IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

12.43.32.254

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	United States (San Francisco, California)
Spider First Seen	approximately 2 years, 11 months, 2 weeks ago
Spider Last Seen	within 1 year, 4 months, 4 weeks
Spider Sightings	3 visit(s)
User-Agents	seen with 3 user-agent(s)

First Received From	approximately 4 years, 4 months, 2 weeks ago
Last Received From	within 1 year, 1 month, 1 week
Number Received	40 email(s) sent from this IP

First Post On	approximately 1 year, 6 months, 1 week ago
Last Post On	within 1 year, 6 months, 1 week
Form Posts	1 web post submission(s) sent from this IP

Dictionary Attacks	2 email(s) sent from this IP
First Received From	approximately 1 year, 1 month, 2 weeks ago
Last Received From	within 1 year, 1 month, 2 weeks

Associated Harvesters
24.6.64.84 \| H
62.193.29.9 \| H
66.246.252.117 \| HSD
67.19.136.180 \| H
69.64.73.123 \| H
70.85.172.170 \| H
74.86.14.10 \| H
74.86.209.74 \| H
74.86.249.98 \| H
74.124.192.3 \| H
75.125.47.162 \| HSDW
80.60.116.209 \| H
81.89.68.4 \| HS
82.135.148.171 \| H
87.110.198.3 \| HS
88.248.160.25 \| HSD
195.234.169.203 \| H
208.53.147.136 \| H
208.53.147.137 \| H
208.66.195.2 \| H
208.66.195.8 \| H
216.40.222.50 \| H
216.40.220.34 \| H
67.19.250.26 \| H
70.84.228.106 \| H
81.169.236.215 \| HC
208.101.44.3 \| H
216.40.220.18 \| H
208.66.195.7 \| H

Sample Spam URLs & Keywords Posted From 12.43.32.254

Domain: www.quia.com
URL: http://www.quia.com/profiles/a201012
Keywords: adipex diet online pill

Domain: www.quia.com
URL: http://www.quia.com/profiles/t201011
Keywords: tramadol nausea

Domain: my.speedtv.com
URL: http://my.speedtv.com/tramadoll137m/
Keywords: tramadol earnestly online

Domain: connect.mlive.com
URL: http://connect.mlive.com/user/adipexmpu59/index.html
Keywords: is adipex an amphetamine

Domain: www.quia.com
URL: http://www.quia.com/profiles/t2010
Keywords: tramadol good for depression

Domain: www.quia.com
URL: http://www.quia.com/profiles/b2010
Keywords: new tramadol cheap discount

Domain: forums.heywatch.com
URL: http://forums.heywatch.com/forums/3/topics/7387
Keywords: buy adipex cheap and fast

Domain: my.speedtv.com
URL: http://my.speedtv.com/cialisk137m/
Keywords: when cialis does not work

Domain: www.quia.com
URL: http://www.quia.com/profiles/t201010
Keywords: tramadol overdose for dogs

Domain: connect.mlive.com
URL: http://connect.mlive.com/user/tramadol6u59/index.html
Keywords: tramadol medication withdrawal

Domain: forums.heywatch.com
URL: http://forums.heywatch.com/forums/3/topics/7394
Keywords: how to prescribe xanax

Domain: forums.heywatch.com
URL: http://forums.heywatch.com/forums/3/topics/7377
Keywords: 90 pills phentermine under 100.00

Domain: www.quia.com
URL: http://www.quia.com/profiles/p201010
Keywords: phentermine hydrochloride 30mg

Domain: www.quia.com
URL: http://www.quia.com/profiles/a201011
Keywords: adipex phentermine pill

Domain: www.firstearthbattalion.org
URL: http://www.firstearthbattalion.org/?q=node/24744
Keywords: valium driving

12.43.32.254's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.3 (build 01218))

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; FunWebProducts; SIMBAR={23B306DC-B854-4ABB-8D51-A13434680D03}; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; FunWebProducts; GTB6.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; Hotbar 11.0.120.0; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C)

Example Messages Sent From 12.43.32.254

From:
Subject: drah-ega

From:
Subject: Уникальная программа

From:
Subject: Make your gf happy

From:
Subject: Power in your pants

From:
Subject: Replica Purses

From:
Subject: This is not a fly by night company, it has real pa

From:
Subject: Ugg Boots on sale as well as Gucci Versace Chanel

From:
Subject: Valium

From:
Subject: Feel the pleasure

From:
Subject: RE: UK Pharmacy Message 128619

From:
Subject: omega watches

From:
Subject: Dear angelocpoutre@mail.disch-gmbh.de 73% 0FF on P

From:
Subject: User andantetaus gets 70% off. Transverse

From:
Subject: Hey deirdre.c.wenz, sale time. EAS

Example User Names Used By 12.43.32.254

User-name: ndra_t_bear

User-name: ndra100

0 comment(s) - Comment on this IP

Page generated on: February 11 2012 10:33:09 PM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot