IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

202.28.27.3

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Thailand
Spider First Seen approximately 5 years, 2 months, 4 weeks ago
Spider Last Seen within 1 year, 4 months, 2 weeks
Spider Sightings 4,416 visit(s)
User-Agents seen with 30 user-agent(s)

First Received From approximately 4 years, 4 months, 1 week ago
Last Received From within 3 years, 10 months, 1 week
Number Received 9 email(s) sent from this IP

First Post On approximately 4 years, 7 months, 3 weeks ago
Last Post On within 1 year, 4 months, 2 weeks
Form Posts 2,141 web post submission(s) sent from this IP

Associated Harvesters
61.209.182.171 | H
61.231.69.112 | H
64.20.38.178 | H
68.3.170.33 | H
211.3.148.194 | H
211.3.201.67 | H
IPs In The Neighborhood
202.28.26.144 | S
202.28.26.149 | S
202.28.26.159 | S
202.28.26.172
202.28.26.173 | S
202.28.26.179 | S
202.28.26.181
202.28.26.184 | S
202.28.26.185 | S
202.28.26.188 | S
202.28.26.194 | S
202.28.26.199 | S
202.28.26.202 | S
202.28.26.207 | S
202.28.26.209 | S
202.28.26.212 | S
202.28.26.221 | S
202.28.26.230 | SD
202.28.26.252 | S
202.28.27.2 | SC
202.28.27.4 | C
202.28.27.5
202.28.27.6 | C
202.28.27.18 | SD
202.28.27.25 | SD
202.28.27.59 | SD
Sample Spam URLs & Keywords Posted From 202.28.27.3
Domain: ca.geocities.com
URL: http://ca.geocities.com/pharmacycnhalche/ouqrg/hot-blondes-nude-free.htm
Keywords: hot blondes nude free
Domain: uk.geocities.com
URL: http://uk.geocities.com/losingweightlwyk/zkmbs-pe/web-cam-sex-hidden.htm
Keywords: web cam sex hidden
Domain: ca.geocities.com
URL: http://ca.geocities.com/losingweightqbvi/bmbda/sex-images.htm
Keywords: sex images
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-doctor-patient.html
Keywords: free lesbian sex stories doctor patient
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-first-time.html
Keywords: free lesbian sex stories first time
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-free.html
Keywords: free lesbian sex stories free
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-mom-daughter.html
Keywords: free lesbian sex stories mom daughter
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-nifty.html
Keywords: free lesbian sex stories nifty
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-pictures-video.html
Keywords: free lesbian sex stories pictures video
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-pictures.html
Keywords: free lesbian sex stories pictures
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories-to-read.html
Keywords: free lesbian sex stories to read
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-stories.html
Keywords: free lesbian sex stories
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-story.html
Keywords: free lesbian sex story
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-tapes.html
Keywords: free lesbian sex tapes
Domain: www.the2free.happyhost.org
URL: http://www.the2free.happyhost.org/free-lesbian-sex-tgp.html
Keywords: free lesbian sex tgp
202.28.27.3's User Agent Strings
none/blank
Googlebot/2.1 (+http://www.googlebot.com/bot.html)
IEAutoDiscovery
Mozilla/0.6 Beta (Windows)
Mozilla/0.91 Beta (Windows)
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)
Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)
Mozilla/2.0 compatible; Check&Get 1.14 (Windows NT)
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)
Mozilla/3.0 (compatible)
Mozilla/3.0 (compatible; HP Web PrintSmart 04b0 1.0.1.34)
Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)
Mozilla/3.0 (x86 [en] Windows NT 5.1; Sun)
Mozilla/4.01 (Compatible; Acorn Phoenix 2.08 [intermediate]; RISC OS 4.39) Acorn-HTTP/0.84
Mozilla/4.06 [es] (Win98; I)
Mozilla/4.08 [en] (WinNT; I ;Nav)
Mozilla/4.0 (compatible;)
Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
Mozilla/4.0 (compatible; MSIE 4.01; Mac_PowerPC)
Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)
Mozilla/4.0 (compatible; MSIE 4.01; Windows NT)
Mozilla/4.0 (compatible; MSIE 4.01; Windows NT Windows CE)
Mozilla/4.0 (compatible; MSIE 4.0; MSN 2.6; Windows 95; Gateway2000)
Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; MSIECrawler)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; USA On-Site)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; 981)
Example Messages Sent From 202.28.27.3
From:
Subject: Åý®aªø¥i¥H³­«Ä¤l¤@°_°µ°Û¹C°Ê§@¡A¼W¶i¿Ë¤l¤¬°Ê¡C
From:
Subject: ‚»‚±‚Ɉ¤‚Í‚¢‚è‚Ü‚¹‚ñ
From:
Subject: ƒ[ƒ‹‚ł̌떂‰»‚µA
From:
Subject: ¤£¥i«äij§åµo»ù ­^°êµR§Q¤h¤@¦ÊÁû¸Ë
From:
Subject: ¤£¥i«äij±z«e©Ò¥¼»Dªº -** ¨Èº¿»¹ªe¬y°ì¡i°g»îÃÄ¡j**
From:
Subject: (^_-)ƒEƒBƒ“ƒN
From:
Subject: I Selling Rolexes and other watches? DO uou want?
From:
Subject: Looking for Gift? Buy Rolex e7nipe
From:
Subject: Looking for perfect gift? Buy Rolex s4r
P.Hauser commented...
IP 202.28.27.3 is an anonymous proxy according to a www-proxy list (entry): "202.28.27.3:8080 anonymous Thailand 2007-06-24"

This explaines the various user-agents and the function mainly as a comment spammer, since a proxy is used (and abused) by many *different* users.

According to GOOGLE IP 202.28.27.3 is highly frequented mainly from Asian countries with currently about 131.000 GOOGLE hits.

According to APNIC the registrant is UniNet(Inter-university network) with the range 202.28.0.0 - 202.29.255.255

Technical Contact is the UniNet Network Operation Center (noc@uni.net.th)
Office of Information Technology Administration for Educational Development
Ministry of University Affairs
Bangkok 10400
Phone: +66-2-248-7749
Fax: +66-2-248-6662

Administrative Contact for abuse mails is Yunyong Teng-amnuay (Yunyong.T@Chula.ac.th)
Chulalongkorn University
Centers of Academic Resources
Phyathai Road
Bangkok 10330
TH
Phone: +66-2-218-2910
Fax: +66-2-215-3617
October 05 2007 09:30 AM

C.Wilson6 commented...
202.28.27.3 Ignores robot.txt
Tripped local bot trap on 2007-06-24 (Sun) 07:36:03 Pacific
hostname: 202.28.27.3
Agent: Opera/9.00 (Windows NT 4.0; U; en)
June 24 2007 08:26 AM

Page generated on: February 10 2012 11:31:50 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email