IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

89.144.12.15 Spam ServerDictionary Attacker

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Germany Germany
Spider First Seen approximately 3 years, 9 months, 3 weeks ago
Spider Last Seen within 2 years, 10 months, 2 weeks
Spider Sightings 2,262 visit(s)
User-Agents seen with 30 user-agent(s)

First Received From approximately 3 years, 9 months, 2 weeks ago
Last Received From within 2 years, 10 months, 2 weeks
Number Received 30,572 email(s) sent from this IP

First Post On approximately 3 years, 7 months, 1 week ago
Last Post On within 3 years, 1 month, 2 weeks
Form Posts 1,229 web post submission(s) sent from this IP

Dictionary Attacks 15,993 email(s) sent from this IP
First Received From approximately 3 years, 9 months, 2 weeks ago
Last Received From within 2 years, 10 months, 2 weeks

Associated Harvesters
222.149.73.73 | HSD Japan
65.93.203.49 | H Canada
67.114.112.62 | HS United States
142.162.41.119 | H Canada
68.219.6.175 | HS United States
196.25.255.194 | HC South Africa
154.5.163.242 | H Canada
68.74.138.96 | H United States
76.116.65.154 | H United States
219.66.233.209 | H Japan
83.57.34.48 | H Spain
76.233.113.141 | H United States
104.200.38.47 | H United States
211.3.200.203 | H Japan
218.114.16.41 | H Japan
221.191.105.116 | H Japan
76.199.112.148 | H United States
74.208.154.143 | HS United States
89.232.40.61 | H Georgia
59.104.118.25 | H Taiwan
62.84.94.1 | H Lebanon
216.185.59.16 | H United States
211.33.132.54 | HSD South Korea
89.137.241.141 | H Romania
81.169.144.135 | HCR Germany
27.159.199.22 | HC China
142.54.184.181 | HCR United States
199.85.212.184 | HD United States
86.209.160.233 | H France
65.75.171.150 | H United States
77.41.93.49 | HSD Russia
125.163.75.213 | HS Indonesia
94.229.85.55 | HC Poland
211.144.137.67 | H China
104.37.57.50 | H Austria
81.33.134.232 | H Spain
194.145.235.178 | HSD France
125.180.3.137 | H South Korea
115.28.44.150 | H China
62.210.58.105 | H France
24.37.208.90 | H Canada
91.76.64.149 | HS Russia
130.192.119.25 | HC Italy
84.176.13.30 | H Germany
85.120.71.126 | HS Romania
90.5.39.104 | H France
72.240.170.127 | H United States
66.90.101.55 | HC United States
62.163.13.139 | H Netherlands
84.38.107.241 | HSC Poland
24.84.235.237 | H Canada
84.248.140.39 | H Finland
207.150.196.52 | HS United States
60.54.61.105 | HS Malaysia
62.163.15.74 | H Netherlands
207.150.196.56 | HS United States
85.49.32.95 | HS Spain
81.71.54.236 | H China
107.190.163.229 | H Ireland
81.213.182.155 | HS Turkey
24.226.195.33 | H Canada
67.171.6.78 | HS United States
208.66.195.19 | H United States
81.25.53.71 | HSC Russia
64.62.228.65 | H United States
117.177.250.151 | HC China
91.105.24.198 | H Latvia
71.231.246.187 | H United States
218.205.17.138 | H China
206.51.234.73 | H United States
72.178.27.229 | H United States
61.144.106.173 | H China
81.50.8.17 | HS France
220.161.100.132 | H China
24.22.137.12 | HS United States
IPs In The Neighborhood
89.144.11.59 Germany
89.144.11.60 Germany
89.144.11.62 | H Germany
89.144.11.97 Germany
89.144.12.14 Germany
89.144.12.17 | C Germany
89.144.12.200 Germany
89.144.12.201 Germany
89.144.12.202 Germany
89.144.12.204 Germany
89.144.12.205 Germany
89.144.12.221 Germany
89.144.12.222 Germany
89.144.12.223 Germany
89.144.12.224 Germany
89.144.12.225 Germany
89.144.12.226 Germany
89.144.12.227 Germany
89.144.12.228 Germany
89.144.12.229 Germany
89.144.12.230 Germany
89.144.12.231 Germany
89.144.12.232 Germany
89.144.12.233 Germany
89.144.12.234 Germany
89.144.12.235 Germany
89.144.12.236 Germany
89.144.12.237 Germany
Sample Spam URLs & Keywords Posted From 89.144.12.15
Domain: oralfixation.purplesphere.in
URL: http://oralfixation.purplesphere.in/?mail.elyse
Domain: selfshots.erolove.in
URL: http://selfshots.erolove.in/?marlene
Domain: singles.dating.twiclub.in
URL: http://singles.dating.twiclub.in/?entry.alize
Domain: sissy.adultnet.in
URL: http://sissy.adultnet.in/?post.adriana
Domain: arab.sex.photo.xblog.in
URL: http://arab.sex.photo.xblog.in/?post-jada
Domain: erotic.apps.android.blogporn.in
URL: http://erotic.apps.android.blogporn.in/?diagram.kenia
Domain: sissyabuse.blogporn.in
URL: http://sissyabuse.blogporn.in/?view.kacie
Domain: sunni.muslim.purplesphere.in
URL: http://sunni.muslim.purplesphere.in/?entry-natalia
Domain: mature.xblog.in
URL: http://mature.xblog.in/?montana
Domain: japan.erolove.in
URL: http://japan.erolove.in/?maddison
Domain: asianpic.twiclub.in
URL: http://asianpic.twiclub.in/?gain.kassandra
Domain: sexypic.erolove.in
URL: http://sexypic.erolove.in/?post.emilie
Domain: men.sexblog.pw
URL: http://men.sexblog.pw/?miya
Domain: interracial.dating.xblog.in
URL: http://interracial.dating.xblog.in/?post.stephanie
Domain: livesex.adultnet.in
URL: http://livesex.adultnet.in/?blog_priscila
89.144.12.15's User Agent Strings
AfD-Verbotsverfahren JETZT!
Googlebot/2.1 (+http://www.google.com/bot.html)
iphone
Java/1.8.0_101
LeechCraft (X11; U; Linux; ru_RU) (LeechCraft/Poshuku 0.3.95-1-g84cc6b7; WebKit 4.7.1/4.7.1)
Links (2.1pre; Linux)
Mozilla/1.22 (compatible; MSIE 10.0; Windows 3.1)
Mozilla/3.0 (compatible; NetPositive/2.1.1; BeOS)
Mozilla/4.05 [en] (Win95; I)
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; Creative)
Mozilla/4.0 (compatible; MSIE 5.0; Linux 2.4.20-13.7 i686) Opera 6.11 [de]
Mozilla/4.0 (compatible; MSIE 5.0; Windows 95; DigExt; freenet 4.0)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 98) Opera 6.01 [es]
Mozilla/4.0 (compatible; MSIE 5.23; Mac_PowerPC)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Turk Nokta Net; AIRF)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90; AVPersonalSerial 728479f8326c352757535b791d2e62b027776bc6)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; by IndiaTimes)
Mozilla/4.0 (compatible; MSIE 6.01; Windows NT 6.0)
Mozilla/4.0 (compatible; MSIE 6.0; AOL 8.0; Windows NT 5.1; Q312461)
Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.0; FunWebProducts)
Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1; Hotbar 4.4.2.0)
Mozilla/4.0 (compatible; MSIE 6.0; Linux 2.6.6 i686) Opera 7.11 [en]
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows 98) Opera 7.01 [en]
Mozilla/4.0 (compatible; MSIE 6.0; MSNIA; Windows 98; Q312461)
Mozilla/4.0 (compatible; MSIE 6.0; U; Windows;) Lobo/0.97.1
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; FunWebProducts; Hotbar 4.4.5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; HWE)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; ONDOWN3.2; AtHome021SI)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; YComp 5.0.2.5; SIK30)
Mozilla/4.0 (compatible; MSIE 6.0; Windows CE; PPC; 240x320) Opera 8.65 [nl]
Example Messages Sent From 89.144.12.15
Subject: none/blank
Subject: These words make chicks horny?
Subject: Re: 1 F*ckbuddy Request is Pending
Subject: Re: 1 F*ckbuddy Request is Pending
Subject: Hungry for a F*ckbuddy
Subject: Desperate for a F*ckbuddy
Subject: Re: Good day to you my friend.
Subject: 1 Missed H00kup Call03
Subject: Re: Desperate for a F*ckbuddy05
Subject: Re: 1 Missed H00kup Call04
Subject: Можно работать по полчаса
Example User Names Used By 89.144.12.15
User-name: 0ibn001455vay7o6
User-name: 14c369.acffd24e1
User-name: abad
User-name: abney
User-name: accounting
User-name: acptwi
User-name: ajpat
User-name: alisha_christofori
User-name: allen
User-name: allenbaugh
User-name: amjustsendingthisleter
User-name: amspoker
User-name: anagan01
User-name: and.luckow
User-name: anell_p_mckesson
User-name: aneta
User-name: aney_der
User-name: anna
User-name: anne04
User-name: anway
User-name: areizaga
User-name: arlton
User-name: arlymedich
User-name: arra
User-name: arvest-me
User-name: as
User-name: asif
User-name: ath
User-name: ation462
User-name: awbonedrachele
H.Baken commented...
To be honest, I don't understand the entries in the log. They are like this:

89.144.12.15 - - [29/Sep/2017:02:41:28 +0200] "GET /?file=../../../../../proc/self/environ HTTP/1.0" 200 18352 "-" ""

I searched for "doh.txt" & found info about 101.99.5.63 (VN), however no dangerous stuff.
September 29 2017 06:44 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
August 06 2017 01:46 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
August 05 2017 11:40 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:00:05. Documented reason for whitelist: Owner of a Dynamic IP Address
August 05 2017 11:33 AM

Page generated on: October 24 2020 04:18:30 AM
derekgustafson625@yahoo.com beatrizschulz962@outlook.com rubensaldana808@yahoo.com theresamunoz852@outlook.com
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–20, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email