User:Mathonius/Reports/"ENDVALUE" spam

This is an effort to compile data about the "ENDVALUE" spambots (see this for example, variant). Please feel free to edit this page.

Wiki's

• pms.wikipedia - recent changes
• simple.wiktionary - recent changes
• ...

Abuse Filter

• Abuse Filter 33 Log - simple.wp
• Abuse Filter 61 - meta
• Commons:Special:AbuseFilter/106 - Commons (& appreciated!)
• simple:wikt:Special:AbuseFilter/6 (includes filters for several spambots including the ENDVALUE spammer) - simple.wt
• en:w:Special:AbuseFilter/523 - enwiki
• w:es:Especial:FiltroAntiAbusos/2 - eswiki

Ranges

• ...
• 36.248.64.0/18 xwiki-contribs • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - gblocked until 01:52, 13 April 2013 (UTC)
• 112.111.0.0/18 xwiki-contribs • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - simple.wp - blocked 08:45, 8 January 2013 (UTC)
• 220.200.12.0/22 xwiki-contribs • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - simple.wp - blocked 14:03, 8 January 2013 (UTC)

IP's

• ...
• 112.111.54.86 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), it.wp - 10:10, 05 jun 2013 (UTC)
• 175.42.11.100 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - cr.wp, de.wp - 18:04, 14 may 2013 (UTC)
• 220.250.42.118 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) - 16:43, 14 may 2013 (UTC)
• 220.250.42.118 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), fr.q, sv.wikt - 14:46, 8 may 2013 (UTC)
• 175.42.11.68 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), br.wp, de.v, de.wp, it.s, sv.wikt - 13:41, 8 may 2013 (UTC)
• 61.241.220.58 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), de.v, de.wp - 09:42, 8 may 2013 (UTC)
• 220.250.41.40 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), br.wp, de.v, de.wp, sv.wikt - 09:21, 8 may 2013 (UTC)
• 58.22.21.214 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) - 09:57, 8 may 2013 (UTC)
• 126.15.7.155 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 09:54, 5 April 2013 (UTC)
• 222.122.68.41 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 09:54, 5 April 2013 (UTC)
• 36.248.20.55 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), fr.wp, it.wp - 04:40, 19 March 2013 (UTC)
• 112.111.14.197 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) - 02:58, 19 March 2013 (UTC)
• 220.249.165.142 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) - 14:58, 18 March 2013 (UTC)
• 36.248.20.55 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) - 13:06, 18 March 2013 (UTC)
• 211.97.109.82 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), it.wp - 21:53, 17 March 2013 (UTC)
• 61.241.220.192 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), de.wp - 08:21, 16 March 2013 (UTC)
• 61.241.223.142 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp - 17:21, 13 March 2013 (UTC)
• 220.249.166.13 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp - 08:58, 13 March 2013 (UTC)
• 112.111.52.37 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 05:57, 13 March 2013 (UTC)
• 220.249.164.124 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 04:27, 12 March 2013 (UTC)
• 61.241.221.59 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 02:54, 12 March 2013 (UTC)
• 220.200.12.198 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), mw, it.wp - 00:16, 11 March 2013 (UTC)
• 220.249.164.228 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), it.wp - 13:15, 8 March 2013 (UTC)
• 112.111.53.205 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.q, de.wp - 05:04, 8 March 2013 (UTC)
• 112.111.13.151 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - it.wp - 23:25, 6 March 2013 (UTC)
• 112.111.15.24 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.q, en.s, fr.wp, mw 04:29, 6 March 2013 (UTC)
• 220.249.164.73 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.s, en.v 02:18, 6 March 2013 (UTC)
• 112.111.54.156 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - bxr.wp, en.q, fr.wp, it.wp 01:32, 6 March 2013 (UTC)
• 112.111.12.247 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - co.wikt 01:16, 6 March 2013 (UTC)
• 220.249.166.106 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), de.wp, ru.wp 08:26, 5 March 2013 (UTC)
• 112.111.54.69 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), de.wp 06:52, 4 March 2013 (UTC)
• 112.111.14.3 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) 09:26, 3 March 2013 (UTC)
• 36.251.47.3 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.wp 07:43, 3 March 2013 (UTC)
• 36.248.20.153 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - de.v - 15:38, 1 March 2013 (UTC)
• 36.248.22.143 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ca.wp, en.v, it.wp, mw - 19:03, 28 February 2013 (UTC)
• 112.111.55.54 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v, en.s, mw - 00:31, 28 February 2013 (UTC)
• 61.241.222.31 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v, en.s - 16:15, 26 February 2013 (UTC)
• 220.200.13.171 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v, en.s - 16:15, 26 February 2013 (UTC)
• 36.248.23.39 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - mw - 02:57, 26 February 2013 (UTC)
• 220.249.164.209 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ca.wp, en.v - 19:38, 25 February 2013 (UTC)
• 61.241.223.172 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ca.wp, simple.wikt, mw, en.v - 12:44, 16 February 2013 (UTC)
• 61.241.223.151 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.s, fr.wp, it.wp, simple.wikt - 19:02, 6 February 2013 (UTC)
• 61.241.223.150 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - de.v - 06:20, 3 February 2013 (UTC)
• 61.241.222.90 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt) - 16:53, 31 January 2013 (UTC)
• 61.241.221.8 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp (attempt), id.wp - 13:54, 31 January 2013 (UTC)
• 61.241.220.237 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ang.wp, de.wv, en.n, scn.wp, vi.wikt, zh.wikt - 19:23, 30 January 2013 (UTC)
• 36.251.45.241 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp - 18:21, 28 January 2013 (UTC)
• 220.250.40.20 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - es.wp, id.wiki - 22:26, 25 January 2013 (UTC)
• 61.241.222.193 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - simple.wikt - 08:27, 24 January 2013 (UTC)
• 220.250.42.95 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.q - 00:30, 24 January 2013 (UTC)
• 112.111.55.17 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - cr.wp, de.wp, en.q, om.wikt - 19:56, 23 January 2013 (UTC)
• 220.250.40.134 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ss.wp - 17:03, 23 January 2013 (UTC)
• 112.111.13.201 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.q, fr.wp, it.wp, ss.wp - 19:41, 22 January 2013 (UTC)
• 220.249.167.252 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.s, pms.wp - 13:17, 22 January 2013 (UTC)
• 61.241.221.197 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - fur.wp - 13:29, 22 January 2013 (UTC)
• 112.111.12.61 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - fur.wp, en.s - 13:12, 22 January 2013 (UTC)
• 112.111.54.158 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - om.wikt - 05:08, 22 January 2013 (UTC)
• 220.249.165.212 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.n, en.wikt and fr.wikt - 23:36, 21 January 2013 (UTC)
• 36.248.23.202 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v, en.s - 16:47, 21 January 2013 (UTC)
• 220.249.164.223 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v, mw, sco.wp, ti.wikt - 12:20, 21 January 2013 (UTC)
• 36.248.23.217 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - pms.wp, en.n - 11:06, 21 January 2013 (UTC)
• 112.111.14.188 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v, ia.wp - 10:31, 21 January 2013 (UTC)
• 176.212.3.57 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 09:15, 21 January 2013 (UTC)
• 220.249.167.8 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.v - 09:15, 21 January 2013 (UTC)
• 58.22.20.228 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - co.wikt and en.s - 03:28, 21 January 2013 (UTC)
• 112.111.12.61 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - co.wikt - 02:55, 21 January 2013 (UTC)
• 36.248.23.225 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.s and en.n - 02:20, 21 January 2013 (UTC)
• 36.248.22.169 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.s and en.v - 01:53, 21 January 2013 (UTC)
• 36.248.22.218 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ia.wp - 01:44, 21 January 2013 (UTC)
• 61.241.223.37 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - fr.wp - 01:44, 21 January 2013 (UTC)
• 112.111.52.38 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - commons (attempt) and en.s - 01:08, 21 January 2013 (UTC)
• 36.251.47.21 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.wp and fr.wikt - 22:31, 20 January 2013 (UTC)
• 58.22.21.78 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - cr.wp, de.wp, en.q - 02:43, 17 January 2013 (UTC)
• 61.241.222.23 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - de.wp, en.q, it.wp, fr.wp - 01:43, 16 January 2013 (UTC)
• 58.22.23.184 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - na.wp, fr.wp - 01:36, 16 January 2013 (UTC)
• 112.111.53.127 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ny.wp, it.wp - 01:28, 16 January 2013 (UTC)
• 112.111.12.79 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - bxr.wp, en.b, fr.wp, 00:50 16 January 2013 (UTC)
• 61.241.222.246 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.q, fr.wikt, fur.wiki - 23:01, 15 January 2013 (UTC)
• 58.22.23.184 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - na.wp - 20:24, 15 January 2013 (UTC)
• 220.249.167.96 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - it.wp, nl.wp, de.wp, fr.wp, simple.wikt - 00:28, 15 January 2013 (UTC)
• 61.241.223.0 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.wp, nov.wp - 14:19, 13 January 2013 (UTC), en.uncy 00:40, 16 January 2013 (UTC)
• 220.250.40.3 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ti.wikt - 14:19, 13 January 2013 (UTC)
• 220.250.40.162 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.wp - 14:42-15:09, 20 January 2013 (UTC)
• 220.250.41.212 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.wp, en.wikisource and ca.wp - 00:39, 13 January 2013 (UTC)
• 220.250.42.255 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.wp - 15:43-15:57, 20 January 2013; om.wikt - 21:09, 20 January 2013 (UTC)
• 36.248.126.82 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - pms.wp - 03:51, 12 January 2013 (UTC)
• 36.248.125.56 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - simple.wikt - 02:58, 12 January 2013 (UTC)
• 58.22.23.116 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - pms.wp - 01:33, 12 January 2013 (UTC)
• 220.249.167.96 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - en.uncy 00:40, 16 January 2013 (UTC)
• 36.248.20.188 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ny.wp
• 220.249.165.102 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - bxr.wp
• 36.248.20.95 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye- fr.wp , sm.wikt
• 220.249.167.206 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - sm.wikt, nov.wp, fr.wp
• 36.251.45.241 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - simple.wikt - (AbuseLog prevented the IP)
• 61.241.220.237 xwiki-contribs • xwiki-date ^(alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye - ang.wp - 09:07, 30 January 2013

Done a "run my eye down the list" and done the following blocks which seem to cover the bulk. Only for a month, however,

• [16:08] <StewardBot> Billinghurst globally blocked 112.111.0.0/18 (anonymous only, expires 05:08, 24 February 2013) with the following comment: Cross-wiki spam: Please edit logged in from an account
• [16:08] <StewardBot> Billinghurst modified the global block on 220.200.12.0/22 (anonymous only, expires 05:08, 24 February 2013) with the following comment: Cross-wiki spam: Please edit logged in from an account*
• [16:10] <StewardBot> Billinghurst modified the global block on 36.248.0.0/18 (anonymous only, expires 05:08, 24 February 2013) with the following comment: Cross-wiki spam: Please edit logged in from an account
• [16:10] <StewardBot> Billinghurst modified the global block on 220.249.128.0/18 (anonymous only, expires 05:08, 24 February 2013) with the following comment: Cross-wiki spam: Please edit logged in from an account
• [16:11] <StewardBot> Billinghurst modified the global block on 64.241.220.0/22 (anonymous only, expires 05:08, 24 February 2013) with the following comment: Cross-wiki spam: Please edit logged in from an account
• [16:16] <StewardBot> Billinghurst globally blocked 58.22.20.0/22 (anonymous only, expires 05:08, 24 February 2013) with the following comment: Cross-wiki spam: Please edit logged in from an account

  Note: Don't worry about the words use about modified, they are all fresh, I was just reusing a form.

Notes

Most of this spambot's IPs are from Fuzhou, China, otherwise it may be a open proxy.

• The nature of this kind of bot is that it will be proxies - open/exploited/whatever. The only caveat is to be wary of blocking dynamic IPs (though some of those are not actually dynamic...)