IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

189.17.142.51

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Brazil
Spider First Seen	approximately 3 years, 2 weeks ago
Spider Last Seen	within 1 year, 3 months, 4 weeks
Spider Sightings	11 visit(s)
User-Agents	seen with 10 user-agent(s)

First Received From	approximately 3 years, 3 months, 1 week ago
Last Received From	within 11 months, 3 weeks
Number Received	4,936 email(s) sent from this IP

First Post On	approximately 2 years, 3 months, 3 weeks ago
Last Post On	within 2 years, 3 months, 3 weeks
Form Posts	1 web post submission(s) sent from this IP

Dictionary Attacks	795 email(s) sent from this IP
First Received From	approximately 3 years, 1 month, 1 week ago
Last Received From	within 1 year, 4 weeks

Associated Harvesters
216.40.220.18 \| H
216.40.222.82 \| HSD
74.86.209.74 \| H
75.125.18.178 \| H
75.125.47.162 \| HSDW
67.19.122.2 \| H
70.84.212.114 \| H
216.40.220.34 \| H
206.51.236.176 \| H
84.19.184.109 \| H
216.40.222.98 \| H
75.125.52.66 \| H
41.250.13.230 \| HSD
208.66.195.8 \| H
208.101.44.3 \| H
216.40.222.50 \| H
70.253.42.12 \| H
216.40.222.66 \| H
88.245.21.21 \| H
74.53.249.34 \| HW
85.120.152.208 \| H
74.58.130.207 \| H
208.66.195.2 \| H
83.100.148.71 \| H
85.101.179.7 \| HS
80.80.172.67 \| HS
67.19.114.226 \| H
75.125.52.146 \| H
74.86.249.98 \| H
217.151.53.130 \| HSD
209.160.32.68 \| HS
75.125.52.98 \| HS
62.163.37.157 \| H
71.83.43.69 \| H
67.149.88.78 \| HSDC
67.19.250.26 \| H
66.246.252.117 \| HSD
76.74.153.27 \| H
88.234.6.8 \| H
60.39.204.165 \| H
208.53.147.89 \| H
208.66.195.9 \| H
67.167.147.232 \| HSC
207.172.131.10 \| H
70.85.113.242 \| H
70.173.34.164 \| HC
64.34.255.239 \| HC
70.85.172.170 \| H
209.62.25.34 \| HC
209.160.65.42 \| H
207.58.242.51 \| H
216.12.207.226 \| HC
208.66.195.6 \| H
85.104.15.211 \| HSD
66.199.236.50 \| H
208.65.60.145 \| H
208.66.195.11 \| H
208.66.195.3 \| H
208.66.195.7 \| H
208.66.195.10 \| H
208.66.195.15 \| H
85.101.143.214 \| HSD
59.92.88.137 \| HSD
81.171.26.73 \| H
74.53.243.18 \| HC
208.66.195.236 \| H
208.66.195.4 \| H
213.103.243.157 \| H
208.66.195.5 \| H
69.64.73.123 \| H
67.171.6.78 \| HS
74.86.14.10 \| H
80.78.18.11 \| HS
67.86.138.59 \| HC
76.160.232.250 \| HSC

IPs In The Neighborhood
189.17.141.163
189.17.142.34 \| SDC
189.17.142.35 \| SD
189.17.142.40 \| S
189.17.142.41
189.17.142.43 \| S
189.17.142.50 \| SD
189.17.142.53 \| SD
189.17.142.66 \| S
189.17.142.70 \| SD
189.17.142.72 \| SD
189.17.142.74 \| S
189.17.142.79 \| SD
189.17.142.91 \| S
189.17.142.106 \| SD
189.17.142.107 \| SD
189.17.142.109 \| SD
189.17.142.110 \| S
189.17.142.111 \| SD
189.17.142.123 \| SD
189.17.142.130 \| SD
189.17.142.140 \| S
189.17.143.18 \| SD

Sample Spam URLs & Keywords Posted From 189.17.142.51

Domain: raredisc.ifrance.com
URL: http://raredisc.ifrance.com/roverland.com.html/
Keywords: roverland.com

189.17.142.51's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB5; Embedded Web Browser from: http://bsalsa.com/; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.5; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.63 Safari/534.3

Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10

Mozilla/5.0 (Windows; U; Windows NT 6.0; pt-BR; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 (.NET CLR 3.5.30729)

Mozilla/5.0 (Windows; U; Windows NT 6.0; pt-BR; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 (.NET CLR 3.5.30729)

Example Messages Sent From 189.17.142.51

From:
Subject: For sunlightperfect03

From:
Subject: navalwiles@pochta.premedic.bir.ru VIAGRA ® Officia

From:
Subject: Your new balance

From:
Subject: You deserve the best

From:
Subject: maurita.o.wheelus@mail7.tucsonultimate.com BEST PR

From:
Subject: Hi writeincristal2000@members.energyhelpline.net,

From:
Subject: louettahounshell, 65% off on all soft.

From:
Subject: louettasuing, 65% off on all soft.

From:
Subject: tequila.v.fain, 65% off on all soft.

From:
Subject: priscila_c_hoglund, 65% off on all soft.

From:
Subject: santiagoncoogen, 65% off on all soft.

From:
Subject: louettagaglione, 65% off on all soft.

From:
Subject: scliett7, 65% off on all soft.

From:
Subject: normandhmorvant, 65% off on all soft.

From:
Subject: bridgette.brawner, 65% off on all soft.

From:
Subject: properpavlovic, 65% off on all soft.

From:
Subject: antonia.alpert, 65% off on all soft.

From:
Subject: kreisberg945, 65% off on all soft.

From:
Subject: Mr writeincarroll1969@vip.streetkids.dk, 76% OFF f

From:
Subject: Mr. van_i_gall@relay.abovesecurity.com, don\'t mis

From:
Subject: grorabacher1@mail.partymn.com, 70% great discount

From:
Subject: Hi manysidedkyong@cariosus.faelix.org, get 80% bet

From:
Subject: maurita.gonzalez@webmail.coltechinc.com, 76% great

From:
Subject: For faridea07

From:
Subject: For sjr1727 VIAGRA with 75% OFF

Example User Names Used By 189.17.142.51

User-name: 47027921.1040001

User-name: 470279dc.1040001

User-name: 47027bc5.1040001

User-name: 47138847.5040703

User-name: a543211948

User-name: aapipalta.gamelin

User-name: abfndjfafdj

User-name: abrndjfafdj

User-name: agviewrwvy

User-name: agviewzzkt

User-name: alfyhn

User-name: amjustsendingthisleter

User-name: amndijufafdj

User-name: amndpjpfafdj

User-name: aneta

User-name: anssi-neissih

User-name: arre

User-name: asmiluminada_o_melick

User-name: azmeer299

User-name: bandjfmafdj

User-name: bcntdjfiafdj

User-name: beliles

User-name: belinda215

User-name: bemrose

User-name: bhnnndyjfbafdj

User-name: billfnlf

User-name: bimalec187

User-name: bohol

User-name: bonkdejvfmafdj

User-name: bpvngdcjdfjafdj

3 comment(s) - Comment on this IP | Collapse All

Honey Pot System commented...

WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
August 18 2010 10:49 PM

Honey Pot System commented...

WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
August 03 2010 05:50 AM

Honey Pot System commented...

WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:00:05. Documented reason for whitelist: Other
August 03 2010 05:45 AM

Page generated on: February 14 2012 06:35:10 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot