I used Symantecs Visual Tracking but it found no results.

Location - Unknown
Node Name - udp038291uds.hawaiiante... > end of screen

Christer

#    IP address       Host name                                Round trip time
1    192.168.1.1      Unavailable                                  1 ms
2    68.4.xx.xx        xxxxxxxxxx                                   14 ms
3    68.4.15.209      Unavailable                                  10 ms
4    68.4.15.225      Unavailable                                  11 ms
5    68.4.14.222      ip68-4-14-222.oc.oc.cox.net                  13 ms
6    68.4.14.97       rsmtdsrj02-ge706.rd.oc.cox.net               13 ms
7    68.4.15.1        Unavailable                                  12 ms
8    65.59.168.1      so-4-0.hsa2.Tustin1.Level3.net               14 ms
9    4.68.114.9       so-10-0.hsa1.Tustin1.Level3.net              13 ms
10   4.68.114.5       so-1-1-0.mp1.Tustin1.Level3.net              12 ms
11   64.159.1.126     ae-0-0.bbr2.LosAngeles1.Level3.net           19 ms
12   4.68.102.16      ge-0-0-0-51.gar1.LosAngeles1.Level3.net         14 ms
13   64.152.193.74    sprint-level3-oc192.LosAngeles1.Level3.         15 ms
14   144.232.8.95     sl-bb21-ana-4-0.sprintlink.net               23 ms
15   144.232.1.186    sl-bb23-ana-13-0.sprintlink.net              16 ms
16   144.232.8.205    sl-bb20-prl-9-2.sprintlink.net               70 ms
17   144.232.30.22    sl-gw2-prl-0-0.sprintlink.net                71 ms
18   144.223.63.86    sl-hawai5-1-0.sprintlink.net                 71 ms
19                    No response                        
20   72.234.50.113    udp038291uds.hawaiiantel.net                 93 ms

72.234.50.113USUNITED STATESHAWAIIHONOLULUHAWAIIAN TELCOM SERVICES COMPANY INC

Tech-Contact                  hostmaster@hawaiiantel.net

If you have records showing where the spam is coming from, you could send them to the abuse contact listed for the owner's of the IP address.  It looks like some sort of ISP, so they shold have an acceptable useage policy prohibiting spam.

Very Cool, so how was the ip address traced?

Whois for hawaiiantel.net

WhoIs Lookup performed by Karen's WhoIs
http://www.karenware.com/

Whois Server Version 1.3

Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net
for detailed information.

  Domain Name: HAWAIIANTEL.NET
  Registrar: GO DADDY SOFTWARE, INC.
  Whois Server: whois.godaddy.com
  Referral URL: http://registrar.godaddy.com
  Name Server: WPHUDNSDHCP.HAWAIIANTEL.NET
  Name Server: HNLLDNSDHCP.HAWAIIANTEL.NET
  Status: REGISTRAR-LOCK
  Updated Date: 08-dec-2005
  Creation Date: 23-may-2004
  Expiration Date: 23-may-2007


>>> Last update of whois database: Wed, 15 Mar 2006 03:01:19 EST <<<


Registrant:

  HAWAIIAN TELCOM
  1177 BISHOP ST STE HIA7
  HONOLULU, Hawaii 96813
  United States

  Registered through: GoDaddy.com
  Domain Name: HAWAIIANTEL.NET
     Created on: 23-May-04
     Expires on: 23-May-07
     Last Updated on: 30-Oct-05

  Administrative Contact:
     NAKAMOTO, CARL  dnsadmin@hawaiiantel.net
     HAWAIIAN TELCOM
     1177 BISHOP ST STE HIA6
     HONOLULU, Hawaii 96813
     United States
     8085463837      Fax --

  Technical Contact:
     NAKAMOTO, CARL  dnsadmin@hawaiiantel.net
     HAWAIIAN TELCOM
     1177 BISHOP ST STE HIA6
     HONOLULU, Hawaii 96813
     United States
     8085463837      Fax --

  Domain servers in listed order:
     HNLLDNSDHCP.HAWAIIANTEL.NET
     WPHUDNSDHCP.HAWAIIANTEL.NET

WallyT, you can also perform a trace route analysis by using the free service at Network Tools.

Did you ever get anywhere with this? My board suffered the exact same attack today. The spammer posted the same photo about 50 times. My board is based on YaBB, like this one, and this is most likely the link. JaPan Forum, as you guess from the name, is Japan-based and so we get our share of spam from China and Korea. But it was the first time for this kind of thing. (I came across this site while Googling the spammer's IP address).

The scary thing was that the spam messages "hijacked" existing thread subjects and created bogus mirror threads, so it was obviously automated. In theory, it could probably have posted hundreds, if not thousands of threads. That would have been a real pain to delete! I need to check if YaBB has a kind of "delete ALL messages by member XXX" mod...

Anyway, let me know if you got anywhere or if you have any leads to stop this weirdo.

the pest went away.

you can delete the user, ban his ip, or the ENTIRE ROOT of his ip.

best to have plenty of moderators who can delete posts before the pest gets carried away.

i forget exactly what i did to do the volume deletes. best to ask on the yabb forum.

yes, delete all posts by 'xyz' whould be ideal.

It appears like I started this topic with that strange statement but I didn't. It was a response to a request from someone else. Posts are missing in this topic.

Christer

This person is spamming YaBB forums across the Internet.  He's on an uncontrollable rampage.  I'd be interested to know exactly what PM's he sent you, as I'm investigating this person and pursuing a criminal investigation.

You can find out more at http://www.yabbforum.com/community/YaBB.pl?num=1141918796

You can PM me there.

Thanks!
B8caster

i don't have his pm, as it was deleted a while ago.

but i recall it was full of foul language.

if you catch him, you should cut his nuts off, so the maggot can't reproduce.