IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

12.197.253.227

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	United States (Seattle, Washington)
Spider First Seen	approximately 4 years, 5 months, 4 weeks ago
Spider Last Seen	within 3 years, 1 week
Spider Sightings	2 visit(s)
User-Agents	seen with 2 user-agent(s)

First Received From	approximately 4 years, 9 months, 5 weeks ago
Last Received From	within 1 year, 2 months, 2 weeks
Number Received	807 email(s) sent from this IP

Dictionary Attacks	116 email(s) sent from this IP
First Received From	approximately 4 years, 4 weeks ago
Last Received From	within 2 years, 4 months, 2 weeks

Associated Harvesters
12.155.240.244 \| H
24.22.126.168 \| HS
24.57.1.238 \| H
24.75.192.34 \| H
41.209.121.78 \| HSD
59.14.91.171 \| HS
60.236.76.181 \| H
62.139.251.242 \| H
62.150.140.183 \| HS
62.162.245.250 \| H
62.163.37.157 \| H
62.193.27.250 \| H
62.194.10.101 \| H
62.194.115.68 \| HSD
62.203.182.164 \| H
62.227.155.27 \| H
62.254.128.7 \| H
63.162.4.193 \| HS
64.62.228.65 \| H
65.75.128.30 \| H
66.90.101.66 \| H
66.90.110.213 \| H
66.96.216.133 \| HS
66.98.184.81 \| H
66.108.4.20 \| H
66.111.59.120 \| H
66.148.67.102 \| H
66.148.67.104 \| H
66.199.236.50 \| H
66.199.246.138 \| H
66.246.252.117 \| HSD
67.15.130.23 \| H
67.19.136.180 \| H
67.19.250.26 \| H
67.83.173.170 \| H
67.159.8.41 \| H
67.159.8.46 \| H
67.159.22.195 \| H
68.3.170.33 \| H
68.35.84.167 \| HS
68.38.105.104 \| H
68.54.91.55 \| H
68.80.208.178 \| HS
68.103.197.12 \| H
68.163.3.141 \| H
68.229.148.219 \| H
69.41.163.53 \| H
69.41.171.48 \| H
69.41.173.16 \| H
69.50.208.24 \| H
69.64.33.231 \| HS
69.64.73.123 \| H
69.94.193.169 \| HS
69.156.93.35 \| H
69.171.129.128 \| HSD
69.234.56.71 \| H
70.84.212.114 \| H
70.84.220.194 \| HS
70.85.113.242 \| H
70.85.172.170 \| H
70.87.196.242 \| H
71.65.114.141 \| H
71.79.202.111 \| HS
71.125.88.238 \| H
72.2.24.104 \| HS
72.2.24.106 \| H
72.88.141.212 \| HS
72.153.64.218 \| H
74.53.249.34 \| HW
74.72.61.86 \| H
74.86.209.74 \| H
74.113.2.225 \| H
74.114.208.81 \| H
74.124.192.3 \| H
75.35.243.85 \| H

IPs In The Neighborhood
12.197.253.62 \| SD
12.197.253.138 \| SD
12.197.253.162 \| S
12.197.253.211
12.197.253.212
12.197.253.213 \| S
12.197.253.217 \| SD
12.197.253.219 \| S
12.197.253.229 \| S
12.197.253.230
12.197.253.241 \| SD

12.197.253.227's User Agent Strings

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; GTB5; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; Media Center PC 5.0)

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6

Example Messages Sent From 12.197.253.227

From:
Subject: gregory_e_collett@mail5.dimmeria.com Viagra.com -5

From:
Subject: rosella_s_fogelquist@vortex.retards-r.us Viagra.co

From:
Subject: cassy_keno@jones.islandercomputing.com Viagra.com

From:
Subject: charles_x_rayome@database.securityexploits.com Via

From:
Subject: gregory_d_hadlock@uitwijk.waakhond.net Viagra.com

From:
Subject: malvina.mundschenk@mobile.escortgirls.in Viagra.co

From:
Subject: ellan.k.bottin@php.firsthelplines.com Viagra.com -

From:
Subject: isteyer07@kak-dela.dak.org.ru Viagra.com -42% now

From:
Subject: flockphysical2004@users.energyhelpline.info Viagra

From:
Subject: darrel_gotcher@mail7.kincheloe.us Viagra.com -79%

From:
Subject: strausz4854@smtp.escortgirls.in Viagra.com -47% no

From:
Subject: darrel_minear@smtp.derblickfang.com Viagra.com -69

From:
Subject: cassy_u_banis@mail.spamexam.us Viagra.com -74% now

From:
Subject: toberthelsen@4-speed.net Pfizer -64% now

From:
Subject: deon_v_herwig@mail4.dak.org.ru Pfizer -57% now

From:
Subject: antone.freeze@popmail.wittsend.org Pfizer -40% now

From:
Subject: bncoster@spud.fivefingervideo.com Pfizer -78% now

From:
Subject: nathan.keihl@mail.ww7.be Pfizer -66% now

From:
Subject: annalisa.bizub@mad.madcowinternet.co.za Pfizer -73

From:
Subject: ntmurgia69@stooge.heymoe.org Pfizer -69% now

From:
Subject: blake_n_cartland@thruconnect.shepsplace.net Pfizer

From:
Subject: ann_m_timi@forums.rap-star.com Pfizer -64% now

From:
Subject: wayne.inscore@007.swag.dk Pfizer -44% now

From:
Subject: wukaminski2010@users.smiffysplace.com Pfizer -76%

From:
Subject: gkraack98@users.telecomhelpline.org Pfizer -79% no

Example User Names Used By 12.197.253.227

User-name: arla

User-name: arla_

User-name: bank

User-name: buh

User-name: buhg

User-name: buhgalteria

User-name: bux

User-name: coalter

User-name: dir

User-name: direktor

User-name: elqnqdjmfafjdj

User-name: elqnrdjffafvdj

User-name: faustina

User-name: faustina_

User-name: fbjndjfjaftdj

User-name: fcnkdjfkafvdj

User-name: fcnpdjfiafxdj

User-name: fcntdjfrafwdj

User-name: fddnmdjfbafpdj

User-name: fddnvdjfjafedj

User-name: fdingdjfkafjdj

User-name: fdjnfdjfoaffdj

User-name: fdxnwdjftafbdj

User-name: felisa

User-name: felisa_

User-name: finance

User-name: fnyndxjnfhafadj

User-name: hmpostmaster

User-name: holding

User-name: hr

0 comment(s) - Comment on this IP

Page generated on: February 16 2012 07:06:51 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot