IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

208.66.195.2 Email Address Harvester

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location United States United States
IP Characteristics Blocklisted By: SpamHaus

Harvester First Seen approximately 10 years, 11 months, 4 weeks ago
Harvester Last Seen within 10 years, 8 months, 3 weeks
Harvester Sightings 1,254 visit(s) to 586 honey pot(s)
Harvester Results 13691.221 messages per visit
17,168,791 message(s) resulting from harvests
- First: approximately 10 years, 11 months, 3 weeks ago
- Last: approximately 1 week ago
1,255 email address(es) harvested
- First: approximately 10 years, 11 months, 4 weeks ago
- Last: Mon, 04 Sep 2006 12:06:26 -0700
Time From Harvest
To First Spam
Fastest: 5 hours, 18 mins, 53 secs
Slowest: 2 weeks, 16 hours, 54 mins, 49 secs
Average: 3 days, 2 hours, 4 mins, 31 secs
Std Dev: 1 day, 22 hours, 49 mins, 24 secs

Associated Mail Servers
70.91.20.177  United States
89.123.15.108  Romania
120.132.12.248 | SD China
122.169.5.124  India
124.121.149.145  Thailand
1.39.14.121  India
59.95.20.6  India
79.106.7.13  Albania
117.197.196.115  India
120.24.176.5 | SD China
218.19.42.9  China
104.129.253.208  United States
39.48.87.3  Pakistan
201.240.120.153  Peru
190.24.68.152  Colombia
178.235.75.163 | SD Poland
112.215.45.195  Indonesia
109.160.178.49  Israel
104.243.16.158  United States
92.80.223.5  Romania
61.19.250.202  Thailand
59.95.19.125  India
196.46.238.254  Gambia
82.227.111.237  France
208.126.203.137 | SD United States
79.53.227.219 | SD Italy
41.251.20.51  Morocco
118.71.107.76  Vietnam
104.129.253.23  United States
202.53.78.251 | D India
98.100.242.178 | SD United States
115.127.8.170 | D Bangladesh
193.136.56.33  Portugal
82.139.26.89 | SD Poland
31.208.140.187 | SD Sweden
81.163.35.97  Russia
84.61.8.73  Germany
88.156.5.151 | SD Poland
109.100.247.13  Romania
118.97.79.50  Indonesia
138.68.241.124 | S United States
95.160.184.98 | SD Poland
68.165.130.156 | SD United States
173.45.186.154 | SD United States
79.188.47.198  Poland
123.24.52.171  Vietnam
1.55.219.248  Vietnam
194.44.96.144  Ukraine
89.4.246.42  Saudi Arabia
59.94.8.151  India
83.149.48.11  Russia
82.16.82.0  Great Britain
112.215.45.147  Indonesia
59.95.13.96  India
196.217.44.147  Morocco
12.51.39.129  United States
2.50.154.212  United Arab Emirates
118.45.231.93  South Korea
122.161.188.14  India
216.212.242.195 | SD United States
87.6.227.12  Italy
89.102.159.151  Czech Republic
104.129.253.69  United States
189.114.216.190  Brazil
109.160.185.142  Israel
95.56.49.32  Kazakhstan
83.149.19.123 | SD Russia
41.218.225.21  Ghana
69.15.157.197  United States
201.230.92.162  Peru
124.197.81.71 | SD Singapore
59.178.191.74  India
90.176.231.83  Czech Republic
58.142.200.26  South Korea
104.129.251.4  United States
IPs In The Neighborhood
208.66.194.154 | H United States
208.66.195.3 | H United States
208.66.195.4 | HC United States
208.66.195.5 | H United States
208.66.195.6 | H United States
208.66.195.7 | H United States
208.66.195.8 | H United States
208.66.195.9 | H United States
208.66.195.10 | H United States
208.66.195.11 | H United States
208.66.195.15 | H United States
208.66.195.19 | H United States
208.66.195.20 | H United States
208.66.195.21 | H United States
208.66.195.22 | H United States
208.66.195.2's User Agent Strings
none/blank
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)
psycheclone
H.User972 commented...
http://www.utrace.de/?query=208.66.195.2
December 16 2009 04:16 AM

P.Hauser commented...
This log shows why you should block TWO criteria and not only one:

First approach as UA "psycheclone", which received 302:

208.66.195.2 [20/Jun/2006:17:37:55 +0200] "GET /robots.txt " 200 468 "-" "[same UA]"
208.66.195.2 [20/Jun/2006:17:37:58 +0200] "GET / " 302 214 "-" "[same UA]"
208.66.195.4 [22/Jun/2006] "[same UA]"
208.66.195.6 [26/Jun/2006] "[same UA]"
208.66.195.6 [27/Jun/2006] "[same UA]"
208.66.195.3 [28/Jun/2006] "[same UA]"
208.66.195.4 [01/Jul/2006] "[same UA]"
208.66.195.6 [01/Jul/2006] "[same UA]"
208.66.195.3 [12/Jul/2006] "[same UA]"

Changing UA from "psycheclone" to
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)"
receiving 200:

208.66.195.9 [14/Jul/2006:00:42:50 +0200] "GET /robots.txt " 200 468 "-" "[same UA]"
208.66.195.9 [14/Jul/2006:00:43:20 +0200] "GET / " 200 66380 "-" "[same UA]"

208.66.195.5 [27/Jul/2006] "[same UA]"
[...]
208.66.195.5 [27/Jul/2006] "[same UA]"
208.66.195.10 [08/Aug/2006] "[same UA]"
[...]
208.66.195.10 [08/Aug/2006] "[same UA]"

First harvest with this UA:

208.66.195.10 [08/Aug/2006:12:53:09 +0200] "GET /robots.txt " 200 468 "-" "[same UA]"
[42 continued requests in 40 minutes / every minute one request]
208.66.195.10 [08/Aug/2006:13:24:20 +0200] "GET /[URL]&lang=cs " 200 68400 "-" "[same UA]"

208.66.195.19 [30/Aug/2006] [same UA]"
[...]
208.66.195.19 [30/Aug/2006] "[same UA]"

Second harvest with this UA:

208.66.195.22 [30/Aug/2006:10:45:54 +0200] "GET /robots.txt " 200 468 "-" "[same UA]"
[38 continued requests in 25 minutes / every minute one request, little faster]
208.66.195.22 [30/Aug/2006:11:07:09 +0200] "GET /[URL]&lang=es " 200 68965 "-" "[same UA]"

We stopped him:

208.66.195.9 [03/Sep/2006] "[same UA]"
[...]
208.66.195.9 [03/Sep/2006] "[same UA]"
208.66.195.7 [04/Sep/2006] "[same UA]"
[...]
208.66.195.7 [04/Sep/2006] "GET / " 302 214 "-" "[same UA]"
July 31 2007 07:23 PM

Page generated on: May 25 2017 04:29:31 PM
randylin362@vbwebmail.com sonyajewell962@outlook.com ofeliacompton475@outlook.com derekgustafson625@vbwebmail.com
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–17, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email