IP Address Inspector

89.114.135.152

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester, mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Romania

Harvester First Seen	approximately 4 years, 2 months, 1 week ago
Harvester Last Seen	within 1 year, 8 months, 3 weeks
Harvester Sightings	106 visit(s) to 12 honey pot(s)
Harvester Results	0.962 messages per visit 102 message(s) resulting from harvests - First: approximately 4 years, 1 month, 1 week ago - Last: approximately 1 year, 1 month, 4 weeks ago 258 email address(es) harvested - First: approximately 4 years, 2 months, 1 week ago - Last: Sat, 12 Apr 2008 09:43:40 -0700
Time From Harvest To First Spam	Fastest: 1 hour, 6 mins, 30 secs Slowest: 2 weeks, 6 days, 14 hours, 42 mins, 28 secs Average: 2 days, 21 hours, 13 mins, 2 secs Std Dev: 6 days, 16 hours, 44 mins, 28 secs

First Received From	approximately 4 years, 1 month, 1 week ago
Last Received From	within 2 months, 1 week
Number Received	625 email(s) sent from this IP

Dictionary Attacks	30 email(s) sent from this IP
First Received From	approximately 1 year, 5 months, 4 weeks ago
Last Received From	within 1 year, 3 months, 1 week

Associated Mail Servers
66.154.97.188 \| S
86.109.167.14
86.121.210.195 \| HS
89.114.135.152 \| HSD
217.10.193.161 \| S
217.10.193.162 \| S

Associated Harvesters
89.114.135.152 \| HSD
86.121.210.195 \| HS
70.85.113.242 \| H
222.76.215.122 \| H
58.22.131.13 \| H
58.23.131.174 \| H
58.22.133.197 \| H
59.60.154.186 \| H
83.103.170.93 \| H
125.116.168.105 \| HSD
125.116.168.183 \| HS
59.60.154.2 \| H
125.116.168.246 \| HS
222.47.76.235 \| HSD
125.116.168.45 \| HS
222.76.215.121 \| H
89.136.88.17 \| H

IPs In The Neighborhood
89.114.135.4 \| S
89.114.135.33
89.114.135.46 \| SD
89.114.135.47 \| S
89.114.135.55
89.114.135.91 \| S
89.114.135.130 \| S
89.114.135.132 \| S
89.114.135.135 \| S
89.114.135.137 \| S
89.114.135.138
89.114.135.139 \| SD
89.114.135.140 \| S
89.114.135.144 \| S
89.114.135.146 \| SD
89.114.135.147 \| S
89.114.135.150 \| SD
89.114.135.153 \| S
89.114.135.154
89.114.135.157 \| S
89.114.135.158 \| SD
89.114.135.162 \| SD
89.114.135.164
89.114.135.165 \| SD
89.114.135.167 \| S
89.114.135.168 \| S
89.114.135.171 \| SD
89.114.135.173
89.114.135.174 \| S
89.114.135.176
89.114.135.180 \| S
89.114.135.183
89.114.135.187 \| SD
89.114.135.197 \| SD
89.114.135.200 \| S
89.114.135.204 \| SD
89.114.135.206 \| SD
89.114.136.12 \| S
89.114.136.14
89.114.136.22
89.114.136.25
89.114.136.28
89.114.136.29
89.114.136.32 \| SD
89.114.136.45 \| S
89.114.136.57 \| S
89.114.136.100 \| SD

89.114.135.152's User Agent Strings

Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)

Mozilla/4.0 (compatible ; MSIE 6.0; Windows NT 5.1)

Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html)

Example Messages Sent From 89.114.135.152

From:
Subject: Rochie de noapte DANA la 139 ron. Din satin, racor

From:
Subject: Costume de baie diverse. Hai la mare.

From:
Subject: Preturi bomba. 5 produse / zi la megareducere

From:
Subject: Reduceri bomba. 5 produse / zi la mega-reducere

From:
Subject: Saluri si esarfe de sezon la cel mai bun pret.

From:
Subject: Noile modele de lenjerie intima de lux | Modele su

From:
Subject: Caciuli de dama. Prima oara in Romania, modele asa

From:
Subject: Caciuli de dama modele 2011-2012.

From:
Subject: Super idei de cadouri. Caciuli si esarfe modele 20

From:
Subject: Super idei de cadouri. Caciuli si esarfe superbe,

Example User Names Used By 89.114.135.152

User-name: gia_gardecki

User-name: thutrisch

User-name: marketta_e_buco

User-name: winnifredkcreaser

User-name: eloquentrobbie04

User-name: cinda.f.kepani

User-name: dylan.v.tennyson

0 comment(s) - Comment on this IP

Page generated on: February 16 2012 11:34:17 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot