IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

89.122.29.126

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Romania

Harvester First Seen approximately 5 years, 3 months, 2 weeks ago
Harvester Last Seen within 4 years, 3 months, 3 weeks
Harvester Sightings 1,959 visit(s) to 257 honey pot(s)
Harvester Results 108.262 messages per visit
212,085 message(s) resulting from harvests
- First: approximately 5 years, 3 months, 1 week ago
- Last: approximately 1 week ago
1,242 email address(es) harvested
- First: approximately 5 years, 3 months, 2 weeks ago
- Last: Tue, 03 Mar 2009 00:13:54 -0800
Time From Harvest
To First Spam
Fastest: 1 day, 11 hours, 14 mins, 56 secs
Slowest: 4 weeks, 7 hours, 46 mins, 44 secs
Average: 1 week, 21 hours, 49 mins, 23 secs
Std Dev: 4 days, 14 hours, 5 mins

Associated Mail Servers
1.209.163.3 | SD
1.220.158.3 | SD
1.226.83.81 | SD
1.226.83.199 | SD
1.226.84.175 | SD
1.234.3.13 | SD
1.234.4.33 | SD
1.234.4.166 | SD
1.234.6.7 | SD
1.234.6.81 | SD
1.234.6.211 | SD
1.234.50.245 | SD
2.176.64.248 | S
8.14.146.162 | S
14.33.121.67 | SD
14.37.204.49 | SD
14.47.20.245 | SDC
27.191.208.233 | SD
31.214.139.73 | S
31.214.139.74 | SD
31.214.169.112 | S
31.214.169.114 | SC
42.61.42.162 | SD
46.251.237.161 | SD
46.251.237.164 | SDC
46.251.237.166 | HSD
46.251.237.168 | SD
49.15.50.177 | S
58.49.59.80 | SD
58.53.144.35 | SD
58.64.228.224 | SD
58.68.80.117 | S
58.120.155.248 | SD
58.120.227.143 | SD
58.120.227.155 | SD
58.120.227.160 | SD
58.150.97.242 | SD
58.151.149.118 | SD
58.180.26.203 | SD
58.220.225.27 | HSD
58.227.21.27 | SD
58.230.118.125 | SD
58.232.221.43 | SD
58.237.102.214 | SD
58.251.129.38 | SD
59.10.7.16 | SDC
59.15.76.97 | SD
59.46.201.54 | SD
59.94.182.36 | SD
59.150.106.108 | SD
59.150.255.35 | SD
59.175.187.36 | SD
59.188.196.185 | SD
59.188.237.166 | SD
60.12.76.139 | HSD
60.22.129.51 | S
60.173.9.37 | SD
60.190.218.67 | SD
60.190.218.77 | SD
60.190.218.110 | SD
60.190.218.123 | SD
60.190.218.125 | SD
60.190.223.26 | SD
60.190.223.52 | SD
60.190.223.54 | SDC
60.190.223.61 | SD
60.190.223.68 | SD
60.190.223.144 | SD
60.190.223.150 | SD
60.190.223.152 | SD
60.196.58.189 | SD
60.251.66.206 | SD
61.32.38.3 | SD
61.32.67.236 | SD
61.36.79.99 | SD
IPs In The Neighborhood
89.122.28.201
89.122.29.1
89.122.29.3 | HR
89.122.29.8
89.122.29.10 | S
89.122.29.12 | S
89.122.29.14
89.122.29.16
89.122.29.19
89.122.29.21
89.122.29.22 | S
89.122.29.25
89.122.29.27 | SD
89.122.29.29 | SD
89.122.29.30
89.122.29.31 | HR
89.122.29.32 | HSR
89.122.29.33 | HR
89.122.29.34 | S
89.122.29.35 | HR
89.122.29.36 | H
89.122.29.37 | HR
89.122.29.38 | SD
89.122.29.39 | HR
89.122.29.40 | H
89.122.29.42 | D
89.122.29.43 | S
89.122.29.47
89.122.29.49
89.122.29.50
89.122.29.54 | S
89.122.29.57
89.122.29.58
89.122.29.59
89.122.29.60
89.122.29.61 | H
89.122.29.65
89.122.29.68
89.122.29.70 | S
89.122.29.74 | SD
89.122.29.75 | SD
89.122.29.76 | H
89.122.29.77 | H
89.122.29.78
89.122.29.79 | H
89.122.29.80 | HR
89.122.29.81 | H
89.122.29.82 | HSDR
89.122.29.83 | S
89.122.29.84 | S
89.122.29.85 | S
89.122.29.86
89.122.29.87
89.122.29.88
89.122.29.89
89.122.29.90
89.122.29.91 | S
89.122.29.92 | SD
89.122.29.94
89.122.29.96 | SD
89.122.29.100
89.122.29.101
89.122.29.104 | H
89.122.29.105 | H
89.122.29.107 | S
89.122.29.108
89.122.29.112
89.122.29.113
89.122.29.118
89.122.29.121 | S
89.122.29.122 | H
89.122.29.123 | SD
89.122.29.124 | H
89.122.29.125 | H
89.122.29.127 | H
89.122.29.128 | H
89.122.29.131 | S
89.122.29.133 | SD
89.122.29.136 | S
89.122.29.138 | C
89.122.29.140 | S
89.122.29.147
89.122.29.148
89.122.29.150
89.122.29.153 | SD
89.122.29.155
89.122.29.159
89.122.29.205 | S
89.122.29.215 | S
89.122.29.218 | SD
89.122.29.227
89.122.29.237
89.122.29.245
89.122.29.250 | S
89.122.30.4 | SD
89.122.30.9 | SD
89.122.30.61
89.122.30.62 | SD
89.122.29.126's User Agent Strings
Java/1.6.0_04
Java/1.6.0_07
Java/1.6.0_11
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; Seekmo 10.0.406.0)
M.Mixon commented...
In my logs, I see a lot of Java Spider activity coming from this IP. It seems to look for any non-image file that it can download and then downloads it. It could be for harvesting emails, but I also think it is looking for executable scripts for exploitation of weaknesses.

I think it would be interesting and relatively simple to set traps for this spider say in index.html you could have it say there's a file at index1.html and then creates the file, then index1.html does the same thing, keeping the spider occupied for a few thousand bogus links, then quits.
January 02 2009 08:59 AM

Page generated on: June 18 2013 08:41:54 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–13, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email