FLU / Kid Nickels / The Nebraskan Assassin / I am GLORIOUS

I'll let you decide Lance!
default_laugh.png


 
Just banned another FLU sock, @Super Destroyer.

He has like 1,000 email addresses, but it seems like he uses his last name in most of them. Is there some way we can search the database for emails with fluharty in them?

 
I ran the search, and actually, that's the only account with that string in it. When I search emails for just "flu" in it, I get several, but only six are his and one of those is the FLU account itself, I then ran it using "Harty", which is apparently his last name. Just the one hit. Next was Sean, his first name. Just one hit.

The fact he used his work email (looks like he works at an elementary school) may indicate that he has been booted off enough forums that he's running out of options with free accounts. Or else he's testing to see how closely we're monitoring.

Again, when I get a chance I'm going to look at all the IPs he's used and see if it's a narrow enough range that we can do some wildcard IP bans. Doubt it but worth a shot.

 
Okay, I've pulled all the IPs that he's used for the account FLU, The Nebraskan Assassin, and Super Destroyer. I'd like to include the IPs from any of his other accounts. Lance, or anyone, really, can you post the usernames for any of his other accounts here? Thanks.

 
Ah, right. I'll add his as well.

In case anyone is wondering, here are the IPs from the three accounts I listed. The first list is by username - the first 30 or so are FLUs, the others are, in descending order, The Nebraskan Assassin and then Super Destroyer. The second list are those same IPs, but grouped. If anyone wants to run them through an IP resolver and determine whether they all originate from a particular carrier or carriers, or from just Louisiana, for example, that would help.

List 1

70.172.247.215
98.181.11.47
207.29.222.247
38.127.1.5
68.11.152.242
207.29.222.242
70.172.239.221
98.181.19.206
72.203.133.83
70.167.131.235
208.79.10.99
75.145.210.227
127.0.0.1
208.79.10.130
70.183.197.134
98.172.60.241
99.194.129.21
173.11.198.249
72.203.132.56
72.203.132.181
72.203.135.254
68.96.155.250
12.53.217.90
68.105.5.34
72.203.136.220
72.203.141.95
98.181.16.209
107.77.80.35
207.29.222.247
107.77.80.60
72.24.36.2
166.147.121.166
107.77.90.121
107.77.80.82
107.77.80.75
70.172.241.235
107.77.80.114
107.77.80.81
70.172.240.174
107.77.80.92
107.77.80.91
166.137.119.21


List 2

107.77.80.114
107.77.80.35
107.77.80.60
107.77.80.75
107.77.80.81
107.77.80.82
107.77.80.91
107.77.80.92
107.77.90.121
12.53.217.90
127.0.0.1
166.137.119.21
166.147.121.166
173.11.198.249
207.29.222.242
207.29.222.247
207.29.222.247
208.79.10.130
208.79.10.99
38.127.1.5
68.105.5.34
68.11.152.242
68.96.155.250
70.167.131.235
70.172.239.221
70.172.240.174
70.172.241.235
70.172.247.215
70.183.197.134
72.203.132.181
72.203.132.56
72.203.133.83
72.203.135.254
72.203.136.220
72.203.141.95
72.24.36.2
75.145.210.227
98.172.60.241
98.181.11.47
98.181.16.209
98.181.19.206
99.194.129.21

 
Last edited by a moderator:
107.77.80.114 - Austin, Dallas, Laredo or Atlanta

107.77.80.35 - Austin or Dallas

107.77.80.60 - Laredo, Atlanta or Austin

107.77.80.75 - ditto

I skipped down a few to the next group...

107.77.90.121 - Atlanta

12.53.217.90 - Fort Pierce, FLA or Houston, TX

127.0.0.1 - returned an error. Resolves as an IPv4 address.

166.137.119.21 - Orem, UT or McAllister, TX

166.147.121.166 - Atlanta

173.11.198.249 - Houston, TX or Missouri City, TX

Based on these, it appears pretty clear he's using an onion router.

I use one on occasion, and have it turned on now. If you look at the IP from my post as Carson in this thread, it resolves to my current setting of choice, Dallas. I can choose from 200 different IPs in the US or abroad, and that's what he's likely doing.

 
Last edited by a moderator:
Yeah, I had the faint hope that he was posting from three primary hosts - his home ISP, his work ISP and his mobile carrier ISP. If so, there was the slightest chance we could block a range of IPs specific to those three. But given all the locations, that's pretty much shot. Oh, well. Thanks!

 
New member Stagger Lee has requested a name change to Warchild. That won't be possible because I just banned the account.

He registered using the email address tristinlin@aol.com

Tristin Lin Fluharty is Sean Fluharty's daughter. She had a nice little poem about Louisiana published on some website when she was nine:

Louisiana

Louisiana

Where else can you go for original crawfish etoufee
boudin, crawfish jambalaya and gumbo with file
Fried alligator meat is an oh so special treat
and turtle soup that is a delicasy to eat

In the spring we plant okra and pick it in the fall
Satsumas are the best little orange citrus ball
Pecan pie or pralines are tempting to eat
And most of our foods are made a little sweet

The famous New Orleans is a major draw
known for the French Quarter and Mardi Gras
At that time we also have parades
But at your own risk, you'd better be brave

You can go tubing down rivers on a little round raft
Our winters are mild but we still have a draft
Katrina and Rita are things of the past
Come another hurricane we'll get out fast!


By Tristin Lin Fluharty, age 9.
2008
Click to expand...



Cute poem. Cute kid. Weird dad.









Stagger Lee's IP resolves to Laredo and Atlanta, BTW. So that's going to probably be a "tell" from now on. Any of those town ranges identified in post #39 is going to be him, most likely.
 
Last edited by a moderator:
Jesus, Lance - are you a serial killer/stalker in your down time?
default_laugh.png


I'm going to have to pin that list for easy reference. Call it the FLU IP List or something...

Thanks!

 
Back
Top