IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

194.165.42.89

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | OpenRBL | Spamcop | SenderBase | Google Groups | Google

Geographic Location Switzerland
Spider First Seen approximately 1 year, 1 month, 1 week ago
Spider Last Seen within 11 months, 2 weeks
Spider Sightings 263 visit(s)
User-Agents seen with 30 user-agent(s)

First Post On approximately 1 year, 1 week ago
Last Post On within 11 months, 2 weeks
Form Posts 37 web post submission(s) sent from this IP

IPs In The Neighborhood
194.165.41.144
194.165.41.165
194.165.41.229 | S
194.165.42.0
194.165.42.1
194.165.42.2
194.165.42.5 | C
194.165.42.7
194.165.42.9 | C
194.165.42.15 | C
194.165.42.18
194.165.42.19 | C
194.165.42.21 | C
194.165.42.23 | C
194.165.42.27 | C
194.165.42.29 | C
194.165.42.31 | C
194.165.42.33
194.165.42.35 | C
194.165.42.37 | C
194.165.42.39 | C
194.165.42.41
194.165.42.43
194.165.42.45 | C
194.165.42.47 | C
194.165.42.49 | C
194.165.42.51 | C
194.165.42.53 | C
194.165.42.54
194.165.42.55 | C
194.165.42.56 | C
194.165.42.59 | C
194.165.42.61 | C
194.165.42.63 | C
194.165.42.65 | C
194.165.42.67 | C
194.165.42.69 | C
194.165.42.71 | C
194.165.42.73 | C
194.165.42.75 | C
194.165.42.77 | C
194.165.42.79 | C
194.165.42.81 | C
194.165.42.83 | C
194.165.42.85 | C
194.165.42.87 | C
194.165.42.91 | C
194.165.42.93 | C
194.165.42.95 | C
194.165.42.101
194.165.42.103 | C
194.165.42.105 | C
194.165.42.107 | C
194.165.42.109 | C
194.165.42.111 | C
194.165.42.113 | C
194.165.42.119 | C
194.165.42.121 | C
194.165.42.123 | C
194.165.42.125 | C
194.165.42.127 | C
194.165.42.129 | C
194.165.42.135 | C
194.165.42.137 | C
194.165.42.139 | C
194.165.42.141 | C
194.165.42.143 | C
194.165.42.149 | C
194.165.42.151 | C
194.165.42.152
194.165.42.153 | C
194.165.42.154
194.165.42.155 | C
194.165.42.157 | C
Sample Spam URLs & Keywords Posted From 194.165.42.89
Domain: blog.meta.ua
URL: http://blog.meta.ua/redirect.php?url=promo.justdomain.net/?n=pamelor
Keywords: pamelor cheapest
Domain: infostore.org
URL: http://infostore.org/user/kimiol
Keywords: best price for vermox
Domain: infostore.org
URL: http://infostore.org/user/anjimini
Keywords: online cheap brahmi
Domain: www.liveinternet.ru
URL: http://www.liveinternet.ru/click?promo.justdomain.net/?n=cleocin
Keywords: sale cleocin
Domain: infostore.org
URL: http://infostore.org/user/anulikoj
Keywords: buy generic prandin
Domain: infostore.org
URL: http://infostore.org/user/surrin
Keywords: trental purchase
Domain: blog.meta.ua
URL: http://blog.meta.ua/redirect.php?url=promo.justdomain.net/?n=entocor
Keywords: purchase entocort
Domain: blog.meta.ua
URL: http://blog.meta.ua/redirect.php?url=promo.justdomain.net/?n=entocor
Keywords: entocort order
Domain: forum.mofuse.com
URL: http://forum.mofuse.com/member.php?u=48&tab=aboutme&simple=
Keywords: levitra sales
Domain: infostore.org
URL: http://infostore.org/user/alemin
Keywords: feldene sales
Domain: infostore.org
URL: http://infostore.org/user/surrinu
Keywords: feldene sales
Domain: blog.meta.ua
URL: http://blog.meta.ua/redirect.php?url=promo.justdomain.net/?n=entocort
Keywords: feldene sales
Domain: forum.mofuse.com
URL: http://forum.mofuse.com/member.php?u=48&tab=aboutme&simple=1
Keywords: feldene sales
Domain: infostore.org
URL: http://infostore.org/user/milmi
Keywords: best price for cefadroxil
Domain: yandex.ru
URL: http://yandex.ru/redir?url=promo.justdomain.net/?n=amoxi
Keywords: sale amoxil
194.165.42.89's User Agent Strings
Mozilla/0.6 Beta (Windows)
Mozilla/0.91 Beta (Windows)
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)
Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)
Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)
Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; MSIECrawler)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 2000) Opera 6.0 [en]
Mozilla/4.0 (compatible; MSIE 5.0; Windows 3.1)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95; BCD2000)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; T312461)
Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]
Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)
Mozilla/4.0 (compatible; MSIE 6.0; Windows ME) Opera 7.11 [en]
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
I.Ellis commented...
One of countless different IPs coming for months taking the same pattern of three files (including guestbook and poll). Every day different IP, sometimes several. Botnet?

Same behaviour also seen from these nearby IPs in the past:

deny from 194.165.42.137
deny from 194.165.42.151

These are part of range 194.165.42.0 - 194.165.42.255 which whois says belongs to Saudi Arabia Nashirnet Ipv4 Network
December 05 2008 11:21 AM

Page generated on: November 22 2009 01:45:19 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Contact Us

Copyright © 2004–09, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email