IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

120.28.64.85

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Philippines
Spider First Seen	approximately 2 years, 3 months, 1 week ago
Spider Last Seen	within 2 years, 2 months, 4 weeks
Spider Sightings	97 visit(s)
User-Agents	seen with 7 user-agent(s)

First Post On	approximately 2 years, 3 months, 1 week ago
Last Post On	within 2 years, 2 months, 4 weeks
Form Posts	40 web post submission(s) sent from this IP

IPs In The Neighborhood
120.28.64.0
120.28.64.1
120.28.64.46
120.28.64.54 \| S
120.28.64.69 \| C
120.28.64.70 \| C
120.28.64.71 \| C
120.28.64.72 \| C
120.28.64.73 \| C
120.28.64.74 \| C
120.28.64.75 \| C
120.28.64.76 \| C
120.28.64.77 \| HC
120.28.64.78 \| C
120.28.64.79
120.28.64.80
120.28.64.86 \| C
120.28.64.88
120.28.64.91
120.28.64.92
120.28.64.93 \| C
120.28.64.94 \| C
120.28.64.142
120.28.64.210
120.28.64.212 \| SD
120.28.64.213

Sample Spam URLs & Keywords Posted From 120.28.64.85

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/liver-enzymes-and-valtrex.aspx
Keywords: liver enzymes and valtrex

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/tricor-hoyer-lifts.aspx
Keywords: tricor hoyer lifts

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/printable-coupons-for-rogaine.aspx
Keywords: printable coupons for rogaine

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/is-naproxen-safe-to-take-daily-for-arthritis-pain.aspx
Keywords: is naproxen safe to take daily for arthritis pain

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/acid-reflux-omeprazole.aspx
Keywords: acid reflux omeprazole

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/generic-vicodin.aspx
Keywords: generic vicodin

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/basic-pharmacology-of-naltrexone.aspx
Keywords: basic pharmacology of naltrexone

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/motrin-lawsuit.aspx
Keywords: motrin lawsuit

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/valtrex-prices.aspx
Keywords: valtrex prices

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/cheap-xenical.aspx
Keywords: cheap xenical

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/hartford-oxycontin-lawyers.aspx
Keywords: hartford oxycontin lawyers

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/is-toprol-a-statin-drug.aspx
Keywords: is toprol a statin drug

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/low-dose-naltrexone.aspx
Keywords: low dose naltrexone

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/side-effects-of-nexium.aspx
Keywords: side effects of nexium

Domain: microsoftontheissues.com
URL: http://microsoftontheissues.com/cs/members/liver-enzymes-and-valtrex.aspx
Keywords: side effects of nexium

120.28.64.85's User Agent Strings

Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)

Mozilla/3.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible;)

Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; T312461)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MyIE2; Deepnet Explorer)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/5.0 (Windows; U; Windows NT 5.2; en; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9

3 comment(s) - Comment on this IP | Collapse All

I.Ellis commented...

Also acting as email harvester. Seen in log taking all links from homepage, focussed on store, asked for store directory (not a provided link), got a 403.

5 seconds later identical request from 93.62.4.207 with same UA. This was the day's only request from that IP. It is also listed as a spammer, so it probably indicates the two IPs are linked. Botnet?
January 09 2010 11:15 PM

A.E4 commented...

Spammed my e-card page:

miamtnlojqq
rpikfl@quaydj.com
120.28.64.85
January 06 2010 11:06 PM

H.User634 commented...

Spammer "Long Lasting Viagra"
December 03 2009 06:56 AM

Page generated on: February 12 2012 02:09:05 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

120.28.64.85 | C

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot