IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

41.78.103.42

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Nigeria
Spider First Seen	approximately 12 years, 1 month, 1 week ago
Spider Last Seen	within 10 years, 1 week
Spider Sightings	143 visit(s)
User-Agents	seen with 30 user-agent(s)

First Received From	approximately 12 years, 10 months, 1 week ago
Last Received From	within 11 years, 8 months, 4 weeks
Number Received	72 email(s) sent from this IP

First Post On	approximately 12 years, 3 weeks ago
Last Post On	within 10 years, 1 month, 5 weeks
Form Posts	21 web post submission(s) sent from this IP

Dictionary Attacks	95 email(s) sent from this IP
First Received From	approximately 11 years, 11 months, 3 weeks ago
Last Received From	within 11 years, 8 months, 2 weeks

Associated Harvesters
74.86.209.74 \| H
74.53.249.178 \| H
216.40.222.50 \| H
67.19.250.26 \| H
216.40.222.82 \| HSD
74.208.154.143 \| HS
69.139.93.68 \| H
121.44.249.133 \| H
69.64.73.123 \| H
75.125.18.178 \| H
64.34.174.33 \| H
74.53.249.34 \| HW
216.40.220.34 \| H
75.125.47.162 \| HSDW
209.62.25.34 \| HC
216.40.220.18 \| H
75.125.194.178 \| HW
201.231.226.116 \| HS
74.54.110.194 \| H
70.84.212.114 \| H
208.53.147.89 \| H
66.90.101.66 \| H
74.58.130.207 \| H
75.125.167.2 \| H
190.73.4.61 \| H
66.79.162.195 \| H
70.85.113.242 \| H
85.96.74.199 \| HSD
84.19.184.109 \| H
75.125.52.146 \| H
67.228.115.170 \| H
196.217.99.78 \| HS
75.125.194.194 \| HS
216.40.222.98 \| H
174.142.104.81 \| HS
216.40.222.66 \| H
67.19.114.226 \| H
208.101.44.3 \| H
62.194.239.107 \| HS
64.15.139.34 \| H
75.125.52.82 \| H
75.125.194.210 \| H

IPs In The Neighborhood
41.78.102.74 \| S
41.78.102.94 \| S
41.78.102.114 \| SD
41.78.102.194
41.78.102.202 \| SD
41.78.102.222
41.78.102.234 \| D
41.78.102.238 \| S
41.78.103.14
41.78.103.22 \| SD
41.78.103.30 \| S
41.78.103.50 \| S
41.78.103.54
41.78.103.58
41.78.103.70 \| SD
41.78.103.78 \| S
41.78.103.82
41.78.103.86 \| SD
41.78.103.90 \| S
41.78.103.106 \| SD
41.78.103.186 \| SD
41.78.103.187 \| S
41.78.103.246 \| C
41.78.103.255
41.78.104.5 \| SD
41.78.104.6

Sample Spam URLs & Keywords Posted From 41.78.103.42

Domain: conversepascher.bligoo.fr
URL: http://conversepascher.bligoo.fr/
Keywords: converse pas cher blanche

Domain: cheapraybansaustralia.webs.com
URL: http://cheapraybansaustralia.webs.com/#3428
Keywords: cheap ray bans australia

Domain: uggboots.bligoo.de
URL: http://uggboots.bligoo.de/
Keywords: ugg boots ebay

Domain: nikeshoxr4.bligoo.it
URL: http://nikeshoxr4.bligoo.it/
Keywords: nike shox r4

Domain: uggssale0.mysites.nl
URL: http://uggssale0.mysites.nl/
Keywords: nike shox r4

Domain: woolrichonline1.loggy.nl
URL: http://woolrichonline1.loggy.nl/
Keywords: woolrich online kopen

Domain: nikefreerun0.blog.fr
URL: http://nikefreerun0.blog.fr/#0281
Keywords: nike free run

Domain: canadagoosejacka.jimdo.com
URL: http://canadagoosejacka.jimdo.com/
Keywords: canada goose montebello

Domain: woolrichebay.bligoo.it
URL: http://woolrichebay.bligoo.it/
Keywords: woolrich giubbotti femminili

Domain: louisvuittonsitoufficiale.bligoo.it
URL: http://louisvuittonsitoufficiale.bligoo.it/
Keywords: woolrich giubbotti femminili

Domain: louisvuittonsingapore.webs.com
URL: http://louisvuittonsingapore.webs.com
Keywords: louis vuitton handbags

Domain: oakleyargentina.bligoo.com.ar
URL: http://oakleyargentina.bligoo.com.ar/#593
Keywords: oakley vault

Domain: borsemichaelkors.bligoo.it
URL: http://borsemichaelkors.bligoo.it
Keywords: michael kors bags

Domain: nikeairmax0.webs.com
URL: http://nikeairmax0.webs.com
Keywords: nike air max tilbud

Domain: louisvuittonsingapore.webs.com
URL: http://louisvuittonsingapore.webs.com/
Keywords: nike air max tilbud

41.78.103.42's User Agent Strings

Mozilla/4.0 (compatible; ICS)

Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]

Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MyIE2; Deepnet Explorer)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; MRA 4.6 (build 01425); .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; MRA 5.6 (build 03392); Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; InfoPath.1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A403 Safari/8536.25

Mozilla/5.0 (iPhone; CPU iPhone OS 6_1_3 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10B329 Safari/8536.25

Mozilla/5.0 (Linux; U; Android 2.2; fr-fr; Desire_A8181 Build/FRF91) App3leWebKit/53.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/536.30.1 (KHTML, like Gecko) Version/6.0.5 Safari/536.30.1

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:21.0) Gecko/20100101 Firefox/21.0

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.0.3) Gecko/20060427 Camino/1.0.1

Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36

Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1

Mozilla/5.0 (Windows NT 5.1; rv:14.0) Gecko/20100101 Firefox/14.0

Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1

Mozilla/5.0 (Windows NT 6.0) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.112 Safari/535.1

Mozilla/5.0 (Windows NT 6.0) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.52 Safari/536.5

Mozilla/5.0 (Windows NT 6.0; rv:10.0.2) Gecko/20100101 Firefox/10.0.2

Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.164 Safari/535.19 YE

Mozilla/5.0 (Windows NT 6.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11

Mozilla/5.0 (Windows NT 6.1; rv:2.0b7pre) Gecko/20100921 Firefox/4.0b7pre

Example Messages Sent From 41.78.103.42

Subject: Your credit card is blocked

Subject: V1aagra 100mg, 60 pills, USD 3.19 per pill + FREE

Subject: V1aagra 150mg, 30 pills, USD 5.39 per pill + FREE

Subject: V1aagra 100mg, 30 pills, USD 3.74 per pill + FREE

Subject: Re: Fwd: Wire Transfer Confirmation (FED REFERENCE

Subject: Buy Ciails and Viarga online!

Subject: Re: Scan from a Hewlett-Packard ScanJet 497957

Subject: Re: Scan from a HP ScanJet #9918724

Subject: Fwd: Wire Transfer (27659AA666)

Subject: You pig!

Subject: Don't forget about meeting tomorrow

Subject: United Postal Service Tracking Number H0299713291

Subject: United Postal Service Tracking Nr. H7769592070

Subject: Fwd: Deine Fotos

Subject: United Postal Service Tracking Nr. H8209447169

Example User Names Used By 41.78.103.42

User-name: adored

User-name: akncdjvfafdj

User-name: aknfdjffafdj

User-name: aknidjefafdj

User-name: aknldjkfafdj

User-name: ammer

User-name: an

User-name: anvndojyfafdj

User-name: anyndxjpfafdj

User-name: bohol

User-name: durell

User-name: ekaterina

User-name: gandert

User-name: leen_chow

User-name: alek

User-name: egorov

User-name: gretz

User-name: kenzie

User-name: lasure

User-name: gromov

User-name: grishin

User-name: gordeev

User-name: gorbunov

User-name: galkin

User-name: egor

User-name: efremov

User-name: hydraulicsd

User-name: egsagan

User-name: ivecimko

User-name: elixircbz

1 comment(s) - Comment on this IP | Collapse All

H.User7152 commented...

Referrer spam:

88.190.217.11, 41.78.103.42 - - [15/Apr/2012:03:40:48 +0000] "GET /archives/1703 HTTP/1.0" 400 917 "www.vitaminfaq.net" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3"
April 15 2012 02:08 AM

Page generated on: April 25 2024 07:18:07 PM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this page from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot