IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

66.90.104.20

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester and rule breaker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	United States (Chicago, Illinois)

Harvester First Seen	approximately 4 years, 7 months, 3 weeks ago
Harvester Last Seen	within 3 years, 5 months, 5 weeks
Harvester Sightings	3,548 visit(s)
Harvester Results	291.775 messages per visit 1,035,219 message(s) resulting from harvests - First: approximately 4 years, 6 months, 2 weeks ago - Last: approximately 1 week ago 271 email address(es) harvested - First: approximately 4 years, 6 months, 5 weeks ago - Last: Tue, 27 Oct 2009 17:21:12 -0700

First Rule-Break On	approximately 3 years, 9 months, 4 weeks ago
Last Rule-Break On	within 3 years, 8 months, 3 weeks
Rule Breaks	12 web page navigation rule(s) broken by this IP

Associated Mail Servers
1.9.2.98 \| SD
1.9.5.66 \| SD
1.9.5.226 \| SD
1.9.8.226 \| SD
1.11.55.166 \| SD
1.11.55.181 \| SD
1.11.55.184 \| SD
1.11.55.194 \| SD
1.11.55.203 \| SD
1.11.55.222 \| SD
1.11.87.22 \| SD
1.11.101.169 \| SD
1.11.128.23 \| SD
1.11.128.159 \| SD
1.11.128.184 \| SD
1.11.145.216 \| SD
1.11.153.77 \| SD
1.11.153.172 \| SD
1.11.224.137 \| SD
1.20.0.149 \| SD
1.20.0.190 \| SD
1.20.1.146 \| S
1.20.1.159 \| SD
1.20.1.170 \| SD
1.22.127.185 \| SD
1.22.139.57 \| SD
1.22.154.58 \| SD
1.22.163.93 \| SD
1.22.163.117 \| SD
1.22.178.150 \| SD
1.22.231.237 \| SD
1.22.236.178 \| SD
1.22.237.28 \| SD
1.22.237.112 \| SD
1.22.237.230 \| SD
1.22.238.11 \| SD
1.22.238.92 \| SD
1.22.246.207 \| SD
1.23.49.35 \| SD
1.23.49.92 \| S
1.23.49.96 \| SD
1.23.53.164 \| SD
1.23.90.190 \| S
1.23.171.82 \| SD
1.23.171.214 \| SD
1.25.2.158 \| SD
1.25.4.77 \| SD
1.25.19.90 \| SD
1.25.24.232 \| SD
1.25.29.243 \| SD
1.25.31.254 \| SD
1.26.163.202 \| SD
1.27.249.74 \| SD
1.28.160.216 \| SD
1.34.24.128 \| SD
1.34.50.237 \| SD
1.34.66.91 \| SD
1.34.71.173 \| SD
1.34.120.93 \| SD
1.34.120.106 \| SD
1.34.147.84 \| SD
1.34.156.167 \| SD
1.34.157.140 \| SD
1.34.171.217 \| SD
1.34.174.50
1.34.206.16 \| SD
1.34.210.203 \| SD
1.34.234.60 \| SD
1.38.16.7 \| S
1.38.16.48 \| SD
1.38.16.54 \| SD
1.38.16.61 \| SD
1.38.16.64 \| SD
1.38.16.65 \| SD
1.38.16.66 \| S

IPs In The Neighborhood
66.90.103.57 \| S
66.90.103.58 \| D
66.90.103.64
66.90.103.65
66.90.103.66
66.90.103.69
66.90.103.79
66.90.103.81 \| W
66.90.103.82
66.90.103.83 \| C
66.90.103.85
66.90.103.89
66.90.103.94
66.90.103.95
66.90.103.99 \| S
66.90.103.106 \| S
66.90.103.107 \| S
66.90.103.109
66.90.103.110
66.90.103.111
66.90.103.113
66.90.103.114
66.90.103.116
66.90.103.117 \| W
66.90.103.122
66.90.103.125
66.90.103.130
66.90.103.134
66.90.103.137 \| S
66.90.103.138
66.90.103.142
66.90.103.143 \| C
66.90.103.151
66.90.103.152 \| C
66.90.103.156 \| H
66.90.103.157
66.90.103.159
66.90.103.160
66.90.103.165
66.90.103.170
66.90.103.171
66.90.103.177 \| S
66.90.103.178
66.90.103.188 \| C
66.90.103.190
66.90.103.191 \| S
66.90.103.203
66.90.103.210
66.90.103.217
66.90.103.221
66.90.103.228 \| S
66.90.103.241
66.90.103.242
66.90.103.243
66.90.103.244 \| C
66.90.103.254
66.90.104.3
66.90.104.6 \| H
66.90.104.7
66.90.104.9
66.90.104.18 \| W
66.90.104.22
66.90.104.24 \| C
66.90.104.25
66.90.104.28 \| S
66.90.104.29
66.90.104.30 \| D
66.90.104.32
66.90.104.33
66.90.104.34
66.90.104.35
66.90.104.37
66.90.104.38
66.90.104.39 \| S
66.90.104.41
66.90.104.49
66.90.104.53
66.90.104.54
66.90.104.56
66.90.104.57
66.90.104.58
66.90.104.60
66.90.104.63
66.90.104.66
66.90.104.67
66.90.104.69
66.90.104.70
66.90.104.72
66.90.104.74
66.90.104.76 \| S
66.90.104.77
66.90.104.82
66.90.104.84
66.90.104.89
66.90.104.91 \| SD
66.90.104.94
66.90.104.95
66.90.104.99
66.90.104.102
66.90.104.103
66.90.104.105 \| S
66.90.104.107 \| C
66.90.104.114
66.90.104.118
66.90.104.122
66.90.104.127
66.90.104.128
66.90.104.129
66.90.104.131
66.90.104.135 \| W
66.90.104.141
66.90.104.142
66.90.104.149
66.90.104.153 \| S
66.90.104.154
66.90.104.156
66.90.104.157
66.90.104.159 \| C
66.90.104.164
66.90.104.165
66.90.104.166
66.90.104.167
66.90.104.171 \| S
66.90.104.177
66.90.104.178
66.90.104.180
66.90.104.183 \| C
66.90.104.189 \| S
66.90.104.199
66.90.104.200 \| W
66.90.104.207
66.90.104.211
66.90.104.213 \| S
66.90.104.217
66.90.104.224 \| C
66.90.104.228 \| S
66.90.104.230 \| W
66.90.104.232
66.90.104.243

66.90.104.20's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

WebAlta Crawler/1.3.23 (http://www.webalta.net/ru/about_webmaster.html) (Windows; U; Windows NT 5.1; ru-RU)

WebAlta Crawler/1.3.23 (http://www.webalta.net/ru/about_webmaster.html) (Windows; U; Windows NT 5.1; ru-RU),gzip(gfe),gzip(gfe)

7 comment(s) - Comment on this IP | Collapse All

H.User1165 commented...

This ip 66.90.104.20 went fishing for the following
but did not find them as I have them in other folders:
/index.php
/faq.php
/ucp.php?mode=register
/ucp.php?mode=login
/viewforum.php?f=5
/memberlist.php?mode=viewprofile&u=2
/viewforum.php?f=4
/memberlist.php?g=5&mode=group
/memberlist.php?g=4&mode=group
/memberlist.php?mode=viewprofile&u=54
/memberlist.php?mode=leaders
/ucp.php?mode=delete_cookies
December 14 2009 04:42 PM

H.Neukomm commented...

grep "66.90.104.20" access_log | wc -l
showed

352 page requests witin some 4 minutes !

all requests done between PHT (GMT+8) 18:36:33 - 18:40:53

after that time I ended the visit with iptables on all my servers

mostly forum
many other URL mostly WRONG URL - like filename but on / instead of correct subfolders
December 11 2009 03:04 AM

S.Shah commented...

Abuses robots.txt and nofollow directives repeatedly.
November 24 2009 01:03 AM

A.E4 commented...

Visited my honeypot this month and got caught in it.
September 13 2009 05:43 PM

J.Brisebois commented...

Calling numerous odd URLs which triggered several 404 errors:
/rss.php
/archive.php?cat=sitenews
/permalink.php?PostID=4
/permalink.php?PostID=3
/permalink.php?PostID=2
/video/NvVzl9Vl2nY/Making%20Friends%20With%20Your%20Sewing%20Machine%20%20The%20No%20Fear%20Guide%20to%20Changing%20Your%20Thread.php
/sewing/
/handmade/
/craft/
/fun/
/easy/
September 08 2009 01:01 PM

R.Grider commented...

Caught itself in a honeypot.
September 03 2009 05:53 AM

A.E4 commented...

Visited my forums and discovered it could be related to an email harvester that my honeypot caught last month. Upon research it seems that this IP is bad and then I come here and this verifies what I have found.

(66.90.104.20, WebAlta Crawler/1.3.23 (http://www.webalta.net/ru/about_webmaster.html) (Windows; U; Windows NT 5.1; ru-RU))

Came on my site on Friday August 14th 2009 at 07:07:16 AM Eastern Time.
August 15 2009 03:37 AM

Page generated on: May 20 2013 08:21:41 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this page from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot