IP Address Inspector
| ATTENTION |
|
74.124.192.3 
The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.
Lookup IP In: Domain Tools | SpamHaus | OpenRBL | Spamcop | SenderBase | Google Groups | Google
| Geographic Location |
United States
|
| Harvester First Seen | approximately 2 years, 6 months, 1 week ago |
| Harvester Last Seen | within 2 years, 1 week |
| Harvester Sightings | 857 visit(s) to 34 honey pot(s) |
| Harvester Results |
8258.982 messages per visit 7,077,948 message(s) resulting from harvests - First: approximately 2 years, 4 months, 4 weeks ago - Last: approximately 1 week ago 2,768 harvested address(es) have seen message(s) - First: approximately 2 years, 6 months, 1 week ago - Last: Tue, 20 Nov 2007 14:01:53 -0500 |
| Time From Harvest To First Spam |
Fastest: 1 day, 13 hours, 38 mins, 56 secs Slowest: 3 months, 2 weeks, 10 hours, 51 mins, 9 secs Average: 2 weeks, 5 days, 11 hours, 14 mins, 58 secs Std Dev: 1 week, 6 days, 19 hours, 17 mins, 7 secs |
|
1 comment(s) - Comment on this IP | Collapse All
|
|
P.Chambers commented...
I am currently tracking a harvester at ip 74.124.192.3. Immediately after the 10:45 pm incident below, spoofed email were sent using a variety of non-existent email addresses from a spoof file we created 2 weeks ago. Over 1000 emails were sent out using the spoof emails from public internet computers such as libraries, internet cafes, etc who were acting as hosts for the viral.
The emails were advertising software products and included pornograghic text. We have previously been tracking this for over 2 weeks, setting up bait to trap the harvester. Below is more specifics about todays activities. Please note This ip is a co-located server, hosted by Corporate Colocation, Inc.. Their customer, who uses the server based at that ip address is ksjs.org. There contact info is ecdabek@ksjs.org. User Agent: thrdnycwnne cmwswVead remote address: 74.124.192.3 Remote Host: 74.124.192.3 6/28/2007 2:45 am (EST) User Agent: seskfjrbsmhklhfxfinaedk snghrf remote address: 74.124.192.3 6/27/2007 10:45 pm (EST) Remote Host: 74.124.192.3 User Agent: m4doocmmcuwapgqn uiqiulemql remote address: 74.124.192.3 Remote Host: 74.124.192.3 6/28/2007 2:47 pm (EST) User Agent: fqmowwxsf rf cy5rSmSylynxktm remote address: 74.124.192.3 Remote Host: 74.124.192.3 6/27/2007 2:45 AM (est) I have more then the listed above. But 2000 character limit. June 28 2007 03:19 PM |
Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.
Want to keep this IP address off your website? Start taking advantage of http:BL.
If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.
Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Contact Us
Copyright © 2004–09, Unspam Technologies, Inc. All rights reserved.
Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot