IP Address Inspector

188.92.75.82

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Unknown
Spider First Seen approximately 2 years, 2 months, 5 weeks ago
Spider Last Seen within 1 week
Spider Sightings 13,280 visit(s)
User-Agents seen with 1 user-agent(s)

First Post On approximately 2 years, 2 months, 5 weeks ago
Last Post On within 1 week
Form Posts 6,665 web post submission(s) sent from this IP

IPs In The Neighborhood
188.92.74.138
188.92.74.139
188.92.74.142
188.92.74.172 | C
188.92.74.174
188.92.74.193
188.92.74.212
188.92.74.214
188.92.75.1
188.92.75.11
188.92.75.14
188.92.75.21 | C
188.92.75.23 | C
188.92.75.27 | C
188.92.75.28 | C
188.92.75.29
188.92.75.30
188.92.75.31
188.92.75.32
188.92.75.33
188.92.75.34
188.92.75.36 | C
188.92.75.39 | C
188.92.75.40
188.92.75.41 | C
188.92.75.42 | C
188.92.75.43 | C
188.92.75.44
188.92.75.91 | C
188.92.75.102 | C
188.92.75.103 | C
188.92.75.105 | C
188.92.75.106
188.92.75.107 | C
188.92.75.108 | C
188.92.75.109 | C
188.92.75.110 | C
188.92.75.111
188.92.75.112 | C
188.92.75.115 | C
188.92.75.116
188.92.75.121 | C
188.92.75.124 | C
188.92.75.127 | C
188.92.75.130 | C
188.92.75.143 | C
188.92.75.148 | C
188.92.75.149
188.92.75.174 | C
188.92.75.200 | C
188.92.75.221
188.92.75.229 | C
188.92.75.244 | C
188.92.75.252 | C
188.92.76.1
188.92.76.7
188.92.76.12
188.92.76.35
188.92.76.45 | C
Sample Spam URLs & Keywords Posted From 188.92.75.82
Domain: skiing.berkeley.edu
URL: http://skiing.berkeley.edu/~isaa/index.php?option=com_content&view=article&id=14&Itemid=1
Domain: www.fashioncollege.edu
URL: http://www.fashioncollege.edu/
Domain: cwi.cdm.depaul.edu
URL: http://cwi.cdm.depaul.edu/joomla/
Domain: skiing.berkeley.edu
URL: http://skiing.berkeley.edu/~isaa/index.php?option=com_content&view=article&id=14&Itemid=1
Keywords: viagra online
Domain: www.fashioncollege.edu
URL: http://www.fashioncollege.edu/
Keywords: generic levitra
Domain: cwi.cdm.depaul.edu
URL: http://cwi.cdm.depaul.edu/joomla/
Keywords: cialis
Domain: skiing.berkeley.edu
URL: http://skiing.berkeley.edu/~isaa/index.php?option=com_content&view=article&id=14&Itemid=1
Domain: www.fashioncollege.edu
URL: http://www.fashioncollege.edu/
Domain: cwi.cdm.depaul.edu
URL: http://cwi.cdm.depaul.edu/joomla/
Domain: skiing.berkeley.edu
URL: http://skiing.berkeley.edu/~isaa/index.php?option=com_content&view=article&id=14&Itemid=1
Domain: www.fashioncollege.edu
URL: http://www.fashioncollege.edu/
Domain: cwi.cdm.depaul.edu
URL: http://cwi.cdm.depaul.edu/joomla/
Domain: skiing.berkeley.edu
URL: http://skiing.berkeley.edu/~isaa/index.php?option=com_content&view=article&id=14&Itemid=1
Keywords: viagra online
Domain: www.fashioncollege.edu
URL: http://www.fashioncollege.edu/
Keywords: cheap generic levitra
Domain: cwi.cdm.depaul.edu
URL: http://cwi.cdm.depaul.edu/joomla/
Keywords: buy cheap cialis
188.92.75.82's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
J.Darlington commented...
Wiki spammer. Listed at StopForumSpam.com, BotScout.com, SpamCannibal.org ("compromised host attempting to join listserv with bogus credentials").
November 07 2011 06:03 AM

B.Garden Cente commented...
Bot spammer attempting to leave message on contact page.
October 12 2011 08:18 AM

K.Penton commented...
Gibberish on contact form:
Disallowed message from IP 188.92.75.82 at 06:38:43 on 12 Oct 2011
name: mqplgs
phone: 60389035391
email: iqteeo@xxgocp.com
subject:
message: y8QGX5 fjmldchdextk, [url=http://ddbtknixlaef.com/]ddbtknixlaef[/url], [link=http://dbnsipsfkjqr.com/]dbnsipsfkjqr[/link], http://kmuypqnlxkah.com/
October 12 2011 01:59 AM

L.Klaber commented...
Just had a visit from the bot on one of my sites. Telling piece of information: it gets its links from Baidu. I know this because one of the links it attempted to crawl is a recursive link that BaiduSpider kept crawling repeatedly (in spite of being banned from the page in robots.txt) until I banned Baidu from my sites altogether. This was the log:

188.92.75.82 - - [18/Aug/2011:03:56:23 -0700] "GET /images/login.php?referer=displayimage.php%3Falbum%3D12%26pos%3D5 HTTP/1.1" 200 8063 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)"

I had banned bots crawling login.php pages, but Baiduspider did so repeatedly. So that's the database the bot has to be pulling information about site links from -- in every case it had a blank referrer so it was pulling up a bookmark. Baidu is where it got them.
August 19 2011 01:17 PM

M.Fischer7 commented...
Comment Spammer who went through Antispam by Math Plugin. Left this comment: EC39KC xhgbhnnhgfrd, [url=http://evmrqqcmmtwr.com/]evmrqqcmmtwr[/url], [link=http://mkjvjcbrxmra.com/]mkjvjcbrxmra[/link], http://tnskbmuphmva.com/
July 30 2011 03:04 AM

C.Iverson2 commented...
Rec'd email from this IP as if sent through my own ZenCart store. Don't think it got through my customer email database.

Email text reads:

From: srmibd@hxnnry.com
Email: srmibd@hxnnry.com

------------------------------------------------------

Fx5gjZ cqevhosxrrhc, [url=http://szloyetptcwp.com/]szloyetptcwp[/url],
[link=http://xhwucyaecrup.com/]xhwucyaecrup[/link], http://ufoprzshksjl.com/

------------------------------------------------------

Office Use Only:
From: srmibd@hxnnry.com
Email: srmibd@hxnnry.com
Login Name: Not logged in
Login Email: Not logged in
IP Address: 188.92.75.82 - 188.92.75.82
Host Address: 188.92.75.82
Date and Time: Tue Jul 19 2011 6:16:35 MDT
July 19 2011 11:18 AM

E.McGuire commented...
WordPress comment spam:
jymqlddxm
ehajip@qajuul.com
ricbydhhpvyx.com
IP: 188.92.75.82

Comment: 87j73G khhwqvbzicro [links to http://khhwqvbzicro.com/], [url=http://chsmwojpisza.com/]chsmwojpisza[/url], [link=http://qydbcdlzwtcg.com/]qydbcdlzwtcg[/link], http://qugfdxcthbzy.com/
July 18 2011 08:54 AM

R.Jensen2 commented...
Harvested a lot of fake mail addresses and posted spam/links to my honeypot, and got back 8kb header with junk. Then it was blacklisted for a month.

Hope it had fun :)
June 04 2011 04:26 PM

A.MacKillop2 commented...
Commnet Spammer:
mazswrm
vtcxfkrnlhix.com/
jnzrko@ezsual.com
188.92.75.82
Submitted on 2011/04/03 at 5:40 am

G7fh8p abhxsaxwdzty, [url=http://xjhhlufbkjri.com/]xjhhlufbkjri[/url], [link=http://tgccbxuthbyv.com/]tgccbxuthbyv[/link], http://sxmjovsoowly.com/
April 02 2011 05:19 PM

R.W11 commented...
Epic spammer.
March 09 2011 08:49 AM

A.MacKillop2 commented...
188.92.75.82
18 February 2011
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
views = 25
February 18 2011 04:42 AM

F.Clodomar commented...
This spammer has been identified as being : Latvia Riga Ad Technology Datacenter
February 10 2011 04:06 AM

B.Spade commented...
This IP address has attempted to post comment spam to my forum 22 times in the month of January, 2011
February 01 2011 11:46 PM

B.Shorney commented...
Comment spam
From: ozhxeiavptst.com/
stliaz@sopzgf.com
188.92.75.82

Comment: EHw5iC zmuzxtobosck, [url=http://axfzlzvubjgz.com/]axfzlzvubjgz[/url], [link=http://lsijbpemzgvb.com/]lsijbpemzgvb[/link], http://flbvuhtuodiv.com/

Posted: 2011/01/29 at 1:43 pm
February 01 2011 10:34 AM

A.MacKillop2 commented...
188.92.75.82
20 October 2010
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
views = 7

188.92.75.82
27 October 2010
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
views = 8
December 13 2010 01:23 AM

A.MacKillop2 commented...
2010/10/27 at 12:54 pm
wZvPM6 dvzyskzxdjgs, [url=http://byxmdmdueohc.com/]byxmdmdueohc[/url], [link=http://oqcgkywpqraa.com/]oqcgkywpqraa[/link], http://fptksfxulbgm.com/
bjuduc
lnzbnjzicokx.com/
adqlho@ksboid.com
188.92.75.82
October 27 2010 01:33 AM

L.S9 commented...
Spam and possible harvesting email
NetRange: 188.92.75.0 - 188.92.75.255
netname:ADTECHNOLOGY-LV-NET
descr:AD TECHNOLOGY DATACENTER
country:LV (Latvia)
address:AD TECHNOLOGY SIA
Lacplesa iela 15-23, Preilu rajons, Livanu novads LV-5316 Livani Latvia
phone:+371 6 7355677
fax-no:+371 6 7620991
e-mail: office@adtechnology.lv
person:Gundars Arbidans
address:Mehanizatoru iela 7, Preili, LV-5301
phone:+371 2 8399495
e-mail:ipadm@adtechnology.lv
October 06 2010 10:33 AM

G.Rosser commented...
this idiot went for at least 10 cycles through my wpoison trap picking up bogus urls & email addresses to clog its database. btw: domaintools says it's in latvia.
September 17 2010 10:04 AM

A.E4 commented...
Spam bot
June 01 2010 01:51 PM

B.Spade commented...
This IP address has attempted to post comment spam to my forum 25 times in the month of May, 2010
May 31 2010 01:27 AM

D.Massay commented...
This one hit up my server last night. The activity in my logs would suggest a harvesting bot, rather than a comment spammer.
May 25 2010 05:24 AM

J.Brisebois commented...
This is what happens when you scan and don't comply with robots.txt:

On 01/24/10 6:35:25 PM CST the IP 188.92.75.82 requested URI xxxxx-page.com/banme.php. They came from [ ] with user agent [Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ]. This activity resulted in an automatic and immediate ban via .htaccess.
January 25 2010 03:33 PM

H.User593 commented...
Content Spammer
January 18 2010 07:53 PM

H.User593 commented...
Content Spammer
January 17 2010 05:58 PM

H.User3009 commented...
comment spam from this IP on 16/Jan/2010:22:03:18 +0100 UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
January 16 2010 03:55 PM

P.Iddon commented...
Comment spam sent from this IP
January 05 2010 05:37 AM

F.Clodomar commented...
autoonlineloan.com email address for this comment spammer.
December 30 2009 11:39 PM

R.Dunkle commented...
slurping:
inetnum: 188.92.75.0 - 188.92.75.255
netname: ADTECHNOLOGY-LV-NET
descr: AD TECHNOLOGY DATACENTER
country: LV
December 03 2009 04:17 AM

C.Hill3 commented...
spammer
November 30 2009 10:10 AM

Page generated on: February 12 2012 05:56:51 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email