IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

196.35.158.180

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location South Africa

Harvester First Seen approximately 4 years, 5 months, 3 weeks ago
Harvester Last Seen within 1 year, 6 months, 5 weeks
Harvester Sightings 4,212 visit(s) to 137 honey pot(s)
Harvester Results 0.009 messages per visit
40 message(s) resulting from harvests
- First: approximately 4 years, 5 months, 1 week ago
- Last: approximately 2 years, 5 months, 3 weeks ago
9,676 email address(es) harvested
- First: approximately 4 years, 5 months, 3 weeks ago
- Last: Tue, 14 Jul 2009 15:20:38 -0700
Time From Harvest
To First Spam
Fastest: 1 day, 12 hours, 48 mins, 31 secs
Slowest: 1 week, 4 days, 2 hours, 29 mins, 10 secs
Average: 2 days, 20 hours, 19 mins, 14 secs
Std Dev: 2 days, 10 hours, 20 mins, 50 secs

First Post On approximately 4 years, 5 months, 2 weeks ago
Last Post On within 1 year, 7 months, 3 weeks
Form Posts 680 web post submission(s) sent from this IP

Associated Mail Servers
41.241.222.168 | S
61.122.225.171 | S
64.12.143.145 | SD
64.169.213.90 | S
65.54.246.93 | Se
65.54.246.145 | Se
65.55.116.29 | Se
65.55.162.155 | Se
66.17.1.38 | S
67.210.98.60 | S
68.16.157.131 | S
72.14.204.171 | Se
196.1.160.250 | S
206.46.252.44 | S
209.23.127.148 | S
209.85.210.110 
209.85.220.160 | S
209.86.89.64 | SD
212.42.165.83 | S
212.55.52.5 | S
217.146.188.67 | S
IPs In The Neighborhood
196.35.158.0
196.35.158.1
196.35.158.2
196.35.158.42
196.35.158.50
196.35.158.73
196.35.158.158
196.35.158.178 | HC
196.35.158.179 | HCR
196.35.158.181 | HC
196.35.158.182 | HC
196.35.158.183 | HC
196.35.158.184 | HC
196.35.158.225
196.35.158.228
Sample Spam URLs & Keywords Posted From 196.35.158.180
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-ultrasounds-pictures.htm
Keywords: pregnancy ultrasounds pictures
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-unaware.htm
Keywords: pregnancy unaware
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-unknown.htm
Keywords: pregnancy unknown
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-unprotected.htm
Keywords: pregnancy unprotected
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-ultrasounds-pictures.html
Keywords: pregnancy unprotected
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-unaware.html
Keywords: pregnancy unprotected
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-unknown.html
Keywords: pregnancy unprotected
Domain: www.2-ginc.com
URL: http://www.2-ginc.com/brookline/preagnancy/5/pregnancy-unprotected.html
Keywords: pregnancy unprotected
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/debt-consolidation-loans-for-non-homeowners.html
Keywords: debt consolidation loans for non homeowners
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/credit-debt-consolidation-loan.html
Keywords: credit debt consolidation loan
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/free-bad-credit-debt-consolidation.html
Keywords: free bad credit debt consolidation
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/debt-consolidation-consumer-counseling-credit-card-debt.html
Keywords: debt consolidation consumer counseling credit card debt
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/credit-card-debt-consolidation-south-carolina.html
Keywords: credit card debt consolidation south carolina
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/debt-consolidation-loan-rates-home-equity-loans.html
Keywords: debt consolidation loan rates home equity loans
Domain: debt-consolidation.whiteery.com
URL: http://debt-consolidation.whiteery.com/uk-debt-consolidation-loan-bad-credit.html
Keywords: uk debt consolidation loan bad credit
196.35.158.180's User Agent Strings
none/blank
8484 Boston Project v 1.0
AnanziNonZA
AnanziNonZA3
AnanziStartpage
AnanziZA
BlackBerry9700/5.0.0.586 Profile/MIDP-2.1 Configuration/CLDC-1.1 VendorID/168
Combine/3 http://combine.it.lth.se/
FunnelCrawler (+http://www.funnel.co.za)
ISC Systems iRc Search 2.1
Java/1.6.0
Java/1.6.0_06
Java/1.6.0_12
Java/1.6.0_13
Java/1.6.0_20
Konqueror/3.0-rc4; (Konqueror/3.0-rc4; i686 Linux;;datecode)
libwww-perl/5.803
Microsoft URL Control - 6.01.9782
Missigua Locator 1.9
Mozilla/0.6 Beta (Windows)
Mozilla/0.91 Beta (Windows)
Mozilla/2.02E (Win95; U)
Mozilla/3.01Gold (Win95; I)
Mozilla/3.0 (compatible)
Mozilla/3.0 (compatible; NetPositive/2.1.1; BeOS)
Mozilla/4.0 (compatible;)
Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 4.01; Mac_PowerPC)
Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)
Mozilla/4.0 (compatible; MSIE 4.01; Windows 98; DigExt)
Honey Pot System commented...
WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
February 13 2010 11:13 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
February 10 2010 02:10 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:00:05. Documented reason for whitelist: Hit by a virus or trojan
February 10 2010 02:05 AM

P.Hauser commented...
196.35.158.180 is currently listed in APEWS :
Entry matching your Query: E-306596
196.35.158.180
CASE: C-86
Systems hosting malicious IRC/other scripts, php exploits, open relay/proxy, port scanning
Special Reason:
php exploit use/abuse/hosting etc
History:
Entry created 2007-10-21
March 03 2008 04:44 AM

Page generated on: February 10 2012 01:10:45 AM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email