IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

66.90.104.20

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester and rule breaker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location United States (Chicago, Illinois)

Harvester First Seen approximately 5 years, 6 months, 3 weeks ago
Harvester Last Seen within 4 years, 4 months, 5 weeks
Harvester Sightings 3,548 visit(s)
Harvester Results 381.259 messages per visit
1,352,708 message(s) resulting from harvests
- First: approximately 5 years, 5 months, 2 weeks ago
- Last: approximately 1 week ago
271 email address(es) harvested
- First: approximately 5 years, 5 months, 5 weeks ago
- Last: Tue, 27 Oct 2009 17:21:12 -0700

First Rule-Break On approximately 4 years, 8 months, 4 weeks ago
Last Rule-Break On within 4 years, 7 months, 2 weeks
Rule Breaks 12 web page navigation rule(s) broken by this IP

Associated Mail Servers
1.9.2.98 | SD
1.9.5.66 | SD
1.9.5.226 | SD
1.9.8.226 | SD
1.9.150.97 | SD
1.9.188.228 | SD
1.11.52.27 | SD
1.11.55.166 | SD
1.11.55.181 | SD
1.11.55.184 | SD
1.11.55.194 | SD
1.11.55.203 | SD
1.11.55.222 | SD
1.11.87.22 | SD
1.11.101.169 | SD
1.11.128.23 | SD
1.11.128.159 | SD
1.11.128.184 | SD
1.11.145.216 | SD
1.11.153.77 | SD
1.11.153.172 | SD
1.11.224.137 | SD
1.20.0.149 | SD
1.20.0.190 | SD
1.20.1.146 | S
1.20.1.159 | SD
1.20.1.170 | SD
1.20.134.11 | SD
1.20.147.236 | SD
1.20.166.115 | SD
1.20.215.124 | SD
1.20.238.146 | SD
1.20.238.241 | SD
1.20.246.38 | SD
1.22.127.185 | SD
1.22.139.57 | SD
1.22.154.58 | SD
1.22.163.93 | SD
1.22.163.117 | SD
1.22.163.245 | SD
1.22.172.46 | SD
1.22.178.150 | SD
1.22.230.186 | SD
1.22.231.237 | SD
1.22.236.178 | SD
1.22.237.28 | SD
1.22.237.112 | SD
1.22.237.230 | SD
1.22.238.11 | SD
1.22.238.92 | SD
1.22.246.207 | SD
1.23.48.192 | SD
1.23.49.35 | SD
1.23.49.92 | S
1.23.49.96 | SD
1.23.53.164 | SD
1.23.80.86 | SD
1.23.81.162 | SD
1.23.86.47 | SD
1.23.87.186 | SD
1.23.90.190 | S
1.23.92.35 | SD
1.23.164.38 | SD
1.23.165.158 | SD
1.23.171.82 | SD
1.23.171.214 | SD
1.23.211.187 | SD
1.23.214.59 | SD
1.25.2.158 | SD
1.25.4.77 | SD
1.25.19.90 | SD
1.25.24.232 | SD
1.25.29.243 | SD
1.25.31.254 | SD
1.26.163.202 | SD
IPs In The Neighborhood
66.90.103.57 | S
66.90.103.58 | D
66.90.103.64
66.90.103.65
66.90.103.66
66.90.103.69
66.90.103.79
66.90.103.81 | W
66.90.103.82
66.90.103.83 | C
66.90.103.84
66.90.103.85
66.90.103.89
66.90.103.94
66.90.103.95
66.90.103.99 | S
66.90.103.106 | S
66.90.103.107 | S
66.90.103.109
66.90.103.110
66.90.103.111
66.90.103.113
66.90.103.114
66.90.103.116
66.90.103.117 | W
66.90.103.122
66.90.103.125
66.90.103.130
66.90.103.134
66.90.103.137 | S
66.90.103.138
66.90.103.142
66.90.103.143 | C
66.90.103.151
66.90.103.152 | C
66.90.103.156 | H
66.90.103.157
66.90.103.159
66.90.103.160
66.90.103.165
66.90.103.170
66.90.103.171
66.90.103.177 | S
66.90.103.178
66.90.103.188 | C
66.90.103.190
66.90.103.191 | S
66.90.103.203
66.90.103.210
66.90.103.217
66.90.103.221
66.90.103.228 | S
66.90.103.237 | S
66.90.103.241
66.90.103.242
66.90.103.243
66.90.103.244 | C
66.90.103.254
66.90.104.3
66.90.104.6 | H
66.90.104.7
66.90.104.9
66.90.104.18 | W
66.90.104.22
66.90.104.24 | C
66.90.104.25
66.90.104.28 | S
66.90.104.29
66.90.104.30 | D
66.90.104.32
66.90.104.33
66.90.104.34
66.90.104.35
66.90.104.37
66.90.104.38
66.90.104.39 | S
66.90.104.41
66.90.104.49
66.90.104.53
66.90.104.54
66.90.104.56
66.90.104.57
66.90.104.58
66.90.104.60
66.90.104.63
66.90.104.66
66.90.104.67
66.90.104.69
66.90.104.70
66.90.104.72
66.90.104.74
66.90.104.75
66.90.104.76 | S
66.90.104.77
66.90.104.82
66.90.104.84
66.90.104.89
66.90.104.91 | SD
66.90.104.92 | S
66.90.104.94
66.90.104.95
66.90.104.99
66.90.104.102
66.90.104.103
66.90.104.105 | S
66.90.104.107 | C
66.90.104.114
66.90.104.118
66.90.104.122
66.90.104.127
66.90.104.128
66.90.104.129
66.90.104.131
66.90.104.135 | W
66.90.104.141
66.90.104.142
66.90.104.149
66.90.104.153 | S
66.90.104.154
66.90.104.156
66.90.104.157
66.90.104.159 | C
66.90.104.164
66.90.104.165
66.90.104.166
66.90.104.167
66.90.104.171 | S
66.90.104.177
66.90.104.178
66.90.104.180
66.90.104.183 | C
66.90.104.187 | D
66.90.104.189 | S
66.90.104.199
66.90.104.200 | W
66.90.104.207
66.90.104.211
66.90.104.213 | S
66.90.104.217
66.90.104.224 | C
66.90.104.228 | S
66.90.104.230 | W
66.90.104.232
66.90.104.243
66.90.104.20's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
WebAlta Crawler/1.3.23 (http://www.webalta.net/ru/about_webmaster.html) (Windows; U; Windows NT 5.1; ru-RU)
WebAlta Crawler/1.3.23 (http://www.webalta.net/ru/about_webmaster.html) (Windows; U; Windows NT 5.1; ru-RU),gzip(gfe),gzip(gfe)
H.User1165 commented...
This ip 66.90.104.20 went fishing for the following
but did not find them as I have them in other folders:
/index.php
/faq.php
/ucp.php?mode=register
/ucp.php?mode=login
/viewforum.php?f=5
/memberlist.php?mode=viewprofile&u=2
/viewforum.php?f=4
/memberlist.php?g=5&mode=group
/memberlist.php?g=4&mode=group
/memberlist.php?mode=viewprofile&u=54
/memberlist.php?mode=leaders
/ucp.php?mode=delete_cookies
December 14 2009 04:42 PM

H.Neukomm commented...
grep "66.90.104.20" access_log | wc -l
showed

352 page requests witin some 4 minutes !

all requests done between PHT (GMT+8) 18:36:33 - 18:40:53

after that time I ended the visit with iptables on all my servers

mostly forum
many other URL mostly WRONG URL - like filename but on / instead of correct subfolders
December 11 2009 03:04 AM

S.Shah commented...
Abuses robots.txt and nofollow directives repeatedly.
November 24 2009 01:03 AM

A.E4 commented...
Visited my honeypot this month and got caught in it.
September 13 2009 05:43 PM

J.Brisebois commented...
Calling numerous odd URLs which triggered several 404 errors:
/rss.php
/archive.php?cat=sitenews
/permalink.php?PostID=4
/permalink.php?PostID=3
/permalink.php?PostID=2
/video/NvVzl9Vl2nY/Making%20Friends%20With%20Your%20Sewing%20Machine%20%20The%20No%20Fear%20Guide%20to%20Changing%20Your%20Thread.php
/sewing/
/handmade/
/craft/
/fun/
/easy/
September 08 2009 01:01 PM

R.Grider commented...
Caught itself in a honeypot.
September 03 2009 05:53 AM

A.E4 commented...
Visited my forums and discovered it could be related to an email harvester that my honeypot caught last month. Upon research it seems that this IP is bad and then I come here and this verifies what I have found.

(66.90.104.20, WebAlta Crawler/1.3.23 (http://www.webalta.net/ru/about_webmaster.html) (Windows; U; Windows NT 5.1; ru-RU))

Came on my site on Friday August 14th 2009 at 07:07:16 AM Eastern Time.
August 15 2009 03:37 AM

Page generated on: April 18 2014 11:57:57 AM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–14, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email