IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

202.156.13.254

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Singapore

Harvester First Seen	approximately 3 years, 2 weeks ago
Harvester Last Seen	within 11 months, 3 weeks
Harvester Sightings	43 visit(s)
Harvester Results	156.884 messages per visit 6,746 message(s) resulting from harvests - First: approximately 2 years, 10 months, 1 week ago - Last: approximately 1 week ago 1 email address(es) harvested - First: approximately 2 years, 10 months, 5 weeks ago - Last: Fri, 13 Mar 2009 16:13:32 -0700

First Post On	approximately 1 year, 4 weeks ago
Last Post On	within 1 year, 1 week
Form Posts	13 web post submission(s) sent from this IP

Associated Mail Servers
1.23.158.140 \| SD
1.52.16.207 \| S
1.52.123.6 \| S
2.38.34.179 \| SD
2.60.196.224 \| S
2.80.236.96
2.81.36.246 \| S
2.81.42.238 \| S
2.88.14.220 \| S
2.88.132.4 \| SD
2.89.52.83 \| SD
2.89.174.64 \| S
2.89.195.158 \| S
2.89.219.111 \| SD
2.90.169.137 \| SD
2.90.204.187 \| S
2.90.243.210 \| SD
2.91.44.148 \| S
2.91.143.152 \| SD
2.95.72.32 \| S
2.108.20.134 \| SD
2.116.67.97 \| SD
2.120.31.93 \| SD
2.120.185.117 \| S
2.132.15.43 \| SD
2.134.84.19 \| S
2.185.245.226 \| S
2.226.150.21 \| SD
8.14.226.177
12.109.184.20 \| SD
12.184.181.226 \| SD
12.233.217.98 \| SD
12.234.203.242 \| S
14.33.29.7 \| SD
14.33.68.69 \| SD
14.42.164.130 \| SD
14.96.117.172 \| S
14.98.231.235 \| S
14.194.96.226 \| SD
24.2.8.209 \| SD
24.4.223.36 \| SD
24.6.24.151 \| SD
24.7.89.44 \| SD
24.8.137.106 \| SD
24.9.137.19 \| S
24.9.209.20 \| SD
24.10.26.43 \| SD
24.10.43.39 \| SD
24.10.215.93 \| SD
24.12.61.99 \| SD
24.12.74.249 \| SD
24.13.47.81 \| SDC
24.14.76.99 \| SD
24.14.165.246 \| SD
24.18.17.63 \| SD
24.23.184.9 \| SD
24.36.202.174 \| S
24.39.45.194 \| SD
24.40.148.222 \| SD
24.64.101.227 \| SD
24.82.136.162 \| S
24.85.162.159 \| SD
24.85.242.174 \| SD
24.87.55.76 \| SD
24.90.191.13 \| SD
24.98.232.39 \| SD
24.98.245.51 \| S
24.110.12.167 \| S
24.121.149.4 \| SD
24.132.220.102 \| SD
24.147.143.79 \| SD
24.159.147.128 \| SD
24.168.61.8 \| SD
24.176.65.163 \| S
24.182.173.20 \| S

IPs In The Neighborhood
202.156.13.51
202.156.13.60
202.156.13.102 \| S
202.156.13.225 \| C
202.156.13.226
202.156.13.227 \| C
202.156.13.228 \| HC
202.156.13.229
202.156.13.230
202.156.13.231 \| C
202.156.13.232
202.156.13.233
202.156.13.234 \| C
202.156.13.235
202.156.13.236
202.156.13.237
202.156.13.238
202.156.13.239 \| C
202.156.13.240 \| C
202.156.13.241
202.156.13.242
202.156.13.243
202.156.13.244
202.156.13.245
202.156.13.246
202.156.13.247
202.156.13.248
202.156.13.249 \| H
202.156.13.250 \| HC
202.156.13.251
202.156.13.252 \| C
202.156.13.253
202.156.14.10 \| HC
202.156.14.11
202.156.14.42 \| H
202.156.14.74 \| HC
202.156.14.75
202.156.14.76
202.156.14.77
202.156.14.78 \| H
202.156.14.79 \| C
202.156.14.80 \| C
202.156.14.81
202.156.14.82
202.156.14.84
202.156.14.97
202.156.14.98
202.156.14.99 \| C
202.156.14.100 \| C
202.156.14.101 \| C
202.156.14.102
202.156.14.103
202.156.14.104
202.156.14.105 \| C
202.156.14.106 \| C
202.156.14.107
202.156.14.108 \| H
202.156.14.109
202.156.14.110 \| H
202.156.14.193
202.156.14.194
202.156.14.196 \| C
202.156.14.197
202.156.14.198
202.156.14.199
202.156.14.202 \| C
202.156.14.206

Sample Spam URLs & Keywords Posted From 202.156.13.254

Domain: kefwcht.atspace.name
URL: http://kefwcht.atspace.name/doc_7.html
Keywords: sulfacetamide sodium sulfur in urea with sunscreen kit

Domain: kefwcht.atspace.name
URL: http://kefwcht.atspace.name/page_8.html
Keywords: myteenz iron fl

Domain: kefwcht.atspace.name
URL: http://kefwcht.atspace.name/9.html
Keywords: prevacid

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/index.html
Keywords: azacitidine

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/1.html
Keywords: oxazepam

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/site-2.html
Keywords: nexterone

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/site-3.html
Keywords: atromid s

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/doc_4.html
Keywords: nasal allergy control solution

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/site-5.html
Keywords: potassium bicarbonate

Domain: uapbr.atspace.name
URL: http://uapbr.atspace.name/site-6.html
Keywords: teenrens kaopectate

Domain: ubzukup.atspace.com
URL: http://ubzukup.atspace.com/7.html
Keywords: andec

Domain: ubzukup.atspace.com
URL: http://ubzukup.atspace.com/doc_8.html
Keywords: terak ointment

Domain: ubzukup.atspace.com
URL: http://ubzukup.atspace.com/doc_9.html
Keywords: dirithromycin

Domain: zewdrhk.atspace.com
URL: http://zewdrhk.atspace.com/index.html
Keywords: seroquel

Domain: zewdrhk.atspace.com
URL: http://zewdrhk.atspace.com/page-1.html
Keywords: pseudovent

202.156.13.254's User Agent Strings

Mozilla/4.0 (compatible; ICS)

Mozilla/4.0 (compatible; MSIE 6.0; AOL 8.0; Windows NT 5.1; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 9.0

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.10 (build 01952); snprtz|T30112810930040; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Media Center PC 3.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; ZangoToolbar 4.8.3; Windows-Media-Player/10.00.00.3990)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; TuneUp HTML Client Embedded Web Browser from: http://bsalsa.com/)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; (R1 1.3); .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SIMBAR={5DF1E3F3-24D1-4F44-9173-5BCE9C646F2D}; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 2.0.50727; .NET CLR 1.1.4322; MEGAUPLOAD 2.0)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; snprtz|T05048023300518; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; YPC 3.2.0; .NET CLR 1.1.4322; IEMB3; .NET CLR 2.0.50727; Zune 2.0; IEMB3; yplus 5.6.04b)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Zango 10.0.370.0)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6.5; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.21022; .NET CLR 3.5.30729; InfoPath.1; .NET CLR 3.0.30729; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C)

Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3

Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.221.7 Safari/532.2

nutch.us/Nutch-1.0 (www.nutch.us; crawler@nutch.us)

Opera/7.11 (Windows NT 5.1; U) [en]

0 comment(s) - Comment on this IP

Page generated on: February 16 2012 11:29:13 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot