IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

200.172.85.20

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester, mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Brazil (Rio De Janeiro, Rio de Janeiro)

Harvester First Seen	approximately 3 years, 7 months, 3 weeks ago
Harvester Last Seen	within 3 years, 3 months, 3 weeks
Harvester Sightings	2 visit(s)
Harvester Results	0.5 messages per visit 1 message(s) resulting from harvests - First: approximately 3 years, 3 months, 2 weeks ago - Last: approximately 3 years, 3 months, 2 weeks ago 1 email address(es) harvested - First: approximately 3 years, 3 months, 3 weeks ago - Last: Wed, 29 Oct 2008 06:08:08 -0700

First Received From	approximately 3 years, 10 months, 2 weeks ago
Last Received From	within 2 years, 2 months, 4 weeks
Number Received	3,984 email(s) sent from this IP

Dictionary Attacks	475 email(s) sent from this IP
First Received From	approximately 3 years, 5 months, 3 weeks ago
Last Received From	within 2 years, 2 months, 4 weeks

Associated Mail Servers
200.172.85.15

Associated Harvesters
66.96.216.133 \| HS
66.135.50.142 \| H
67.15.130.23 \| H
67.19.114.226 \| H
67.19.122.2 \| H
67.19.250.26 \| H
67.167.147.232 \| HSC
69.41.163.53 \| H
69.41.173.93 \| H
69.94.193.169 \| HS
70.87.196.242 \| H
71.169.24.211 \| HS
74.53.249.34 \| HW
74.86.209.74 \| H
74.86.249.98 \| H
74.124.192.3 \| H
74.240.158.206 \| H
75.125.52.50 \| HS
75.125.52.98 \| HS
75.125.52.146 \| H
75.125.52.162 \| H
75.125.194.194 \| HS
81.71.54.236 \| H
83.28.47.186 \| HS
85.181.244.164 \| HSD
87.218.40.129 \| H
89.172.201.20 \| HS
208.53.147.89 \| H
208.65.60.105 \| H
208.65.60.145 \| H
208.66.195.2 \| H
208.66.195.4 \| H
208.66.195.7 \| H
208.66.195.8 \| H
208.66.195.10 \| H
208.101.44.3 \| H
209.160.65.42 \| H
212.59.22.105 \| H
212.139.74.46 \| H
216.12.207.226 \| HC
216.32.82.18 \| HS
216.40.220.18 \| H
216.40.220.34 \| H
208.66.195.6 \| H
216.40.222.98 \| H
216.40.222.50 \| H
216.40.222.82 \| HSD
196.218.3.97 \| H
64.52.8.74 \| HS
66.148.67.103 \| H
208.66.195.3 \| H
67.228.115.170 \| H
70.85.113.242 \| H
87.237.112.63 \| HSD
62.163.80.205 \| H
75.125.47.162 \| HSDW
85.94.136.110 \| H
66.199.236.50 \| H
201.92.125.242 \| HS
189.145.61.167 \| HSD
71.206.81.186 \| HC
71.243.26.98 \| H
89.137.243.192 \| H
75.125.167.2 \| H
72.88.141.212 \| HS
70.85.172.170 \| H
208.66.195.11 \| H
85.120.152.208 \| H
24.239.228.11 \| H
216.40.222.66 \| H
75.125.52.82 \| H
66.148.67.104 \| H
87.126.151.134 \| HS
70.84.55.114 \| HC
208.66.195.9 \| H

IPs In The Neighborhood
200.172.84.185
200.172.84.204
200.172.85.2 \| SD
200.172.85.15
200.172.85.16 \| S
200.172.85.30 \| SD
200.172.85.58

200.172.85.20's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50215; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Example Messages Sent From 200.172.85.20

From:
Subject: Re:

From:
Subject: Save up to $2000 on Adobe Acrobat 9 Pro Extended a

From:
Subject: =?koi8-r?B?V2UgZGVsaXZlciBxdWFsaXR5IHNvZ=?=

From:
Subject: =?koi8-r?B?VmVyeSBHb29kIERlYWxzIE9uIFNvZ=?=

From:
Subject: We Provide Very Hot Deals On Soft.

From:
Subject: Choose the needed field.

From:
Subject: Call for your diploma now.

From:
Subject: Doctorate degree can be yours.

From:
Subject: Get a required degree.

From:
Subject: Need a diploma? Call us.

From:
Subject: Apply for your diploma.

From:
Subject: Receive the desired degree.

From:
Subject: We sell affordable health products for people from

From:
Subject: The best solution for people who are looking for g

From:
Subject: Cheap watches for every member of your family.

From:
Subject: It▓s time you bou

From:
Subject: Прав

From:
Subject: Elegance has a home √ our wat

From:
Subject: classic round

From:
Subject: Member krpressimone@relay2.gka.org.uk get 80% 0FF

From: none/blank
Subject: Order ID 6161

Example User Names Used By 200.172.85.20

User-name: 47099d3e.3080206

User-name: 47099d70.3080206

User-name: 470c0428.3020203

User-name: 470c0603.3020203

User-name: 470c062f.3020203

User-name: 5b1d1a7d

User-name: aapipalta.gamelin

User-name: adam

User-name: alexey

User-name: amspoker

User-name: andescenteconomist100

User-name: aonudvjofafdj

User-name: aonwdpjrfafdj

User-name: ayto.villalba.alcores

User-name: banowski

User-name: bcnydjfeafdj

User-name: bcnydjfmafdj

User-name: bennett

User-name: buh

User-name: buhg

User-name: buhgalter

User-name: buhgalteria

User-name: bux

User-name: cknbdjcfapfdj

User-name: cknddjwfalfdj

User-name: cknldjkfahfdj

User-name: cknudjufarfdj

User-name: corlissjguerra

User-name: dfame

User-name: dir

0 comment(s) - Comment on this IP

Page generated on: February 13 2012 09:24:02 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot