IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

119.161.161.189

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	China
Spider First Seen	approximately 2 years, 7 months, 4 weeks ago
Spider Last Seen	within 1 year, 9 months, 4 weeks
Spider Sightings	27 visit(s)
User-Agents	seen with 28 user-agent(s)

First Received From	approximately 2 years, 7 months, 5 weeks ago
Last Received From	within 1 year, 9 months, 2 weeks
Number Received	307 email(s) sent from this IP

First Post On	approximately 2 years, 7 months, 2 weeks ago
Last Post On	within 1 year, 9 months, 4 weeks
Form Posts	10 web post submission(s) sent from this IP

Dictionary Attacks	26 email(s) sent from this IP
First Received From	approximately 2 years, 7 months, 2 weeks ago
Last Received From	within 1 year, 9 months, 2 weeks

Associated Harvesters
221.115.95.197 \| H
221.191.98.116 \| H
78.46.225.45 \| HR
84.177.162.119 \| H
78.46.189.230 \| H
67.159.45.140 \| H
222.149.73.9 \| H
84.177.135.239 \| H
217.95.225.193 \| H
78.46.225.42 \| H
78.46.189.229 \| H
78.46.189.228 \| H
220.104.136.220 \| H
74.86.209.74 \| H
74.53.249.34 \| HW
216.40.222.50 \| H
216.40.222.98 \| H
70.85.113.242 \| H
75.125.47.162 \| HSDW
216.40.220.34 \| H
216.40.220.18 \| H
74.86.249.98 \| H
208.101.44.3 \| H
75.125.18.178 \| H
85.49.32.95 \| HS
85.105.246.159 \| HSD
67.86.138.59 \| HC
80.80.172.67 \| HS
75.125.52.98 \| HS
75.125.52.146 \| H
83.143.233.170 \| H
208.66.195.6 \| H
61.117.22.161 \| H
92.112.80.199 \| HS
61.116.197.82 \| H
222.144.66.245 \| H
222.149.231.94 \| H
92.112.85.218 \| HS
75.125.197.66 \| H
87.177.249.250 \| HS
69.41.163.53 \| H
82.135.148.147 \| H
209.160.32.70 \| H
80.90.232.1 \| HSD
82.135.148.145 \| H
70.84.55.114 \| HC
77.250.218.136 \| H
205.209.134.60 \| H
207.36.201.251 \| H
67.19.114.226 \| H
216.40.222.66 \| H
122.167.82.119 \| HSD
208.66.195.7 \| H
212.15.134.70 \| H
208.66.195.10 \| H
75.125.194.210 \| H
88.227.25.169 \| HS
66.117.11.146 \| H
74.124.192.3 \| H
82.157.217.58 \| H
216.40.222.82 \| HSD
71.68.238.115 \| HSD
64.62.228.65 \| H
206.51.234.73 \| H
66.96.216.133 \| HS
75.125.194.194 \| HS
208.66.195.4 \| H
66.90.101.66 \| H
221.189.177.41 \| H
69.64.73.123 \| H
88.7.127.8 \| H
66.158.133.145 \| HS
88.241.193.30 \| HS
219.66.233.209 \| H
84.178.139.49 \| H

IPs In The Neighborhood
119.161.161.10
119.161.161.46 \| SD
119.161.161.50
119.161.161.71
119.161.161.83 \| H
119.161.161.84 \| S
119.161.161.85
119.161.161.98 \| S
119.161.161.106 \| S
119.161.161.188 \| SDC
119.161.161.199 \| S
119.161.162.79
119.161.162.130 \| S
119.161.162.131 \| S
119.161.162.142 \| S

Sample Spam URLs & Keywords Posted From 119.161.161.189

Domain: www.cheap-24h.com
URL: http://www.cheap-24h.com
Keywords: tawdry cigarettes

Domain: www.getdiscountcigarettes.com
URL: http://www.getdiscountcigarettes.com/
Keywords: all cigs

Domain: www.cheap-24h.com
URL: http://www.cheap-24h.com/
Keywords: iight cigarettes

Domain: www.ninjacode.info
URL: http://www.ninjacode.info/
Keywords: smoke cigarettes

Domain: www.cigarettesbuyer.com
URL: http://www.cigarettesbuyer.com/
Keywords: all cigs

Domain: www.yourcigarettesstore.com
URL: http://www.yourcigarettesstore.com/
Keywords: nicotine sovereign cigarettes

Domain: www.bestcigarettesshop.com
URL: http://www.bestcigarettesshop.com/
Keywords: first cigarettes

Domain: www.ninjamatrix.info
URL: http://www.ninjamatrix.info/
Keywords: cheaper cigarette

Domain: www.costadelsol-spain.info
URL: http://www.costadelsol-spain.info/
Keywords: cigarette tobacco

Domain: www.storagebay.net
URL: http://www.storagebay.net/
Keywords: get cigarette

Domain: www.discountcigarettesworld.com
URL: http://www.discountcigarettesworld.com/
Keywords: cigarettes inundation

Domain: www.cheapcigarettesworld.com
URL: http://www.cheapcigarettesworld.com/
Keywords: russian cigarettes

Domain: my.curse.com
URL: http://my.curse.com/members/ALLIE4.aspx
Keywords: lindsay lohan breasts

Domain: my.curse.com
URL: http://my.curse.com/members/ALLIE4.asp
Keywords: lindsay lohan breasts

119.161.161.189's User Agent Strings

Mozilla/0.91 Beta (Windows)

Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)

Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; MSIECrawler)

Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)

Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; APC; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50215; InfoPath.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Crazy Browser 1.0.5)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Deepnet Explorer 1.5.0; .NET CLR 1.0.3705)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; KKman2.0)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54 [en]

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; Powermarks/3.5; Windows 95/98/2000/NT)

Mozilla/4.7 (compatible; OffByOne; Windows 2000) Webster Pro V3.4

Mozilla/5.0 (Windows NT 5.1; U; en) Opera 8.01

Mozilla/6.0 (compatible; MSIE 7.0a1; Windows NT 5.2; SV1)

Opera/7.54 (Windows NT 5.1; U) [pl]

Opera/7.60 (Windows NT 5.2; U) [en] (IBM EVV/3.0/EAK01AG9/LE)

Opera/9.01 (Windows NT 5.1; U; en)

Opera/9.0 (Windows NT 5.1; U; en)

Example Messages Sent From 119.161.161.189

From: none/blank
Subject: none/blank

From:
Subject: Flaggenmast 620 cm mit Flagge nur 89,-

From:
Subject: Profi-Werkzeugset

From:
Subject: Hochdruckreini

From:
Subject: Teichbeleuchtung ohne Strom

From:
Subject: お気にめしませんでした

From:
Subject: Masten

From:
Subject: Sicher ist Sicher

From:
Subject: =?ISO-2022-JP?B?GyRCIX4kIiROOiIkciRiJCYbKEIxGyRCRV=?

From:
Subject: 生声きけますよ？

From:
Subject: c ТВОЙ Л

From:
Subject: �M�a��U�U��B�פj�W

From:
Subject: 今日だけ、特別企画

From:
Subject: =?ISO-2022-JP?B?GyRCPzc3PyVGJWwlUyQsGyhCODAwGyRCMV=?

From:
Subject: ASIA NATURAL DISASTER.

From:
Subject: =?ISO-2022-JP?B?GyRCPGdJWCRHJE8lQCVhJEckOSQrISkbKE=?

Example User Names Used By 119.161.161.189

User-name: 1372

User-name: e_gravit

User-name: ero

User-name: fellow

User-name: ffuto

User-name: imaneichmanis

User-name: info

User-name: jaered_jahnsz

User-name: kalinduv

User-name: ellyhludtke

User-name: lynnefohl

User-name: arianneskonty

User-name: charlesegravit

User-name: loiserapone

User-name: gravit

User-name: konty

User-name: fohl

User-name: rapone

User-name: aterialcooking

User-name: ludtke

User-name: ellamae.kaplin

User-name: karla.g.itri

User-name: fetidsoap1

User-name: danaewhodak

1 comment(s) - Comment on this IP | Collapse All

B.Smith24 commented...

119.161.161.189 - 2010/04/05 13:41 GMT - Tried to register/ Defeated by captcha.
April 05 2010 07:00 AM

Page generated on: May 27 2012 01:07:56 PM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot