ 1 Post ] [ Look up IP address ]

80.207.161.250 [ 1 Post ] [ Look up IP address ]

200.69.24.9 [ 1 Post ] [ Look up IP address ]

201.6.14.174 [ 1 Post ] [ Look up IP address ]

193.80.42.145 [ 1 Post ] [ Look up IP address ]

82.133.71.155 [ 1 Post ] [ Look up IP address ]

24.228.0.51 [ 1 Post ] [ Look up IP address ]

203.140.240.86 [ 1 Post ] [ Look up IP address ]


If I combine these with http://www.dnsstuff.com/ I know most about the spammer. What would you have done? He has consciously "destroyed" eProperty and my logo.
Reply With Quote
  #2 (permalink)  
Old 03-28-2006, 06:43 AM
kgun's Avatar
WebProWorld 1,000+ Club
 

Join Date: May 2005
Location: Norway
Posts: 5,125
kgun RepRank 3kgun RepRank 3
Default Is it a global spam liga?

Here are a few of them, even from UK and USA sites.

IP: 200.121.30.204

Joint Whois - whois.lacnic.net
% This server accepts single ASN, IPv4 or IPv6 queries


% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2006-03-28 08:31:32 (BRT -03:00)

inetnum: 200.121.30.128/25
status: reallocated
owner: PE-TDPERX6-LACNIC
ownerid: PE-PETD8-LACNIC
responsible: Telefonica del Peru
address: Av. San Felipe 1144, 1144, Edi. A
address: 34 - Lima -
country: PE


IP: 217.218.42.253

Using 20 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-pr...-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '217.218.42.128 - 217.218.42.255'

inetnum: 217.218.42.128 - 217.218.42.255
netname: BEHESHTI-UNI
descr: Medical Science University of Shahid Beheshti
country: IR
admin-c: HA771-RIPE
tech-c: HA771-RIPE
status: ASSIGNED PA
mnt-by: AS12880-MNT
changed: alipour@mail.dci.co.ir 20040412
source: RIPE

person: Hossein Atashnak
address: Shahid Chamran High way,Tehran
phone: +98 21 8306308
e-mail: Atashnak@sbmu.ac.ir
nic-hdl: HA771-RIPE
changed: alipour@mail.dci.co.ir 20040412
source: RIPE

IP: 134.83.1.225

Using 17 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).

% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-pr...-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Information related to '134.83.0.0 - 134.83.255.255'

inetnum: 134.83.0.0 - 134.83.255.255
netname: BRUNEL-NET
descr: Brunel University Network
country: GB
admin-c: SF607-RIPE
tech-c: SF607-RIPE
mnt-by: JANET-HOSTMASTER
status: ASSIGNED PI
changed: ****@noc.ulcc.ac.uk 19911107
changed: ****@noc.ulcc.ac.uk 19911107
changed: ***@cwi.nl 19911113
changed: ********@ripe.net 20000225
changed: ******@ukerna.ac.uk 20020613
changed: ***********@ripe.net 20031126
changed: *********@ukerna.ac.uk 20050301
source: RIPE

person: Simon Furber
address: Brunel University
address: Uxbridge, UB8 3PH
phone: +44 1895 203066
e-mail: ************@brunel.ac.uk
nic-hdl: SF607-RIPE
changed: ****@noc.ulcc.ac.uk 19910815
changed: ****@cwi.nl 19910815
changed: **********@nic.ja.net 19970701
changed: ******@ukerna.ac.uk 20020613
source: RIPE

% Information related to '134.83.0.0/16AS786'

route: 134.83.0.0/16
descr: Brunel University
descr: Uxbridge Campus
descr: Uxbridge UB8 3PH
descr: UNITED KINGDOM
origin: AS786
mnt-by: JIPS-NOSC
changed: ******@ans.net 19951011
source: RIPE

IP: 202.15.39.180

Location: Japan

ARIN says that this IP belongs to APNIC; I'm looking it up there.

Using 14 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).


IP: 203.115.1.135
Location: Sri Lanka

ARIN says that this IP belongs to APNIC; I'm looking it up there.


Using 18 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).

% [whois.apnic.net node-2]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 203.115.0.0 - 203.115.63.255
netname: SLTNETBLK
descr: Sri Lanka Telecom
descr: Internet Service Provider in Sri Lanka
country: LK
admin-c: ID1-AP
tech-c: ID1-AP
remarks: for ABUSE & SPAM email *********@slt.lk>
mnt-by: APNIC-HM
mnt-lower: MNT-SLT-LK
mnt-routes: MNT-SLT-LK
changed: **********@apnic.net 20030929
status: ALLOCATED PORTABLE
changed: **********@apnic.net 20030929
source: APNIC

person: IRSHAD DEEN
address: SRI LANKA TELECOM INTERNET
address: DATA COMMUNICATION DIVISION
address: FIFTH FLOOR
address: OTS BUILDING
address: SRI LANKA TELECOM
address: LOTUS ROAD
address: COLOMBO 1
country: LK
phone: +94-1-441819
phone: +94-1-350775
fax-no: +94-1-331154
e-mail: ****@slt.lk
nic-hdl: ID1-AP
mnt-by: MAINT-NULL
changed: **********@apnic.net 19980625
source: APNIC


IP: 68.109.146.151

Location: United States [City: Tempe, Arizona]

NOTE: More information appears to be available at NET-68-96-0-0-1.

Using 0 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).

Cox Communications Inc. NETBLK-PH-RDC-68-109-128-0 (NET-68-109-128-0-1)
68.109.128.0 - 68.109.191.255
Cox Communications Inc. COX-ATLANTA-2 (NET-68-96-0-0-1)
68.96.0.0 - 68.111.255.255

# ARIN WHOIS database, last updated 2006-03-27 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


IP: 66.166.127.226

Location: United States [City: Los Angeles, California]

Looking up 66.166.127.226 at whois.arin.net.

NOTE: More information appears to be available at ZC178-ARIN.

Using 9 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system).


OrgName: Covad Communications Co.
OrgID: CVAD
Address: 2510 Zanker Rd.
City: San Jose
StateProv: CA
PostalCode: 95131
Country: US

ReferralServer: rwhois://rwhois.covad.net:4321

NetRange: 66.166.0.0 - 66.167.255.255
CIDR: 66.166.0.0/15
NetName: NETBLK-COVAD-IP-3-NET
NetHandle: NET-66-166-0-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS3.COVAD.COM
NameServer: NS4.COVAD.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
Comment: Reassignment information for this block of addresses can
Comment: be found at rwhois://rwhois.laserlink.net:4321/
RegDate: 2001-09-10
Updated: 2004-03-11

RAbuseHandle: CART-ARIN
RAbuseName: Covad abuse reporting team
RAbusePhone: +1-703-376-2830
RAbuseEmail: abuse-isp@covad.com

RTechHandle: ZC178-ARIN
RTechName: Admin
RTechPhone: +1-888-801-6285
RTechEmail: ip_admin@covad.com

OrgAbuseHandle: CART-ARIN
OrgAbuseName: Covad abuse reporting team
OrgAbusePhone: +1-703-376-2830
OrgAbuseEmail: abuse-isp@covad.com

OrgNOCHandle: CIN-ARIN
OrgNOCName: COVAD IP NOC
OrgNOCPhone: +1-888-801-6285
OrgNOCEmail: noc-ipservices@covad.com

OrgTechHandle: ZC178-ARIN
OrgTechName: Admin
OrgTechPhone: +1-888-801-6285
OrgTechEmail: ip_admin@covad.com


IP: 63.241.242.65
Location: United States [City: Dallas, Texas]

NOTE: More information appears to be available at NET-63-241-240-0-1.

Using 3 day old cached answer (or, you can get fresh results).
Hiding E-mail address (you can get results with the E-mail address).

CERFnet CERFNET-BLK-5 (NET-63-240-0-0-1)
63.240.0.0 - 63.242.255.255
InterActiveCorp ATTENS-009430-003155 (NET-63-241-240-0-1)
63.241.240.0 - 63.241.243.255

# ARIN WHOIS database, last updated 2006-03-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.


And this site from Taiwan. is central.

http://www.ebix.net.tw/
Reply With Quote
Reply

  WebProWorld > Webmaster, IT and Security Discussion > Database Discussion Forum
Tags: ,



Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Search Engine Optimization by vBSEO 3.2.0