The first one has an input from Theymos, so maybe he could shed light. There's not really any way to verify MB actually holds any of that... They could be donations, assuming he's even 1FRAUD - which wouldn't make sense to connect with the donation address. So many mysteries!
1Kf1nT7jQnFC7N3tSdgg5qKGTV4MucfpBg is John's forum treasury address. Which of the inputs is linked to the suspicious address in question? I can tell you the source of most of them.