IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

118.98.212.18

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Indonesia
Spider First Seen	approximately 10 months, 2 weeks ago
Spider Last Seen	within 6 months, 5 weeks
Spider Sightings	31 visit(s)
User-Agents	seen with 27 user-agent(s)

First Received From	approximately 3 years, 11 months, 3 weeks ago
Last Received From	within 10 months, 3 weeks
Number Received	649 email(s) sent from this IP

First Post On	approximately 9 months, 4 weeks ago
Last Post On	within 9 months, 3 weeks
Form Posts	2 web post submission(s) sent from this IP

Dictionary Attacks	31 email(s) sent from this IP
First Received From	approximately 3 years, 2 months, 3 weeks ago
Last Received From	within 2 years, 6 months, 4 weeks

Associated Harvesters
219.66.235.234 \| H
41.201.221.32 \| HS
59.95.79.23 \| HS
66.167.50.101 \| H
66.199.246.138 \| H
67.19.114.226 \| H
70.85.113.242 \| H
70.85.172.170 \| H
74.53.249.34 \| HW
75.125.52.146 \| H
82.65.84.21 \| HS
125.60.248.130 \| H
206.51.236.176 \| H
208.66.195.2 \| H
208.66.195.3 \| H
208.66.195.5 \| H
208.66.195.6 \| H
208.66.195.7 \| H
208.66.195.9 \| H
208.101.44.3 \| H
91.105.37.76 \| H
65.92.122.214 \| H
216.40.220.18 \| H
216.40.220.34 \| H
66.90.101.66 \| H
208.66.195.8 \| H
216.40.222.98 \| H
74.124.192.3 \| H
89.120.231.137 \| H
77.223.117.116 \| HSC
216.12.207.226 \| HC
62.194.10.101 \| H
77.235.114.251 \| H
82.181.208.169 \| H
80.154.41.21 \| H
70.84.228.42 \| H
75.125.47.162 \| HSDW
216.40.222.50 \| H
75.37.116.174 \| H
195.47.84.34 \| HS
69.152.203.140 \| H
74.86.209.74 \| H
207.81.163.73 \| H
71.158.134.213 \| HC
75.125.18.178 \| H
81.214.191.36 \| HSD
91.105.24.115 \| H
83.103.197.100 \| HS
74.86.249.98 \| H
208.66.195.10 \| H
69.144.93.12 \| HC
209.62.25.34 \| HC
72.88.141.212 \| HS
200.104.55.190 \| H
71.82.134.7 \| H
218.165.142.165 \| H
208.53.147.89 \| H
217.236.86.67 \| H
141.155.146.18 \| H
24.74.145.85 \| HS
67.86.138.59 \| HC
216.40.222.66 \| H
75.125.52.162 \| H
204.9.52.5
88.169.122.170 \| HS
69.118.60.146 \| H
201.235.138.127 \| HS
85.120.152.208 \| H
75.125.52.66 \| H
216.40.222.82 \| HSD
12.155.240.244 \| H
70.87.196.242 \| H
67.176.57.125 \| H
68.18.157.41 \| HS
195.234.169.203 \| H

IPs In The Neighborhood
118.98.212.2 \| SD
118.98.212.4
118.98.212.11 \| SD
118.98.212.12 \| S
118.98.212.13 \| S
118.98.212.14 \| SD
118.98.212.19 \| SD
118.98.212.20 \| SD
118.98.212.21 \| SD
118.98.212.22 \| SD
118.98.212.34 \| S
118.98.212.43 \| SDC
118.98.212.44 \| SD
118.98.212.45
118.98.212.50
118.98.212.53 \| SD
118.98.212.54 \| S
118.98.212.58 \| C
118.98.212.66
118.98.212.67 \| S
118.98.212.74 \| S
118.98.212.75 \| S
118.98.212.76 \| S
118.98.212.82
118.98.212.83 \| SD
118.98.212.90 \| SC
118.98.212.92 \| C
118.98.212.98 \| SD
118.98.212.99 \| SD
118.98.212.100 \| SD
118.98.212.107
118.98.212.109 \| S
118.98.212.114 \| SD
118.98.212.115 \| SD
118.98.212.116 \| SD
118.98.212.117 \| SD
118.98.212.118 \| S
118.98.212.122 \| SD
118.98.212.130 \| SD
118.98.212.131 \| SD
118.98.212.132 \| S
118.98.212.133 \| S
118.98.212.138 \| S
118.98.212.139 \| S
118.98.212.146 \| SD
118.98.212.147
118.98.212.150 \| D
118.98.212.154 \| SD
118.98.212.155 \| S
118.98.212.156 \| S
118.98.212.157
118.98.212.158 \| SD
118.98.212.162 \| S
118.98.212.170 \| S
118.98.212.178 \| SD
118.98.212.179 \| SD
118.98.212.180 \| S
118.98.212.181 \| S
118.98.212.182 \| SD
118.98.212.186 \| SD
118.98.212.188 \| SD
118.98.212.194 \| SD
118.98.212.195 \| SD
118.98.212.202 \| SD
118.98.212.203 \| SD
118.98.212.206 \| S
118.98.212.210 \| SD
118.98.212.211 \| S
118.98.212.212 \| SD
118.98.212.218 \| S
118.98.212.220 \| SD
118.98.212.226 \| SD
118.98.212.227 \| S
118.98.212.228 \| SD
118.98.212.229 \| SD
118.98.212.234 \| SC
118.98.212.235 \| SD
118.98.212.242 \| SDC
118.98.212.243 \| SD

Sample Spam URLs & Keywords Posted From 118.98.212.18

Domain: www.key-windows-7.co.uk
URL: http://www.key-windows-7.co.uk/
Keywords: windows 7 key

Domain: www.office2010-key.eu
URL: http://www.office2010-key.eu/office-2007-key
Keywords: office 2007 key

Domain: www.windows7key.ca
URL: http://www.windows7key.ca/office-2010-key
Keywords: office 2010 activation

Domain: zhosoea.angelfire.com
URL: http://zhosoea.angelfire.com/defensive-player-strategy-and-fantasy-footbal.htm
Keywords: defensive player strategy and fantasy footbal

118.98.212.18's User Agent Strings

Mozilla/4.0 (compatible; ICS)

Mozilla/4.0 (compatible; MSIE 5.5; Windows 95)

Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)

Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FREE; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.3 (build 01218); .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.6 (build 01425))

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322; FDM)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.50

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; Win64; AMD64)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT) ::ELNSB50::000061100320025802a00111000000000507000900000000

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; Media Center PC 6.0; InfoPath.2; MS-RTC LM 8)

Mozilla/4.0 (compatible; Powermarks/3.5; Windows 95/98/2000/NT)

Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.2.0.4) Gecko/20000012 Firefox/1.5.0.4 Flock/0.2.0.12.1

Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.2 (KHTML, like Gecko) Chrome/4.0.221.7 Safari/532.2

Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.9.0.2) Gecko/2008092313 Ubuntu/9.25 (jaunty) Firefox/3.8

Opera/9.00 (Windows NT 4.0; U; en)

Example Messages Sent From 118.98.212.18

From: none/blank
Subject: none/blank

From:
Subject: $2400 bonus to all new players

From:
Subject: We guarantee you visit us again

From:
Subject: We Offer You Best Deals On Software.

From:
Subject: The Best Software At Best Prices Here.

From:
Subject: The longer your love instrument is, the longer the

From:
Subject: Guys with big devices never have to lick up for th

From:
Subject: You hate your male friend? After enlargement it ca

From:
Subject: Being hung as a horse is more than possible.

From:
Subject: Finally the mankind found the way out for men who

From:
Subject: Enjoy the delicious taste of having a monster in y

From:
Subject: The more inches in your pants, the more women in y

From:
Subject: You would never have to travel south if you had a

From:
Subject: Havin

From:
Subject: Online diplomas here.

From:
Subject: We will call you back.

From:
Subject: =?koi8-r?B?V2hlbiB5b3UgZG9uk=?=

From:
Subject: Our medicine will have a very positive effect on y

From:
Subject: Timepieces for people who love attention.

From:
Subject: Watches from popular designers at friendly prices.

From:
Subject: =?koi8-r?B?QWRkaWN0ZWQgdG8gbHV4dXJ5IJYgY=?=

From:
Subject: No matter what you do with a stylish watch you wil

From:
Subject: Call us for a Masters degree.

Example User Names Used By 118.98.212.18

User-name: atvdv

User-name: don

User-name: edwardxansley

User-name: friermooderwg

User-name: friermoodeti

User-name: friermoodianc

User-name: friermoodomr

User-name: hr

User-name: iamjustsendingthisleter

User-name: iwatani_ryouta

User-name: labbadia

User-name: mpknrdtjxfafwdbj

User-name: mpknxdtjkfaftdbj

User-name: randon.h.poma

User-name: sales

User-name: stodghill

User-name: tarascio

User-name: bc458.3000104

User-name: fd060c.1050407

User-name: hyunjin-nacrusis

User-name: tarahsprenkle

User-name: tondagannon

User-name: marlendeppe

User-name: marlenarakich

User-name: hard

User-name: mackahlin

User-name: frierdich

User-name: renton

User-name: luchterhand

User-name: hindmarsh

1 comment(s) - Comment on this IP | Collapse All

C.Davenport commented...

Just had Mediawiki comment spam from this IP.
December 03 2011 02:43 PM

Page generated on: May 27 2012 04:55:31 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot