IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

85.18.95.71

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Italy

First Received From	approximately 5 years, 2 months, 5 weeks ago
Last Received From	within 1 year, 3 months, 1 week
Number Received	548 email(s) sent from this IP

Dictionary Attacks	15 email(s) sent from this IP
First Received From	approximately 4 years, 6 months, 3 weeks ago
Last Received From	within 1 year, 4 months, 1 week

Associated Harvesters
24.132.43.7 \| H
62.101.126.215 \| HSD
64.56.65.65 \| H
69.64.73.84 \| H
70.50.189.25 \| H
70.50.189.173 \| H
74.12.55.68 \| H
74.12.56.183 \| H
77.162.98.157 \| H
85.18.14.41 \| HSD
85.18.201.175 \| HSD
87.210.66.85 \| H
196.206.200.194 \| HSD
196.217.152.205 \| HSD
208.66.195.7 \| H
213.140.19.120 \| HSD
213.140.22.70 \| HSD
89.97.102.244 \| HS
213.140.17.106 \| HSD
216.37.217.29 \| H
62.162.245.250 \| H
208.66.195.6 \| H
69.64.73.123 \| H
208.66.195.2 \| H
208.101.44.3 \| H
89.220.119.199 \| H
200.104.55.190 \| H
83.103.39.121 \| HSD
91.21.82.81 \| H
79.114.84.44 \| H
89.143.11.210 \| HS
200.84.69.103 \| H
93.45.236.71 \| H
74.12.61.83 \| H
207.112.113.14 \| H
74.12.51.129 \| H
74.12.46.174 \| HR
65.92.122.214 \| H
64.231.139.240 \| H
207.112.69.210 \| H
74.12.54.158 \| H
207.150.196.55 \| HS
66.235.180.7 \| HS
65.93.203.49 \| H
74.12.46.127 \| H
74.12.42.240 \| H
64.231.231.9 \| H
195.229.236.245 \| HC
69.77.186.118 \| H
115.124.113.134 \| HS
207.150.196.49 \| HS
207.150.196.54 \| HS
69.46.20.87 \| HS
66.232.125.137 \| HS
115.124.113.132 \| HS
207.182.133.106 \| HSD
209.160.72.139 \| HS
66.232.123.38 \| HS
66.232.101.78 \| HS
207.150.196.50 \| HS
207.150.196.52 \| HS
174.142.104.81 \| HS
173.45.74.234 \| HS
195.229.236.247 \| HC
209.160.64.124 \| HS
201.217.157.113 \| H
207.150.196.53 \| HS
209.160.64.102 \| HSD
115.124.113.133 \| HS
207.150.194.26 \| HS
207.150.196.56 \| HS
195.229.242.53 \| HCR
115.124.113.135 \| HS
76.108.224.221 \| H
74.53.249.34 \| HW

IPs In The Neighborhood
85.18.94.106
85.18.94.108
85.18.94.123 \| S
85.18.94.128
85.18.94.136
85.18.94.140 \| S
85.18.94.146 \| S
85.18.94.150 \| S
85.18.94.152 \| SD
85.18.94.162 \| S
85.18.94.173 \| S
85.18.94.178 \| SD
85.18.94.211
85.18.94.221 \| W
85.18.95.5
85.18.95.21
85.18.95.64 \| S
85.18.95.65 \| S
85.18.95.66 \| S
85.18.95.67 \| S
85.18.95.72 \| SD
85.18.95.73 \| SD
85.18.95.74 \| SD
85.18.95.78
85.18.95.80 \| SD
85.18.95.81 \| SD
85.18.95.82 \| SD
85.18.95.132
85.18.95.157 \| W
85.18.96.13

Example Messages Sent From 85.18.95.71

From:
Subject: none/blank

From:
Subject: Transfer of Funds:

Example User Names Used By 85.18.95.71

User-name: forde

User-name: info

User-name: lteria

User-name: preiss

User-name: roemmich

User-name: lscandis_t_tarwater

User-name: rfbranden_cardona

User-name: kellyturnball

User-name: neha

User-name: yvclevenger09

User-name: ayanadyeung

User-name: caryl_faulcon

4 comment(s) - Comment on this IP | Collapse All

H.User7043 commented...

419 SpamScam from above IP:

From: Head of Account Department (callegaro.gaetano@fastwebnet.it)
Greetings from Japan,

I have a bussiness proposal of $40 million USD for you.If intrested Contact me for more information

Mr. Tomo Sand Nori
September 18 2010 07:58 PM

S.Alvarez commented...

85.18.95.71Scamm Estafa Software Malicioso Adware ySpyware
De: MICROSOFT AOL AWARD NOTIFICATION UNIT
Para: telapongodoblada@hotmail.com
Enviado: viernes, 25 de junio, 2010 12:00:23
Asunto: OFFICIAL NOTIFICATION FROM MICROSOFT.
June 25 2010 05:03 AM

F.Tonna commented...

I'm still searching to give an identity to 85.18.95.71.
At the present moment I've not yet found something related but after antispyware scan we found three spyware which the route is associate to spam messages from "forde".
November 14 2007 03:31 AM

F.Tonna commented...

This IP had blocked several time our outgoing messages to one of our t-online.de mail customer. For Privacy reasons, the name of our customer is hidden by REMOVED.
Maybe this IP address attack them precedently and they now filter the mail but we don't understand why our actual IP is associate to the 85.18.95.71.
At the present we don't know how resolve the problem and asked to provider a solution.

This is the cut lines of the received automated reply to our server.

The automated reply we received from administrator was:

- These recipients of your message have been processed by the mail server:
REMOVED@t-online.de; Failed; 5.1.2 (bad destination system address)
Remote MTA mx00.t-online.de: network error
- SMTP protocol diagnostic: 554 IP:85.18.95.71 - A problem occurred. (Ask your postmaster for help or to contact tosa@rx.t-online.de to clarify.)
November 14 2007 03:14 AM

Page generated on: February 11 2012 08:45:46 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot