IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

41.206.160.2

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	South Africa

Harvester First Seen	approximately 4 years, 7 months, 1 week ago
Harvester Last Seen	within 3 years, 6 months, 3 weeks
Harvester Sightings	1,339 visit(s) to 169 honey pot(s)
Harvester Results	0.053 messages per visit 71 message(s) resulting from harvests - First: approximately 4 years, 5 months, 3 weeks ago - Last: approximately 3 years, 6 months, 4 weeks ago 6,444 email address(es) harvested - First: approximately 4 years, 7 months, 1 week ago - Last: Sat, 26 Jul 2008 23:50:44 -0700
Time From Harvest To First Spam	Fastest: 2 hours, 28 mins, 9 secs Slowest: 1 week, 5 days, 9 hours, 29 mins, 26 secs Average: 2 days, 17 hours, 32 mins, 26 secs Std Dev: 3 days, 15 hours, 12 mins, 29 secs

First Post On	approximately 4 years, 6 months, 4 weeks ago
Last Post On	within 3 years, 6 months, 3 weeks
Form Posts	501 web post submission(s) sent from this IP

Associated Mail Servers
65.54.246.75 \| Se
65.54.246.93 \| Se
65.54.246.94 \| Se
65.54.246.97 \| Se
65.54.246.98 \| Se
65.54.246.139 \| Se
65.54.246.141 \| Se
65.54.246.154 \| Se
65.54.246.159 \| Se
65.54.246.166 \| Se
65.54.246.167 \| Se
65.54.246.168 \| Se
65.54.246.171 \| Se
65.54.246.201 \| Se
65.54.246.202 \| Se
65.54.246.203 \| Se
65.54.246.206 \| Se
65.54.246.212 \| Se
65.54.246.214 \| Se
65.54.246.216 \| Se
65.54.246.222 \| Se
65.54.246.231 \| Se
65.54.246.232 \| Se
65.54.246.234 \| Se
65.54.246.235 \| Se
65.54.246.240 \| Se
66.11.231.2 \| S
66.14.252.111 \| S
72.14.204.226 \| Se
196.26.208.200 \| S
196.209.32.204 \| S
196.209.40.188 \| SD

IPs In The Neighborhood
41.206.159.43
41.206.159.44
41.206.159.45
41.206.159.54
41.206.159.57
41.206.159.64
41.206.159.66
41.206.159.72
41.206.159.88
41.206.159.99
41.206.159.103
41.206.159.123
41.206.159.128 \| SD
41.206.159.155
41.206.159.165
41.206.159.170
41.206.159.197
41.206.159.214
41.206.159.232
41.206.159.235
41.206.159.237
41.206.159.255
41.206.160.47
41.206.160.133 \| SD
41.206.160.134 \| SD
41.206.160.150 \| SD
41.206.160.151 \| S
41.206.160.153 \| S
41.206.160.154 \| S
41.206.160.155 \| S
41.206.160.156 \| S
41.206.160.157 \| S
41.206.160.159
41.206.160.160 \| S
41.206.160.186 \| SD
41.206.160.187 \| SD

Sample Spam URLs & Keywords Posted From 41.206.160.2

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-movie-king
Keywords: gay movie king

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-free-moview
Keywords: gay free moview

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-free-movies
Keywords: gay free movies

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-twink-movie-post-free
Keywords: gay twink movie post free

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/www-gaymovielist-com
Keywords: www gaymovielist com

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/miami-gay-movie-fest
Keywords: miami gay movie fest

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay+free+movies+bondage
Keywords: gay+free+movies+bondage

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay+free+movies
Keywords: gay+free+movies

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-movie-torrents
Keywords: gay movie torrents

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/free-gay-golden-showers-movies
Keywords: free gay golden showers movies

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-movie-king/
Keywords: gay movie king

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-free-moview/
Keywords: gay free moview

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-free-movies/
Keywords: gay free movies

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/gay-twink-movie-post-free/
Keywords: gay twink movie post free

Domain: l722804c.12gbfree.com
URL: http://l722804c.12gbfree.com/www-gaymovielist-com/
Keywords: www gaymovielist com

41.206.160.2's User Agent Strings

none/blank

AnanziNonZA

AnanziSpider5

AnanziZA

ELinks/0.10.6-1-debian (textmode; Linux 2.6.17 i686; 128x48-3)

FunnelCrawler (+http://www.funnel.co.za)

ISC Systems iRc Search 2.1

Java/1.6.0_06

libwww-perl/5.805

Mozilla/0.91 Beta (Windows)

Mozilla/3.0 (compatible; HP Web PrintSmart 04b0 1.0.1.34)

Mozilla/3.0 (compatible; Indy Library)

Mozilla/4.0 (compatible;)

Mozilla/4.0 (compatible; grub-client-2.6.0)

Mozilla/4.0 (compatible; ICS)

Mozilla/4.0 (compatible; MSIE 4.01; AOL 4.0; Windows 98)

Mozilla/4.0 (compatible; MSIE 4.01; Mac_PowerPC)

Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)

Mozilla/4.0 (compatible; MSIE 4.01; Windows NT)

Mozilla/4.0 (compatible; MSIE 4.01; Windows NT Windows CE)

Mozilla/4.0 (compatible; MSIE 4.0; MSN 2.6; Windows 95; Gateway2000)

Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)

Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; USA On-Site)

Mozilla/4.0 (compatible; MSIE 5.01; Windows 98)

Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; NetCaptor 6.5.0RC1)

Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC; AtHome021)

Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)

Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt)

Mozilla/4.0 (compatible; MSIE 5.0; Windows ME) Opera 5.11 [en]

1 comment(s) - Comment on this IP | Collapse All

D.Petterson commented...

This IP just leeched about 800MB from my website. Downloaded the same file over and over again.
April 23 2008 02:35 PM

Page generated on: February 12 2012 03:08:25 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot