IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

24.113.240.217

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location United States

Harvester First Seen approximately 4 years, 2 weeks ago
Harvester Last Seen within 3 years, 3 weeks
Harvester Sightings 15 visit(s) to 11 honey pot(s)
Harvester Results 0.333 messages per visit
5 message(s) resulting from harvests
- First: approximately 3 years, 11 months, 3 weeks ago
- Last: approximately 2 years, 7 months, 3 weeks ago
29 email address(es) harvested
- First: approximately 4 years, 2 weeks ago
- Last: Tue, 13 Jan 2009 22:53:08 -0800
Time From Harvest
To First Spam
Fastest: 1 day, 4 hours, 32 mins, 59 secs
Slowest: 2 days, 18 hours, 1 min, 13 secs
Average: 1 day, 23 hours, 17 mins, 6 secs
Std Dev: 1 day, 2 hours, 29 mins, 45 secs

Associated Mail Servers
76.14.96.71 | S
IPs In The Neighborhood
24.113.240.2
24.113.240.5 | S
24.113.240.32 | S
24.113.240.56 | S
24.113.240.75
24.113.240.82 | S
24.113.240.88 | S
24.113.240.103
24.113.240.132 | S
24.113.240.140 | S
24.113.240.155 | S
24.113.240.156
24.113.240.157
24.113.240.162
24.113.240.163 | S
24.113.240.169
24.113.240.192
24.113.240.222
24.113.240.245 | SD
24.113.240.250
24.113.241.24 | S
24.113.241.35 | S
24.113.241.36
24.113.241.68
24.113.241.71 | S
24.113.241.74
24.113.241.91 | S
24.113.241.112
24.113.241.122
24.113.241.130 | SD
24.113.241.138 | S
24.113.241.145
24.113.240.217's User Agent Strings
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
I.Ellis commented...
Came in at home page, fetched all links from the homepage and a few more, then went fishing with its own made-up requests (not from links) such as:

"GET /addentry.php HTTP/1.1" 404
"GET /admin.php HTTP/1.1" 404
"GET /index.php?entry=10 HTTP/1.1" 404
"GET /comment.php?gb_id=407 HTTP/1.1" 404
"GET /comment.php?gb_id=406 HTTP/1.1" 404
"GET /comment.php?gb_id=405 HTTP/1.1" 404
"GET /comment.php?gb_id=404 HTTP/1.1" 404
"GET /comment.php?gb_id=403 HTTP/1.1" 404
"GET /comment.php?gb_id=402 HTTP/1.1" 404
"GET /comment.php?gb_id=401 HTTP/1.1" 404
"GET /comment.php?gb_id=400 HTTP/1.1" 404
"GET /comment.php?gb_id=399 HTTP/1.1" 404
"GET /comment.php?gb_id=398 HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID} HTTP/1.1" 404
"GET /{Amazon Account ID}/cart/{Amazon ID} HTTP/1.1" 404
"GET /{Amazon Account ID}/images/0198614438/{Amazon ID} HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID}?%5Fencoding=UTF8&node=8 HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID}?%5Fencoding=UTF8&node=64 HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID}?%5Fencoding=UTF8&node=99 HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID}?%5Fencoding=UTF8&node=63 HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID}?%5Fencoding=UTF8&node=9 HTTP/1.1" 404
"GET /{Amazon Account ID}/{Amazon ID}?%5Fencoding=UTF8&node=125 HTTP/1.1" 404

The real requests used the actual {Amazon ID} and {Amazon Account ID} gleaned from another link.

This pattern of fishing requests is new to me.
July 26 2008 02:34 PM

Page generated on: February 15 2012 02:20:40 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email