IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

125.46.36.223

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location China China
Spider First Seen approximately 13 years, 9 months, 1 week ago
Spider Last Seen within 13 years, 8 months, 2 weeks
Spider Sightings 2,365 visit(s)
User-Agents seen with 30 user-agent(s)

First Post On approximately 13 years, 9 months, 1 week ago
Last Post On within 13 years, 8 months, 2 weeks
Form Posts 665 web post submission(s) sent from this IP

IPs In The Neighborhood
125.46.36.14 China
125.46.36.18 China
125.46.36.20 China
125.46.36.23 China
125.46.36.49 China
125.46.36.89 China
125.46.36.98 | D China
125.46.36.106 China
125.46.36.107 China
125.46.36.108 China
125.46.36.115 China
125.46.36.171 China
125.46.36.186 China
125.46.36.188 China
125.46.36.204 China
125.46.36.211 | S China
125.46.36.216 China
125.46.36.218 China
125.46.36.221 China
125.46.36.224 China
125.46.37.28 China
125.46.37.39 China
125.46.37.59 | S China
125.46.37.102 China
125.46.37.130 China
125.46.37.133 China
125.46.37.148 China
125.46.37.166 China
Sample Spam URLs & Keywords Posted From 125.46.36.223
Domain: ecomlines.info
URL: http://ecomlines.info
Domain: yvmwlphpfroi.com
URL: http://yvmwlphpfroi.com/
Keywords: uwkzpgddxgqh
Domain: ppigeznhdcsm.com
URL: http://ppigeznhdcsm.com/
Keywords: qdwnvpglkjxw
Domain: ilrenqkhkvps.com
URL: http://ilrenqkhkvps.com/
Keywords: qdwnvpglkjxw
Domain: ogzmxdnaauzi.com
URL: http://ogzmxdnaauzi.com/
Keywords: xqlvffezyuyy
Domain: zgfgdziaxgbe.com
URL: http://zgfgdziaxgbe.com/
Keywords: wflldwwczszd
Domain: qtyguvwikhhz.com
URL: http://qtyguvwikhhz.com/
Keywords: wflldwwczszd
Domain: whois.domaintools.com
URL: http://whois.domaintools.com/canadians-health.com
Keywords: cheap viagra
Domain: whois.domaintools.com
URL: http://whois.domaintools.com/canadians-health.com
Keywords: cheap viagra
Domain: buy-levitra.blog.drecom.jp
URL: http://buy-levitra.blog.drecom.jp
Keywords: buy levitra
Domain: buy-levitra.blog.drecom.jp
URL: http://buy-levitra.blog.drecom.jp/
Keywords: buy levitra
Domain: buy-levitra.blog.drecom.jp
URL: http://buy-levitra.blog.drecom.jp/
Keywords: buy levitra
Domain: jacquelynebegby189.tripod.com
URL: http://jacquelynebegby189.tripod.com/portland-malls/kaposis-sarcoma.html
Keywords: kaposis sarcoma
Domain: name2nepon.talks.at
URL: http://name2nepon.talks.at
Keywords: buy generic valium
Domain: nemesefor.talks.at
URL: http://nemesefor.talks.at
Keywords: car driver insurance quote young
125.46.36.223's User Agent Strings
Mozilla/0.6 Beta (Windows)
Mozilla/0.91 Beta (Windows)
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)
Mozilla/2.0 compatible; Check&Get 1.14 (Windows NT)
Mozilla/3.01-C-SYMPA (Macintosh; I; PPC)
Mozilla/3.0 (compatible; HP Web PrintSmart 04b0 1.0.1.34)
Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)
Mozilla/4.01 (Compatible; Acorn Browse 1.25 [23-Oct-97] AW 97; RISC OS 4.39) Acorn-HTTP/0.84
Mozilla/4.08 [en] (X11; U; IRIX 5.3 IP5; Nav)
Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
Mozilla/4.0 (compatible; MSIE 4.01; Mac_PowerPC)
Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)
Mozilla/4.0 (compatible; MSIE 4.01; Windows NT)
Mozilla/4.0 (compatible; MSIE 4.01; Windows NT Windows CE)
Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; MSIECrawler)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; USA On-Site)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; 981)
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; DT)
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; NetCaptor 6.5.0RC1)
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC; AtHome021)
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC) Opera 5.0 [en]
Mozilla/4.0 (compatible; MSIE 5.0; Win3.1; ATHMWWW1.1;)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 3.1)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]
Mozilla/4.0 (compatible; MSIE 5.0; Windows ME) Opera 5.11 [en]
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)
C.K5 commented...
Used this IP 125.46.36.223
New member of UnrealPlayground foroums. Left no URL
Registered under user name: apalgeple
This email: attaisymn@kremenchug.ws
This timezone:
gmt -12
August 28 2007 04:21 PM

J.Dahl commented...
New "member" at Hoax~Slayer forums and second occasion using the same MO. This was the posting IP but the registration IP is 216.32.80.234 I am under the impression there is a hacked art school involved because all the links posted are supposed to be to porn but the go to a forbidden page on an Apache server for the Marin Art School. Marin Art School
74 Digital Drive
Novato, California 94949. This is an example of the links

http://www.marinartschool.com/images/son-f----mom-movie.html I edited on word but the idea is clear. There is a very long list of despicable titles all with this art school as the domain. I went to the art school site and it seem completely legit. Every link I checked gave a 403 access forbidden error. I'm going to contact the school.
August 21 2007 12:42 AM

B.Spade commented...
From the logs:
125.46.36.223 - - [13/Aug/2007:21:21:36 -0700]
"Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050224 Firefox/1.0+"
The posting host (125.46.36.223) has only posted spam
125.46.36.223 has posted 25 comment spam messages in last 5 weeks.
Subject: zithromax acomplia ambien Cialis
Sample URLs:
http://www.projectmainstream.net/forum/topic.asp?topic_id=1479
http://www.anyboard.net/suggest/posts/280888.html
http://www.realhp.de/members/restrox/ac2.html
http://www.shrunkurl.com?id=16232
http://hydrocodone.rxinhere.com/buy-hydrocodone-without-prescription.html
August 14 2007 02:00 AM

C.Dillon commented...
Hi - my problem only started on August 12, 2007 where I received 9 emails from my web site where I invite questions from visitors.

This IP just entered the letter 'f' against all entries.
I thought I should do something about it and hence I found you guys - thank you.

Colm Dillon
August 13 2007 01:15 AM

Page generated on: May 09 2021 09:37:02 AM
valeriegonzalez749@vbwebmail.com byronaldrich156@vbwebmail.com tanishacollier247@vbwebmail.com sonyajewell962@yahoo.com
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–21, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email