IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

94.102.60.45

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Netherlands
Spider First Seen approximately 3 years, 4 months, 2 weeks ago
Spider Last Seen within 3 years, 2 months, 2 weeks
Spider Sightings 180,812 visit(s)
User-Agents seen with 1 user-agent(s)

First Post On approximately 3 years, 4 months, 2 weeks ago
Last Post On within 3 years, 2 months, 2 weeks
Form Posts 179,884 web post submission(s) sent from this IP

IPs In The Neighborhood
94.102.59.130 | C
94.102.59.131 | C
94.102.59.132 | C
94.102.59.133 | W
94.102.59.140 | W
94.102.59.158
94.102.59.221 | C
94.102.59.236
94.102.60.1
94.102.60.2
94.102.60.3
94.102.60.4
94.102.60.5
94.102.60.6
94.102.60.7
94.102.60.8
94.102.60.11
94.102.60.15 | C
94.102.60.16 | SC
94.102.60.17 | C
94.102.60.18 | C
94.102.60.19 | C
94.102.60.23 | C
94.102.60.27 | C
94.102.60.28
94.102.60.29
94.102.60.31 | C
94.102.60.32
94.102.60.35 | C
94.102.60.39 | C
94.102.60.43 | C
94.102.60.44 | C
94.102.60.49 | C
94.102.60.50
94.102.60.64
94.102.60.68 | C
94.102.60.70 | C
94.102.60.71
94.102.60.74 | C
94.102.60.77 | C
94.102.60.78
94.102.60.81 | C
94.102.60.85 | C
94.102.60.87
94.102.60.90 | C
94.102.60.91
94.102.60.92 | C
94.102.60.93
94.102.60.94
94.102.60.95 | C
94.102.60.96 | C
94.102.60.97
94.102.60.98 | C
94.102.60.99
94.102.60.100
94.102.60.101
94.102.60.102
94.102.60.103
94.102.60.104
94.102.60.105
94.102.60.111
94.102.60.115 | C
94.102.60.116
94.102.60.123 | C
94.102.60.125
94.102.60.127 | C
94.102.60.128
94.102.60.131 | C
94.102.60.135 | C
94.102.60.139 | C
94.102.60.142
94.102.60.146 | C
94.102.60.150
94.102.60.151 | C
94.102.60.152 | C
94.102.60.153 | C
94.102.60.154 | C
94.102.60.156
94.102.60.157
94.102.60.158 | C
94.102.60.161 | S
94.102.60.162 | C
94.102.60.164 | S
94.102.60.165 | C
94.102.60.166 | C
94.102.60.168
94.102.60.169
94.102.60.170 | C
94.102.60.174 | C
94.102.60.178 | SC
94.102.60.179 | S
94.102.60.182 | SDC
94.102.60.183 | C
94.102.60.187 | S
94.102.60.191 | S
94.102.60.192 | S
94.102.60.194
94.102.60.196 | S
94.102.60.197 | S
94.102.60.198
94.102.60.199
94.102.60.200 | S
94.102.60.201 | S
94.102.60.204
94.102.60.219
94.102.60.220
94.102.60.224
94.102.60.235 | SD
94.102.60.238 | S
94.102.60.243
Sample Spam URLs & Keywords Posted From 94.102.60.45
Domain: pspsqk.lp01.net
URL: http://pspsqk.lp01.net/free_hardcore_slut_pics.html
Keywords: free hardcore slut pics
Domain: dejw6w2gh1la.seitenclique.net
URL: http://dejw6w2gh1la.seitenclique.net/colorado-exotic-male-entertainment.html
Keywords: colorado exotic male entertainment
Domain: mccae72.hostaim.com
URL: http://mccae72.hostaim.com/tits-mmf.html
Keywords: tits mmf
Domain: duy3u.hostaim.com
URL: http://duy3u.hostaim.com/passion_play_lyrics.html
Keywords: passion play lyrics
Domain: n7jt675xxf.hostevo.com
URL: http://n7jt675xxf.hostevo.com/bigger_facial.html
Keywords: bigger facial
Domain: kazorian24.hostaim.com
URL: http://kazorian24.hostaim.com/st-johns-passion-bach.html
Keywords: st johns passion bach
Domain: en.netlog.com
URL: http://en.netlog.com/uwldblsymry74/blog/blogid=2523766
Keywords: russian girls clothing
Domain: www.geocities.com
URL: http://www.geocities.com/fritzdecker72/schwinn-straight.html
Keywords: schwinn straight
Domain: www.geocities.com
URL: http://www.geocities.com/alonzocarrillo23/fujiko-interracial.html
Keywords: fujiko interracial
Domain: kaithby41.k2free.com
URL: http://kaithby41.k2free.com/kayla-kleevage-interracial.html
Keywords: kayla kleevage interracial
Domain: steingesser14.101freehost.com
URL: http://steingesser14.101freehost.com/the-principles-of-lust.html
Keywords: the principles of lust
Domain: x9hof4ccc40p.hu.tl
URL: http://x9hof4ccc40p.hu.tl/step_by_step_cartoon_drawings.html
Keywords: step by step cartoon drawings
Domain: www.geocities.com
URL: http://www.geocities.com/hkhrsyeepcx/gay-orgasm-sound.html
Keywords: gay orgasm sound
Domain: u5wxwr.seitenclique.net
URL: http://u5wxwr.seitenclique.net/lesbian-mature-naked.html
Keywords: lesbian mature naked
Domain: boaggio63.cedhost.com
URL: http://boaggio63.cedhost.com/grannie-with-young-girl-movie-galleries.html
Keywords: grannie with young girl movie galleries
94.102.60.45's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
D.Ross5 commented...
Been bugging us since at least 2008-11-02.

Cruised through 23 pages of one of our websites in about 15 seconds, e.g.:

94.102.60.45 - - [23/Nov/2008:11:23:49 -0600] - "GET / HTTP/1.1" 200 22191 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" "-"

Also posting garbage on a form on a "Contact Us" type form.

As far as spidering, he is not currently going lower than one level. For example, he goes to every link on our home page, but does not proceed to links on those target pages.

I have not seen any activity for this IP in our firewall logs, so he's not doing portscans.
November 24 2008 06:48 AM

B.Robinson2 commented...
This IP is constantly spamming our web forms:
Submitted at: 2008-11-23 23:25:05
Submitter IP: 94.102.60.45
Submitter provider: Unknown
Submitter browser: MS Internet Explorer 6.0 Submitter operating system: Windows XP
Name: rgaosslyyg
Email: vvyaql@podlvd.com
Message: Dj0GMm oiljwnvyvnrd, [url=http://debfdtxjeyuy.com/]debfdtxjeyuy[/url], [link=http://dphequgykbiv.com/]dphequgykbiv[/link], http://ekxmxfddfmyz.com/
How did you find us?: none
November 23 2008 02:18 PM

I.Ellis commented...
Came in at home page, loaded links from the home page, found the store and then concentrated on it. Two seconds after finding the stoe link, it tried a POST, then tried the store link again, then tried to get the index or directory that the store was in. That got it a 403. Then it seemed to lose interest. A few minutes later I saw and banned its activity.
October 04 2008 12:50 AM

P.Vezina commented...
This robot has been caught trying to fill a hidden field inside a form.
October 02 2008 02:33 PM

Page generated on: February 09 2012 06:09:11 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email