Alexandre Krouglov

From Spamhuntress

Jump to: navigation, search

This one arrived as referrer spam on Spamhuntress November 21, 2005.

This is a bad boy. He's been indicated in Coolwebsearch browser hijackings for another site he has/had.

For this spamrun, he's using Russian subdomain sites which he extends with subdomains of those again, with a redirect going to a site belonging to him at:

  • 1listing.org

His spambot is on his own IP address, and it's poorly coded. He requested the same page 8 times the same second, 8 times the next second. After about 30 seconds he went for another page, requesting it 8 times. Then waits about 45 minutes before requesting the same page again, maybe 16 times. As I'm writing this, he's still going. I need to block him!

Spambot:

  • 216.255.178.130


Website IP:

  • 216.255.178.133


Whois: 

Domain Name:1LISTING.ORG
Created On:11-Sep-2004 17:08:20 UTC
Last Updated On:24-Sep-2005 08:41:41 UTC
Expiration Date:11-Sep-2006 17:08:20 UTC
Registrant Name:Alexandre
Registrant Organization:Krouglov
Registrant Street1:Nalichnaya str 36 7 199
Registrant City:Saint Petersburg
Registrant State/Province:Saint Petersburg
Registrant Postal Code:199226
Registrant Country:RU
Registrant Phone: 7.8123568163
Registrant FAX: 7.8123568163
Registrant Email: ns@teensgate.com
Name Server:NS2.DNS-DIY.COM
Name Server:NS1.DNS-DIY.COM


Update

In 2001 he was quoted when he was talking about proxy checkers. The site I found this on could only be found in Google's cache if you save the resulting page then look at it in a text editor.--Spamhuntress 12:54, 24 Jun 2006 (CDT)

Retrieved from "http://spamhuntress.com/w/index.php/Alexandre_Krouglov"
Personal tools