IP Address Inspector
| ATTENTION |
|
194.8.75.163
The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.
Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google
| Geographic Location |
Switzerland
|
| Spider First Seen | approximately 3 years, 1 month, 4 weeks ago |
| Spider Last Seen | within 2 years, 2 months, 5 weeks |
| Spider Sightings | 50,780 visit(s) |
| User-Agents | seen with 30 user-agent(s) |
| First Post On | approximately 3 years, 1 month, 4 weeks ago |
| Last Post On | within 2 years, 2 months, 5 weeks |
| Form Posts | 22,877 web post submission(s) sent from this IP |
|
15 comment(s) - Comment on this IP | Collapse All
|
|
D.Poire commented...
The same range of IPs is attempting to hit my websites as well. One of the things that I've done is to change the 'action=process' verbiage on forms and anyone doing a GET with an 'action=process' is 'Forbidden'. That solution does not solve the problem of my bandwidth being consumed (337 bytes a pop), that is another story.
December 26 2009 09:00 AM |
|
W.Ni commented...
deny from 194.8.74-75.
Just add this to your .htaccess file it blocks the 194.8.74 and 75 range and all behind the point (74. and 75.0-255) This rule is enough to Block all from Dragonara November 05 2009 04:43 AM |
|
B.Sutherland commented...
Curious to see if there are any results with my contact with Dragonara. If there is nothing perhaps we can utilize some of the new anti-spam laws?
August 04 2009 10:19 AM |
|
H.Chestwig commented...
It's not a single server, it's using the entire netrange there.
You need to block 194.8.74.0/23 as that'll kill their netrange I just got hit repeatedly again. 194.8.75.92 194.8.74.11 194.8.75.94 194.8.75.145 194.8.74.157 194.8.74.47 194.8.75.92 194.8.75.94 (I saw 4 attempts from each address, then a pause, then a new attempt from a new address... I'd long ago DENIED that netrange, so all they saw were 403 errors.) April 24 2009 09:04 PM |
|
J.Brisebois commented...
I have my forums set so that a person has to verify their email in order to register PLUS I have recaptcha on the registration submit... but it managed to get past all this and spam my forums anyway. Here's associated IPs with the activity. I suggest banning via IP in .htaccess for 194.8.75.
194.8.75.245 194.8.75.94 194.8.75.92 194.8.75.151 194.8.75.109 194.8.75.245 Here's an example entry from one of my access logs: [23/Apr/2009:08:28:24 -0500] "GET / HTTP/1.0" 200 28397 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)" PeoplePal 6.2 appears to be a PeoplePC Tool Bar thing. http://home.peoplepc.com/peoplepal/faq.asp FunWebProducts is spyware. April 23 2009 04:12 PM |
|
C.Nistor commented...
Today, I had 576 hits from this IP.
April 16 2009 11:42 AM |
|
S.Ferrara commented...
It´s being scanning my site with more than 1000 pages a day and constantly trying to login or post to the forums :D
I recommend to you all to get a captcha, it works very fine for me. Try using images like this one, they are not so good in reading it :D http://www.imaccanici.org/images/immagini_forum/2009/4JKOGQ.jpg March 26 2009 10:21 AM |
|
H.Shidou commented...
hahaha I was lucky, he attempted to visit my site only 6 times :P
whole IP range 194.8.74.0/23 blocked now! STFU spammers!! February 18 2009 08:15 PM |
|
J.Honda commented...
Had over 300 attempts to register on my forum in one day, all successully blocked using a deny rule in htaccess
February 18 2009 12:34 AM |
|
M.Cahill commented...
I have over 100 posts so far from this IP address spamming my website and blog! blocked IP address now but very annoying!
February 11 2009 08:30 AM |
|
D.Geiger commented...
IP whois for 194.8.75.163
% This is the RIPE Whois query server #1. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/db/copyright.html % Note: This output has been filtered. % To receive output for a database update, use the "-B" flag. % Information related to '194.8.74.0 - 194.8.75.255' inetnum: 194.8.74.0 - 194.8.75.255 netname: DRAGONARA-NET descr: Dragonara Alliance Ltd country: GB org: ORG-DRAG1-RIPE admin-c: AGAV2-RIPE tech-c: AGAV2-RIPE status: ASSIGNED PI mnt-by: RIPE-NCC-HM-PI-MNT mnt-by: DRAGONARA-MNT mnt-lower: RIPE-NCC-HM-PI-MNT mnt-routes: DRAGONARA-MNT mnt-domains: DRAGONARA-MNT source: RIPE # Filtered organisation: ORG-DRAG1-RIPE org-name: Dragonara Alliance Ltd org-type: OTHER address: Geneva Place, Waterfront Drive, P. O. Box 3469, Road Town, Tortola, British Virgin Islands mnt-ref: DRAGONARA-MNT mnt-by: DRAGONARA-MNT source: RIPE # Filtered person: Andrey Gavrilog address: Geneva Place, Waterfront Drive, P. O. Box 3469, Road Town, Tortola, British Virgin Islands mnt-by: DRAGONARA-MNT abuse-mailbox: abuse@dragonara.net phone: +41 435.001.009 nic-hdl: AGAV2-RIPE source: RIPE # Filtered % Information related to '194.8.74.0/23AS44557' route: 194.8.74.0/23 descr: Dragonara Alliance origin: AS44557 mnt-by: DRAGONARA-MNT source: RIPE # Filtered February 10 2009 08:19 PM |
|
J.Brisebois commented...
In the past few days there have been over 100 member registrations to my forums and 2 spam posts from this IP range.
February 08 2009 11:39 AM |
|
A.Bob2 commented...
Received a number of spam posts in my "shout-box"
February 01 2009 12:07 PM |
|
M.Whitfield2 commented...
I have banned over 200 new accounts from this ip as of yesterday and today. Something needs done on a internation front to stop this person
December 24 2008 04:29 PM |
|
T.Hall4 commented...
194.8.75.163
This bastard joined my site www.dev32.net over 90 times and made over 400 forum spam posts. December 21 2008 02:56 AM |
Page generated on: February 10 2012 12:09:06 AM
Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.
Want to keep this IP address off your website? Start taking advantage of http:BL.
If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.
Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us
Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.
Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot