IP Address Inspector

189.80.21.230

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Brazil
Spider First Seen approximately 2 years, 9 months, 3 weeks ago
Spider Last Seen within 11 months, 4 weeks
Spider Sightings 307 visit(s)
User-Agents seen with 30 user-agent(s)
First Received From approximately 3 years, 1 week ago
Last Received From within 4 months, 2 weeks
Number Received 1,031 email(s) sent from this IP
First Post On approximately 1 year, 3 months, 2 weeks ago
Last Post On within 1 year, 1 week
Form Posts 119 web post submission(s) sent from this IP
Dictionary Attacks 149 email(s) sent from this IP
First Received From approximately 2 years, 11 months, 3 weeks ago
Last Received From within 2 months, 4 weeks
Associated Harvesters
69.112.13.145 | HC
208.53.170.237 | H
62.194.16.131 | H
68.3.170.33 | H
74.86.209.74 | H
24.84.235.237 | H
123.110.20.199 | HS
74.124.192.3 | H
74.53.249.34 | HW
75.125.52.146 | H
125.24.83.163 | HS
201.235.138.127 | HS
74.86.14.10 | H
193.93.109.185 | HS
74.222.207.107 | HSDC
24.61.174.45 | HS
209.160.32.68 | HS
69.50.209.150 | H
216.40.222.98 | H
88.226.157.3 | HS
216.40.220.34 | H
216.40.220.18 | H
216.40.222.50 | H
75.125.194.194 | HS
75.125.47.162 | HSDW
85.140.52.246 | HS
89.137.243.192 | H
89.38.146.182 | H
67.19.250.26 | H
66.90.101.66 | H
208.101.44.3 | H
86.92.20.172 | HS
58.156.55.142 | H
201.240.41.86 | HSD
208.66.195.5 | H
84.227.20.13 | H
216.40.222.82 | HSD
209.160.65.42 | H
208.66.195.9 | H
75.108.103.116 | H
206.51.236.176 | H
70.87.196.242 | H
66.199.236.50 | H
67.149.88.78 | HSDC
75.125.52.98 | HS
208.66.195.2 | H
71.206.81.186 | HC
208.66.195.3 | H
64.71.167.60 | H
83.237.20.74 | HS
74.86.249.98 | H
66.246.252.117 | HSD
208.66.195.11 | H
208.66.195.8 | H
74.54.110.194 | H
71.158.134.213 | HC
83.131.178.120 | H
70.85.172.170 | H
200.115.174.34 | H
208.101.45.18 | H
64.38.35.162 | H
66.90.101.75 | H
79.111.91.200 | HS
216.12.207.226 | HC
208.66.195.6 | H
216.40.222.66 | H
208.66.195.7 | H
208.66.195.15 | H
78.129.196.177 | H
220.130.186.226 | H
208.66.195.4 | H
66.148.67.104 | H
75.125.18.178 | H
196.205.109.244 | HS
64.34.174.33 | H
IPs In The Neighborhood
189.80.21.58 | SD
189.80.21.74 | S
189.80.21.86
189.80.21.126 | SDC
189.80.21.162 | S
189.80.21.186 | S
189.80.21.214
189.80.21.218 | SD
189.80.21.221
189.80.21.242 | SDC
Sample Spam URLs & Keywords Posted From 189.80.21.230
Domain: mzxufpaitetx.com
URL: http://mzxufpaitetx.com/
Keywords: mzxufpaitetx
Domain: qbqdzlsbpwqo.com
URL: http://qbqdzlsbpwqo.com/
Keywords: qbqdzlsbpwqo
Domain: cuarhjfnbgie.com
URL: http://cuarhjfnbgie.com/
Keywords: qbqdzlsbpwqo
Domain: jpybpyxfjnim.com
URL: http://jpybpyxfjnim.com/
Keywords: jpybpyxfjnim
Domain: jgtojkalmwcd.com
URL: http://jgtojkalmwcd.com/
Keywords: jgtojkalmwcd
Domain: nqxmgsjroynk.com
URL: http://nqxmgsjroynk.com/
Keywords: jgtojkalmwcd
Domain: automoto.goodnano-av.com
URL: http://automoto.goodnano-av.com/
Domain: www.articlesbase.com
URL: http://www.articlesbase.com/spirituality-articles/john-musca-dui-and-your-insurance-1070893.htm
Keywords: john musca
Domain: kwbwounrubun.com
URL: http://kwbwounrubun.com/
Keywords: kwbwounrubun
Domain: hfkeqrozyswd.com
URL: http://hfkeqrozyswd.com/
Keywords: hfkeqrozyswd
Domain: ykvtxytkpypd.com
URL: http://ykvtxytkpypd.com/
Keywords: hfkeqrozyswd
Domain: ruvjgdcyuiiy.com
URL: http://ruvjgdcyuiiy.com/
Keywords: ruvjgdcyuiiy
Domain: bwixrasboihl.com
URL: http://bwixrasboihl.com/
Keywords: bwixrasboihl
Domain: hbqxebaznqdi.com
URL: http://hbqxebaznqdi.com/
Keywords: bwixrasboihl
Domain: www.epharm.es
URL: http://www.epharm.es/Cialis-Professional.htm
Keywords: comprar cialis
189.80.21.230's User Agent Strings
Internet Explorer 7.0 beta running on Windows Longhorn: Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)
Mozilla/0.6 Beta (Windows)
Mozilla/1.22 (compatible; MSIE 2.0d; Windows NT)
Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)
Mozilla/4.0 (compatible; ICS)
Mozilla/4.0 (compatible; MSIE 5.01; Windows 95; MSIECrawler)
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; T312461)
Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 5.0) Opera 7.02 Bork-edition [en]
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; APC; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50215; InfoPath.1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; T312461)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Crazy Browser 1.0.5)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.00
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.50
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FunWebProducts; KKman2.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.3 (build 01218); .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.0.3705)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Opera 7.54 [en]
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.50
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts; .NET CLR 1.1.4322; PeoplePal 6.2)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Media Center PC
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.40607)
Mozilla/4.0 (compatible- MSIE 6.0- Windows NT 5.1- SV1- .NET CLR 1.1.4322
Example Messages Sent From 189.80.21.230
From:
Subject: Administrative Sales Support - Virtual Office
From:
Subject: Open Position
From:
Subject: from Ofelia
From:
Subject: from Willa
From:
Subject: from Dolly
From:
Subject: from Winnie
From:
Subject: from Ladonna
From:
Subject: from Marcy
From:
Subject: from Lorie
From:
Subject: from Jeannine
From:
Subject: from Gale
From:
Subject: from Gale
From:
Subject: from Audra
From:
Subject: from Aileen
From:
Subject: from Meagan
From:
Subject: from Selma
From:
Subject: from Selma
From:
Subject: Virtual Assistant Vacancy
From:
Subject: Virtual Assistant Position
From:
Subject: Bonuses to swell your Bank Balance at Winner Palac
From:
Subject: Newsletter Mon, 25 Apr 2011 21:11:29 +0430
From: none/blank
Subject: Newsletter Mon, 25 Apr 2011 21:39:11 +0430
From:
Subject: ACH Payment Canceled
From:
Subject: ACH Payment Canceled
Example User Names Used By 189.80.21.230
User-name: abindjfafdj
User-name: abjndjfafdj
User-name: bgnodujfmafdj
User-name: boarts
User-name: bux
User-name: conger
User-name: |daniele_merkl
User-name: darneldbbndjfkaxfdj
User-name: dendbjflakfdj
User-name: deveau
User-name: dir
User-name: director
User-name: direktor
User-name: dnjndwjofkanfdj
User-name: dnpndjjifcaufdj
User-name: dpuntdfjpfmakfdj
User-name: ejjndjgfafbdj
User-name: evicent
User-name: eymm
User-name: fendhjfxafmdj
User-name: ffcndljfbafadj
User-name: fgnjdcjfwafpdj
User-name: finance
User-name: fnmndbjufaafldj
User-name: fongdfjmfkafedj
User-name: fpbnedgjbfrafadj
User-name: fvjlge
User-name: gcnmdjfakfqdj
User-name: gdinxdjfagfqdj
User-name: gendojfadfndj
A.Degives Mas commented...
Source of comment spam, with link pointing to the wpolscemamymocneseo.waw.pl subdomain - last seen on 2011/01/16 at 11:42 am PST.
January 16 2011 12:51 PM
Page generated on: February 13 2012 07:24:34 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Twitter Button from twitbuttons.com


Follow projecthoneypot on Twitter

do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email