IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

212.109.96.1

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Turkey (Istanbul)
Spider First Seen	approximately 3 years, 7 months, 3 weeks ago
Spider Last Seen	within 1 year, 6 months, 4 weeks
Spider Sightings	6 visit(s)
User-Agents	seen with 5 user-agent(s)

First Received From	approximately 3 years, 11 months, 3 weeks ago
Last Received From	within 1 year, 4 months, 3 weeks
Number Received	682 email(s) sent from this IP

Dictionary Attacks	54 email(s) sent from this IP
First Received From	approximately 3 years, 10 months, 5 weeks ago
Last Received From	within 1 year, 4 months, 4 weeks

Associated Harvesters
12.217.206.210 \| HS
24.132.155.14 \| HS
41.221.19.229 \| HSD
61.216.81.66 \| HS
62.57.131.82 \| HSD
62.105.144.120 \| HS
62.211.247.21 \| HS
66.96.216.133 \| HS
68.15.184.179 \| HSD
68.178.242.126 \| H
69.109.188.200 \| H
70.179.126.5 \| H
71.103.160.182 \| HS
72.95.182.10 \| H
74.56.124.206 \| H
74.184.237.209 \| H
76.203.4.93 \| H
77.99.167.190 \| HS
77.163.118.50 \| H
77.198.225.148 \| HS
77.216.178.157 \| H
77.225.137.112 \| HS
78.12.199.4 \| HS
78.47.109.106 \| H
78.48.183.241 \| HS
78.53.153.60 \| HS
78.114.16.188 \| H
79.0.223.245 \| H
79.12.243.194 \| H
79.16.93.187 \| HS
79.18.36.24 \| H
79.177.152.32 \| HS
80.25.109.232 \| HS
80.37.182.187 \| HS
80.38.52.105 \| HS
80.48.225.2 \| HSD
80.171.50.59 \| HS
81.32.183.236 \| H
81.34.223.251 \| H
81.44.2.64 \| HS
81.170.116.198 \| HS
81.172.108.208 \| HS
81.190.64.108 \| HS
81.245.140.200 \| H
81.248.53.113 \| HS
82.53.112.144 \| H
82.66.16.197 \| HS
82.83.39.195 \| H
82.159.2.80 \| HS
82.224.45.113 \| H
82.224.170.110 \| H
82.230.47.76 \| HS
82.235.32.132 \| H
82.235.182.91 \| HS
82.244.102.120 \| H
82.249.87.205 \| H
82.254.32.180 \| H
83.23.165.249 \| HS
83.24.233.251 \| HS
83.33.204.181 \| H
83.35.252.80 \| H
83.42.169.38 \| H
83.49.27.210 \| HS
83.57.24.149 \| HS
83.58.132.226 \| HS
83.171.178.228 \| H
83.213.134.171 \| HSD
83.227.162.228 \| H
83.230.172.136 \| HS
84.58.151.92 \| HS
84.76.211.117 \| HS
84.77.21.210 \| HS
84.81.181.232 \| H
84.120.89.119 \| H
84.122.11.194 \| HS

IPs In The Neighborhood
212.109.95.78
212.109.95.103
212.109.95.204
212.109.95.239
212.109.96.38
212.109.96.42
212.109.96.53 \| S
212.109.96.96

212.109.96.1's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; iOpus-I-M; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; MS-RTC LM 8)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3; MS-RTC LM 8; .NET CLR 1.1.4322)

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7

Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4

Example Messages Sent From 212.109.96.1

From:
Subject: michael.o.swallows@venus.syfer.net V|AGRA � Offici

From:
Subject: optimisticbarrie69@mail.dont-spam.us V|AGRA � Offi

From:
Subject: picturequickest2@hp2.kmkenterprises.net V|AGRA � O

From:
Subject: Order anti-ed without prescription

From:
Subject: Sex Meds with guarantee

From:
Subject: Prescription-free Sex Meds

From:
Subject: Male meds DeLuxe

From:
Subject: DeLuxe Erection Meds

From:
Subject: Viagra-eStore, all rights reserved

From:
Subject: Legitimate ViagraShop

From:
Subject: Web-ordering ofViagra

From:
Subject: Super ErectionDrugs

From:
Subject: TopBonerPills

From:
Subject: Reliable Viagra-store

From:
Subject: TopPfizer remedies

From:
Subject: BestBonerMeds

From:
Subject: Meds for YourBoner

From:
Subject: drew_o_buysse@imac.dnsalias.net September 62% OFF.

From:
Subject: Client tranquiltonda, 75% off. is

From:
Subject: Client olga.j.bucio, 75% off. Justice

From:
Subject: Client humorousstele, 75% off. considered v was

Example User Names Used By 212.109.96.1

User-name: bgx

User-name: buhgalter

User-name: bvxru

User-name: catchthismail

User-name: constable

User-name: dir

User-name: dozun

User-name: dxci

User-name: fabrika

User-name: fargnoli

User-name: finance

User-name: guyton

User-name: haris

User-name: helloitmenice

User-name: hennard

User-name: iamjustsendingthisleter

User-name: info

User-name: kbrndjfaqfdtj

User-name: lajirajo

User-name: lajiskak

User-name: lajiskak1955

User-name: lajiskak1997

User-name: lajisuku1992

User-name: laz

User-name: man

User-name: nullpointern

User-name: nullpointernn

User-name: nullpointerp

User-name: opwzg

User-name: petgord34truew

0 comment(s) - Comment on this IP

Page generated on: February 11 2012 11:43:16 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot