IP Address Inspector

P.Hauser commented...

Thanks for the dnsstuff-URL.

Well, clientswebs.com, beconnect.info, productswebs.com seem to be offline. Only to-search.info is continued. Now, if you do a reverse lookup on to-search.info and flsearch.us, you'll find them at IP 66.55.151.49 and 66.55.151.27. The web-interfaces of both look and are the same, though the owners seem to differ.

Then I found, that to-search.info was affiliate-partner of a company "Enhance Interactive" (http://www.enhance.com/). The thread, where I first read this, is here:

http://forums.searchenginewatch.com/showthread.php?p=72275

"Enhance Interactive" seemed to be involved into some "Click Fraud" last year, as you can read here

http://www.wordsinarow.com/enhance-interactive.html

"Click Fraud" is explained here:

http://www.wordsinarow.com/click-fraud.html

The range from 66.55.151.0 to 66.55.151.63 seems to be mainly offline, so does the IP 66.55.151.2, from where we're crawled.

The crawler of flsearch.us or to-search.info with this IP was here by now 54 times and I don't see, what they're looking for.

The following servers have a running bogus webserver, that all resolve on Port 25 to mail.flsearch.us:

66.55.151.5 (bogus)
66.55.151.9 (bogus)
66.55.151.14 (bogus)
66.55.151.17 (bogus)
66.55.151.19 (bogus)
66.55.151.23 (bogus)
66.55.151.26 (bogus)
66.55.151.27 --> flsearch.us
66.55.151.30 (bogus)
66.55.151.34 (bogus)
66.55.151.36 (bogus)
66.55.151.39 (bogus)
66.55.151.41 (bogus)
66.55.151.43 (bogus)
66.55.151.46 (bogus)
66.55.151.49 --> to-search.info
66.55.151.52 (bogus)
66.55.151.54 (bogus)
66.55.151.56 (bogus)
66.55.151.58 (bogus)
66.55.151.61 (bogus)

The other IPs from that range 66.55.151.0 - 66.55.151.63 are probably temporarily offline. Hope it helps.
August 05 2007 08:38 AM

E.Dylewski commented...

Seen that one too:
66.55.151.2 - - [03/Aug/2007:10:19:45 -0500] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"

Also found this info:
http://member.dnsstuff.com/forums/showthread.php?t=986408
August 03 2007 12:28 PM

P.Hauser commented...

Was here again, but rejected:

66.55.151.2 - - [01/Aug/2007:12:14:24 +0200] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
66.55.151.2 - - [01/Aug/2007:13:17:51 +0200] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
August 02 2007 11:37 PM

P.Hauser commented...

IP 66.55.151.2 was here again. Requesting 66.55.151.2:25 results in SMTP-answer '220' and resolves to DNS 'mail.flsearch.us' ESMTP SMTP Requesting 66.55.151.2:110 results in POP3-answer +OK +OK.

Though it's not a relay, it seems to be the SMTP/POP3-server of the search-engine http://flsearch.us/. At http://flsearch.us/form.php there is a form, that requires some obligatory information to submit in a rather lousy and broken German.

The range concerned to this owner according to IP address 66.55.151.2 is the following:

M Kurczycki CHOOPA-66-55-151-0-1 (NET-66-55-151-0-1) 66.55.151.0 - 66.55.151.63

Owner of flsearch.us is:
------------------------------------------
Name: Tom Diwty
Organization: GHT A.G.
Address1: PO BOX 4548
City: NYC
State/Province: NY
Postal Code: 55593
Country: United States
Country Code: US
Phone Number: +1.51947380967
------------------------------------------

IP 66.55.151.2 might be the bot-server of flsearch.us.
Does anybody know something about this SE?
July 29 2007 01:28 PM

P.Hauser commented...

Was here in vain, -see why?

66.55.151.2 - - [09/Jul/2007:13:24:50 +0200] "HEAD / HTTP/1.1" 301 0 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"
July 26 2007 11:10 PM