IP Address Inspector
The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.
|First Received From||approximately 10 months, 1 week ago|
|Last Received From||within 1 week|
|Number Received||14 email(s) sent from this IP|
|Dictionary Attacks||5 email(s) sent from this IP|
|First Received From||approximately 5 months, 4 weeks ago|
|Last Received From||within 5 months, 1 week|
Got a email from this IP address. Below is the actual email. It actually had a .jpg picture file attached to it of some women so I'm curious if this is the actual person sending the email or just some stock image from the internet.
From: Marina Girl
Hey there!I am not sure what to write in this letter. start by saying that I am addressing a person in the Internet for the very first time. >I'm very worried and shy.Are you single? Are you wishing to find a girl for your life and making a family? I'm yearning for a person who is able to appreciate=
me, protect me and treat me well.! I need a man to share love with!
>You arrested my attention in a wink. I am Marina.
br />I appended my pics to help you remember me.I'm waiting =
for your answer to my letter. Write me asap, please! I could make you hot.I will be hoping to receive your answer.
Content-Type: application/octet-stream; name=PCX-437.jpg
Content-Disposition: attachment; size=65322; filename=PCX-437.jpg
August 07 2015 02:18 PM
April 10 2015 10:42 AM
And last the result of a DNS lookup :
Résolution inverse DNS
L'adresse IP peut être résolue en 126.96.36.199 [FR] out03.smtpout.orange.fr.
Tests de scan de ports
Aucun port ouvert
Tests Blacklist et Whitelist
L'adresse IP est blacklisté dans 1 blacklist
L'adresse IP n'est pas whitelisté
Propriétaire du réseau = MAIL-ESSENTIALS-FRANCE
Réseau = 188.8.131.52 - 184.108.40.206
So it is definitely not an orange adress.
September 16 2013 08:58 AM
Here is the result of a ping command on this IP :
C:\Users\Michel>ping -a 220.127.116.11
Envoi d'une requête 'ping' sur out03.smtpout.orange.fr [18.104.22.168] avec 32 octets de données :
Réponse de 22.214.171.124 : octets=32 temps=231 ms TTL=233
Réponse de 126.96.36.199 : octets=32 temps=199 ms TTL=233
Réponse de 188.8.131.52 : octets=32 temps=226 ms TTL=233
Réponse de 184.108.40.206 : octets=32 temps=223 ms TTL=233
Statistiques Ping pour 220.127.116.11:
Paquets : envoyés = 4, reçus = 4, perdus = 0 (perte 0%),
Durée approximative des boucles en millisecondes :
Minimum = 199ms, Maximum = 231ms, Moyenne = 219ms
Is it a real orange adress or someone is abusing it ?
September 16 2013 08:54 AM
From a couple of days, this IP seems to send emails linking to porn sites to random generated adresses, using my friend Béatrice email as the sender adress. I do not know how to get rid of this and stop them to use this adress (firstname.lastname@example.org) as a sender. This causes me to receive about 15 messages a day from the orange mail server to inform me of undelivered messages.
September 16 2013 08:48 AM