IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

60.12.190.58

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	China (Beijing)
Spider First Seen	approximately 2 years, 10 months, 1 week ago
Spider Last Seen	within 2 years, 4 months, 3 weeks
Spider Sightings	97 visit(s)
User-Agents	seen with 30 user-agent(s)

First Received From	approximately 4 years, 1 month, 2 weeks ago
Last Received From	within 2 years, 4 months, 3 weeks
Number Received	4,340 email(s) sent from this IP

First Post On	approximately 2 years, 10 months, 1 week ago
Last Post On	within 2 years, 4 months, 3 weeks
Form Posts	40 web post submission(s) sent from this IP

Dictionary Attacks	575 email(s) sent from this IP
First Received From	approximately 2 years, 6 months, 5 weeks ago
Last Received From	within 2 years, 4 months, 3 weeks

Associated Harvesters
65.4.52.2 \| H
70.87.196.242 \| H
84.149.125.150 \| H
86.13.4.228 \| H
89.244.115.215 \| H
200.66.11.122 \| H
201.79.93.166 \| HS
208.66.195.4 \| H
208.66.195.5 \| H
208.66.195.10 \| H
221.191.98.148 \| H
61.231.69.112 \| H
80.253.81.155 \| H
80.253.80.110 \| H
80.253.80.100 \| H
80.253.81.49 \| H
80.253.81.182 \| H
80.253.81.190 \| H
80.253.81.195 \| H
80.253.80.61 \| H
80.253.81.95 \| H
80.253.80.75 \| H
80.253.81.92 \| H
80.253.81.207 \| H
80.253.81.183 \| H
80.253.81.141 \| H
80.253.81.215 \| H
80.253.81.147 \| H
80.253.81.21 \| H
80.253.81.109 \| H
80.253.80.94 \| H
80.253.80.95 \| H
80.253.81.76 \| H
80.253.81.90 \| H
80.253.81.201 \| H
80.253.81.145 \| H
80.253.80.66 \| H
80.253.80.85 \| H
80.253.80.77 \| H
80.253.81.149 \| H
80.253.81.218 \| H
80.253.81.153 \| H
80.253.81.113 \| H
80.253.81.31 \| H
122.21.233.9 \| H
80.253.80.105 \| H
221.189.177.41 \| H
80.253.81.142 \| H
66.96.216.133 \| HS
80.253.80.87 \| H
80.253.81.204 \| H
80.253.81.137 \| H
80.253.81.199 \| H
80.253.81.193 \| H
80.253.80.79 \| H
80.253.81.184 \| H
80.253.80.56 \| H
58.93.60.43 \| H
80.253.81.128 \| H
80.253.81.17 \| H
80.253.80.121 \| H
80.253.80.70 \| H
80.253.80.63 \| H
80.253.80.122 \| H
80.253.81.34 \| H
80.253.81.115 \| H
80.253.80.82 \| H
80.253.81.68 \| H
80.253.81.89 \| H
80.253.81.164 \| H
61.224.174.46 \| H
80.253.81.97 \| H
80.253.81.75 \| H
80.253.81.52 \| H
80.253.81.11 \| H

IPs In The Neighborhood
60.12.189.168
60.12.189.169
60.12.189.172
60.12.190.26
60.12.190.74 \| S
60.12.190.108 \| C
60.12.190.109 \| C
60.12.190.170
60.12.190.174 \| SD
60.12.190.202 \| S
60.12.190.206 \| SD
60.12.190.218 \| S
60.12.190.222 \| S
60.12.191.19 \| S

Sample Spam URLs & Keywords Posted From 60.12.190.58

Domain: www.vfxtalk.com
URL: http://www.vfxtalk.com/forum/member.php?u=23825
Keywords: flushed face with amoxil

Domain: www.ironruby.net
URL: http://www.ironruby.net/User:Bontril
Keywords: bontril no prescription cod

Domain: boards.grizzliesonline.com
URL: http://boards.grizzliesonline.com/index.php?showuser=9118
Keywords: atarax pliva

Domain: www.nissansilvia.com
URL: http://www.nissansilvia.com/forums/index.php?showuser=65771
Keywords: order metrogel vaginal

Domain: www.vfxtalk.com
URL: http://www.vfxtalk.com/forum/member.php?u=23825
Keywords: order metrogel vaginal

Domain: www.ironruby.net
URL: http://www.ironruby.net/User:Bontril
Keywords: order metrogel vaginal

Domain: boards.grizzliesonline.com
URL: http://boards.grizzliesonline.com/index.php?showuser=9118
Keywords: order metrogel vaginal

Domain: www.nissansilvia.com
URL: http://www.nissansilvia.com/forums/index.php?showuser=65771
Keywords: order metrogel vaginal

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-flat-iron.htm
Keywords: global beauty flat iron

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-hair-iron.htm
Keywords: global beauty hair iron

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-hair-straightener.htm
Keywords: global beauty hair straightener

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-hair-straighteners.htm
Keywords: global beauty hair straighteners

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-flat-iron.html
Keywords: global beauty hair straighteners

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-hair-iron.html
Keywords: global beauty hair straighteners

Domain: victoriaga.org
URL: http://victoriaga.org/cp/beauty/global-beauty-hair-straightener.html
Keywords: global beauty hair straighteners

60.12.190.58's User Agent Strings

Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)

Mozilla/4.0 (compatible; MSIE 5.01; Windows 98; Alexa Toolbar)

Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)

Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; FunWebProducts; SV1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]

Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; .NET CLR 1.1.4322; Alexa Toolbar)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Q312461; AHCIE6.0.2800; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; SV1; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MSOCD; AtHome020; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SIMBAR={2D4FB9B1-C26E-41B5-B562-E9C9A4B1E4D3}; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1; MEGAUPLOAD 2.0)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1; .NET CLR 1.0.3705; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC 3.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Creative ZENcast v1.02.10)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 5.0 (build 02067); MRSPUTNIK 2, 0, 0, 17 SW; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; MS-RTC LM 8; InfoPath.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; WinuE v6; .NET CLR 2.0.50727; WinuE v6)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; yplus 5.1.04b)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Orange 7.4 ; NaviWoo1.1; .NET CLR 2.0.50727; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; SIMBAR={B40D6357-99BC-433F-ACCC-BCFB553AC79B}; FunWebProducts)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; SIMBAR Enabled; SIMBAR=0; SIMBAR={3EECB6CF-CA88-47dd-9723-1E76662A537C}; FunWebProducts; InfoPath.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Sky Broadband; SIMBAR={B89E12BA-A2B0-4F95-BCCF-8CC2E0EDEC5D}; FunWebProducts)

Example Messages Sent From 60.12.190.58

From:
Subject: We s(elling ROLE>

From:
Subject: We sellin$g ROLE>

From:
Subject: Rolex -200$ Omega 200- and others 76

From:
Subject: SOLDOUT-We s%elling ROLE>

From:
Subject: SOLDOUT-We sell*ing ROLE>

From:
Subject: SOLDOUT-We s(elling ROLE>

From:
Subject: SOLDOUT-We selli!ng ROLE>

From:
Subject: SOLDOUT-Rolex -200$ Omega 200- and others 68

From:
Subject: Fashionable watches at pr\ices that are not fright

From:
Subject: We offer watches that you are bound to like. 0g

From:
Subject: SOLDOUT-Rolex -200$ Omega 200- and others kwk

From:
Subject: Rolex -200$ Omega 200- and others 0wbq

From:
Subject: Designer watches at very democratic pric(es. rq

From:
Subject: Fashionable watches at price*s that are not fright

Example User Names Used By 60.12.190.58

User-name: 0111925611

User-name: 016c9bb

User-name: 04yeg

User-name: 1224796611

User-name: 14c369.acffd24e1

User-name: 3dsimon

User-name: 4113857201

User-name: 452a4b68.6040708

User-name: 47099c29.2010003

User-name: 47099d70.3080206

User-name: 4715740a.4040304

User-name: a

User-name: aandjfafdj

User-name: ab

User-name: abindjfafdj

User-name: abjndjfafdj

User-name: ablndjfafdj

User-name: abmndjfafdj

User-name: abondjfafdj

User-name: abrndjfafdj

User-name: abvndjfafdj

User-name: abyndjfafdj

User-name: accounting

User-name: accounts

User-name: acnadjfafdj

User-name: acnddjfafdj

User-name: acnhdjfafdj

User-name: acnidjfafdj

User-name: acnjdjfafdj

User-name: acnrdjfafdj

0 comment(s) - Comment on this IP

Page generated on: February 12 2012 12:06:32 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot