[Skip navigation]

Message Board

Bugs & Development

[ Older Posts ] [ Newer Posts ]

IP address inspector displaying blank info page

Author: M.Nordhoff (15 Aug 06 11:19pm)

If I search for 86.52.57.254 in the IP address inspector thingamabob, it goes to the info page and doesn't give me the error saying the IP isn't in the database, but it says "The Project Honey Pot system has detected behavior from the IP address consistent with that of a ." and doesn't include anything except for the location.

(Just to say, I'm not saying it's an evil bot or something or that it isn't. I'm actually not sure either way. I'd rather not go posting an IP address unless I'm sure it's a bot, but it doesn't happen with any other IPs I've tried.)

Re: IP address inspector displaying blank info page

Author: M.Prince (17 Aug 06 3:38pm)

That is weird! Thanks for point it out. We'll look into it and post back here with whatever we find. Must be super-stealthy if it's avoiding our radar screen.

Matthew.

Re: IP address inspector displaying blank info page

Author: M.Nordhoff (20 Aug 06 12:18am)

It also happens with 209.133.64.221 and 211.100.25.198.

I'm just getting all the weird bots, aren't I? :D

Re: IP address inspector displaying blank info page

Author: L.Holloway (21 Aug 06 3:11pm)

Nope! Check again. Not weird bots. Just not harvesters. Probably webspiders of some sort. Or possible harvesters that have not been identified yet (no bad email generated yet).

Re: IP address inspector displaying blank info page

Author: M.Prince (22 Aug 06 3:25am)

We track anyone who accesses a honey pot. Our goal, eventually, is to make some predictions on whether something is going to turn into a hostile robot even before we receive a message at a spam-trap address we gave to them. As L.Holloway (one of our engineers) explained, the IPs you found have accessed at least one honey pot. That DOES NOT mean they are harvesters. It also DOES NOT mean they are malicious. But they are now a suspect. If they hit a bunch of different honey pots then we'll grow more suspicious. If we start receiving messages at email addresses they were given then we'll label them harvesters. But, for now, they're just "suspects." Make sense?

We didn't have this problem in the past because we didn't allow people to lookup IP addresses through our site. Now that we do, you may find some other "unclassified" IPs. Over time we will try and do more to classify them. One idea which we're batting about is allowing people to "blog" about each IP in our system. It'll let webmasters leave comments about the IPs they see and share it with the rest of the web community. Would that be of interest? Let us know.

Re: IP address inspector displaying blank info page

Author: M.Nordhoff (23 Aug 06 12:01pm)

Ah, you fixed it so the text in the pages isn't broken anymore. Sounds good, then. :)

Being able to comment on the spiders sounds very useful. Err. I can't think of anything else to add, but yeah, it sounds great.

...Except don't call it blogging. It's too much of a buzzword now. "Comment" works fine. :P

Re: IP address inspector displaying blank info page

Author: M.Prince (23 Aug 06 12:40pm)

I hear you... no "blogging" just "commenting."

Watch for some cool things coming to the "Top 25 Spam Harvesters" page soon. It's going to get a LOT more robust (e.g., sort by fastest, sort by slowest, sort by greediest, sort by most anonymous, limit down to particular countries, particular regions, etc...).

Re: IP address inspector displaying blank info page

Author: M.Nordhoff (24 Aug 06 10:21am)

Neat. :)

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–25, Unspam Technologies, Inc. All rights reserved.