IP Address Inspector
ATTENTION |
|
41.206.12.66
The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.
Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google
Geographic Location | Nigeria |
Spider First Seen | approximately 12 years, 8 months, 4 weeks ago |
Spider Last Seen | within 8 years, 7 months, 3 weeks |
Spider Sightings | 3 visit(s) |
User-Agents | seen with 3 user-agent(s) |
First Received From | approximately 12 years, 9 months, 2 weeks ago |
Last Received From | within 12 years, 9 months, 1 week |
Number Received | 9 email(s) sent from this IP |
Dictionary Attacks | 9 email(s) sent from this IP |
First Received From | approximately 12 years, 9 months, 2 weeks ago |
Last Received From | within 12 years, 9 months, 2 weeks |
2 comment(s) - Comment on this IP | Collapse All
|
A.Sloane commented...
Pasting header:-
Wednesday, 20 April, 2011 12:43 From Dipaka Owen Wed Apr 20 11:43:48 2011 Wed, 20 Apr 2011 11:43:49 +0000 Return-Path: Received-SPF: none (mta1008.bt.mail.ird.yahoo.com: domain of dipaka.owen@yahoo.com does not designate permitted sender hosts) X-Originating-IP: [98.138.91.214] Authentication-Results: mta1008.bt.mail.ird.yahoo.com from=yahoo.com; domainkeys=pass (ok); from=yahoo.com; dkim=pass (ok) Received: from 98.138.91.214 (HELO nm26-vm2.bullet.mail.ne1.yahoo.com) (98.138.91.214) by mta1008.bt.mail.ird.yahoo.com with SMTP; Received: from [98.138.90.56] by nm26.bullet.mail.ne1.yahoo.com with NNFMP; 20 Apr 2011 11:43:48 -0000 Received: from [98.138.89.250] by tm9.bullet.mail.ne1.yahoo.com with NNFMP; 20 Apr 2011 11:43:48 -0000 Received: from [127.0.0.1] by omp1042.mail.ne1.yahoo.com with NNFMP; 20 Apr 2011 11:43:48 -0000 Message-ID: Received: from [41.206.12.66] by web121520.mail.ne1.yahoo.com via HTTP; Wed, 20 Apr 2011 04:43:48 PDT X-Mailer: YahooMailRC/559 YahooMailWebService/0.8.109.295617 Date: Wed, 20 Apr 2011 04:43:48 -0700 (PDT) From: This sender is DomainKeys verified. Dipaka Owen View contact details Subject: I MISSED YOU SOOOOOOOOOOOOOOOOOOO MUCH... MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="0-1735675620-1303299828=:58094" Content-Length: 2978 May 09 2011 02:59 PM |
A.Sloane commented...
41.206.12.66 linked to originating IP 98.138.91.214. Posing as Dipaka Owen, a half Indian, half American citizen from Seattle - a widower with a 10 year old daughter called Patra. Says he works for Shell in Nigeria. Claimed to travel to Australia and then the UK for a contract returning to Nigeria afterwards. Very convincing on the emails and romantic front. But on the phone, for someone born and brought up in the U.S., he has a very suspicious, strong accent. During his his trip, he started building the story about his credit card not functioning and being forced to go back to Seattle to unblock it. As soon as he returned, he asked for thousands of dollars for his daughter. After being confronted simply by using the words: 419, he lost his temper and disappeared from the scene. His email address is dipaka.owen@yahoo.com He is very convincing in using two different Nigerian numbers, a UK SIM while he was supposedly there and in Australia. Be warned. I checked the IP addresses of his mails from the UK and from Australia - and no surprises, they were both still Nigeria based.
May 09 2011 02:53 PM |
Page generated on: April 19 2024 10:11:10 PM
Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us
Copyright © 2004–24, Unspam Technologies, Inc. All rights reserved.
Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot