IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

81.91.228.78

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester, mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Benin

Harvester First Seen approximately 4 years, 1 month, 2 weeks ago
Harvester Last Seen within 10 months, 3 weeks
Harvester Sightings 61 visit(s) to 2 honey pot(s)
Harvester Results 0.311 messages per visit
19 message(s) resulting from harvests
- First: approximately 4 years, 1 month, 2 weeks ago
- Last: approximately 3 years, 2 months, 3 weeks ago
32 email address(es) harvested
- First: approximately 4 years, 1 month, 2 weeks ago
- Last: Sun, 16 Nov 2008 18:59:00 -0800
Time From Harvest
To First Spam
Fastest: 5 hours, 57 mins, 3 secs
Slowest: 1 day, 21 hours, 22 mins, 47 secs
Average: 9 hours, 37 mins, 37 secs
Std Dev: 10 hours, 45 mins, 15 secs

First Received From approximately 4 years, 2 months, 1 week ago
Last Received From within 9 months, 1 week
Number Received 4,332 email(s) sent from this IP

Dictionary Attacks 1,029 email(s) sent from this IP
First Received From approximately 4 years, 2 weeks ago
Last Received From within 9 months, 1 week

Associated Mail Servers
61.135.132.132 | SD
61.135.132.148 | S
61.135.132.204 | SD
72.14.204.168 | Se
72.14.204.170 | Se
72.14.204.228 | Se
72.14.204.236 | Se
Associated Harvesters
65.185.106.54 | H
89.106.251.240 | HSC
125.193.39.22 | H
87.210.12.92 | HS
213.113.227.25 | H
12.219.215.19 | H
24.10.171.26 | HS
24.201.114.99 | H
58.179.152.57 | H
62.193.27.250 | H
62.194.12.173 | H
62.194.16.131 | H
66.98.184.81 | H
66.148.67.105 | H
66.246.252.117 | HSD
67.19.250.26 | H
69.41.173.93 | H
69.50.209.150 | H
69.64.73.123 | H
69.157.27.143 | H
70.84.55.114 | HC
70.85.113.242 | H
70.87.196.242 | H
71.94.23.161 | HSDC
74.53.249.34 | HW
74.86.209.74 | H
74.124.192.3 | H
74.222.11.75 | H
75.125.18.178 | H
75.125.47.162 | HSDW
75.125.52.66 | H
75.125.52.146 | H
75.125.52.162 | H
80.25.160.173 | HS
80.58.205.49 | HC
80.81.208.82 | HSD
81.71.80.60 | H
81.89.68.4 | HS
82.101.251.81 | H
83.36.136.102 | H
83.43.91.107 | H
83.149.43.23 | HSD
83.167.112.199 | H
85.120.152.208 | H
87.6.56.118 | H
87.118.98.62 | H
87.123.182.93 | HS
88.103.219.174 | HS
88.230.157.94 | HS
89.80.201.46 | HS
89.139.201.120 | H
90.37.73.61 | H
92.112.27.11 | HSD
116.121.94.11 | H
121.216.124.109 | H
129.59.195.180 | HC
142.217.181.199 | HS
157.157.15.26 | HS
196.206.82.92 | HSD
201.79.93.166 | HS
202.156.12.10 | HC
203.136.201.40 | H
208.53.138.64 | H
208.53.147.136 | H
208.53.147.137 | H
208.65.60.105 | H
208.65.60.145 | H
208.66.195.2 | H
208.66.195.4 | H
208.66.195.6 | H
208.66.195.7 | H
208.66.195.10 | H
208.66.195.11 | H
209.11.244.162 | H
209.160.65.42 | H
IPs In The Neighborhood
81.91.227.195 | H
81.91.227.210 | SD
81.91.227.218 | S
81.91.228.4 | HSDR
81.91.228.5
81.91.228.6 | SD
81.91.228.7 | SD
81.91.228.10
81.91.228.12 | SD
81.91.228.15 | SD
81.91.228.16 | SD
81.91.228.18 | S
81.91.228.29
81.91.228.30 | SD
81.91.228.33 | S
81.91.228.35
81.91.228.36 | SD
81.91.228.42
81.91.228.43
81.91.228.45
81.91.228.46 | SD
81.91.228.47 | S
81.91.228.49 | S
81.91.228.50 | SD
81.91.228.51 | SD
81.91.228.52
81.91.228.53 | SD
81.91.228.57 | S
81.91.228.58 | SD
81.91.228.59 | SD
81.91.228.60
81.91.228.61
81.91.228.66 | SD
81.91.228.67 | SD
81.91.228.68 | SD
81.91.228.69 | SD
81.91.228.70 | S
81.91.228.71 | SD
81.91.228.72 | SD
81.91.228.73 | S
81.91.228.74 | SD
81.91.228.75 | S
81.91.228.76 | SD
81.91.228.77 | SD
81.91.228.97 | S
81.91.228.98
81.91.228.99
81.91.228.100 | SD
81.91.228.105 | SD
81.91.228.110 | SD
81.91.228.112 | SD
81.91.228.113 | S
81.91.228.115 | SD
81.91.228.116 | SD
81.91.228.117 | S
81.91.228.122
81.91.228.125 | HS
81.91.228.131 | HSD
81.91.228.138 | SD
81.91.228.139
81.91.228.154 | SD
81.91.228.226 | SD
81.91.229.3
81.91.229.5 | SD
81.91.229.6 | SD
81.91.229.11
81.91.229.12 | S
81.91.229.13 | S
81.91.229.14
81.91.229.20 | S
81.91.229.21 | SD
81.91.229.22 | S
81.91.229.25
81.91.229.28
81.91.229.31
81.91.229.32
81.91.229.33 | S
81.91.229.36
81.91.229.38 | S
81.91.229.40 | S
81.91.229.42 | C
81.91.229.43 | SD
81.91.229.46 | SD
81.91.228.78's User Agent Strings
none/blank
Missouri College Browse
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98) XX
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB0.0; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB5)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB6)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; InfoPath.1; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB0.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6.4; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; InfoPath.2; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1.4322; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; HPNTDF; .NET4.0C)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.0.1) Gecko/2008070208 Firefox/3.0.1
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090616 Firefox/3.5
Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11 ( .NET CLR 3.5.30729; .NET4.0E)
Example Messages Sent From 81.91.228.78
From:
Subject: Р А C С Ы Л К И
From:
Subject: Интернет технологии дв
From:
Subject: Play and we'll pay
From:
Subject: Этo письмо не прocтo таk у Ва
From:
Subject: Распродажа карликов
From:
Subject: Распродажа карликов
From:
Subject: Распродажа карликов
From:
Subject: Уменьшение расходов на выплат
From:
Subject: п
From:
Subject: Как снизить расходы и увелич
From:
Subject: =?windows-1251?B?xfHy/CDy8Ogg5+Ds5ffg8uXr/O379SDq7=?=
From:
Subject: Есть три замечательных коллек
From:
Subject: Wi
From:
Subject: Fu
From:
Subject: Проведение проверок налоговым
From:
Subject: Проведение проверок внебюджет
From:
Subject: Самый любимый подарок - цвету
Example User Names Used By 81.91.228.78
User-name: 345807576142.645539635777
User-name: 3cdoug.merrett
User-name: 45302ead.4050601
User-name: 50leontine.maasch
User-name: 664
User-name: 878875766386.866554345063
User-name: ab
User-name: abel
User-name: abell.mion
User-name: acptwi
User-name: a_dudley
User-name: ajmndjtfafdj
User-name: ajrndjnfafdj
User-name: anagan01
User-name: antaneiswoger
User-name: ascheman
User-name: asmiluminada_o_melick
User-name: atuarynumber2
User-name: bartonwprvitt
User-name: b.hadanyelleprummage
User-name: bigdog3939
User-name: billfnlf
User-name: bimalec187
User-name: blady
User-name: blakesmtpjames.blake
User-name: bofx
User-name: bommer
User-name: bowenn
User-name: brake
User-name: buh
H.User7043 commented...
419 SpamScam from above IP, using 3 YAHOO! IP's as relays:

CONTACT THE DIPLOMATIC AGENT
Mr. Victor Adams
EMAIL;(mr.victoradams@yahoo.com.hk)
November 09 2010 03:25 PM

P.TINLOT commented...
Paulin Marc Agaton and Jean Becker use this IP to negociate gold dush from West-Africa (Benin). They use this transport: 'Ligne-Express' wich doesn't exist. Gold never arrives! If you ask Google: IP 81.91.228.78, you will see a lot of announcements about cars, motors, tractors, cigarettes, dogs... to sell or give with different mail adresses and names. Here are the mail asresses of these two swindlers, especially for gold or cupper:
paulin7@yahoo.fr, 7paulin@myway.com, jeanbecker11@gmail.com and their tel numbers: for Paulin: 0022993180838, 0022993197590 and for 'Ligne-Express': 0022993197590.
October 09 2008 05:47 AM

Page generated on: February 11 2012 11:53:20 AM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email