IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

200.21.18.189

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Colombia (Bogotá, Cundinamarca)
Spider First Seen	approximately 3 years, 10 months, 2 weeks ago
Spider Last Seen	within 7 months, 3 weeks
Spider Sightings	22 visit(s)
User-Agents	seen with 20 user-agent(s)

First Received From	approximately 4 years, 4 months, 2 weeks ago
Last Received From	within 4 months, 4 weeks
Number Received	22,163 email(s) sent from this IP

First Post On	approximately 3 years, 10 months, 2 weeks ago
Last Post On	within 3 years, 10 months, 1 week
Form Posts	2 web post submission(s) sent from this IP

Dictionary Attacks	3,480 email(s) sent from this IP
First Received From	approximately 4 years, 1 month, 4 weeks ago
Last Received From	within 5 months, 2 weeks

Associated Harvesters
92.55.128.174 \| H
70.36.100.66 \| HC
216.245.223.50 \| HR
70.36.100.42 \| H
195.225.128.59 \| HS
194.144.211.237 \| H
118.172.230.231 \| H
218.111.0.57 \| H
78.180.47.162 \| HS
212.37.118.183 \| H
66.79.177.190 \| H
88.252.184.181 \| HSD
64.231.158.34 \| H
67.227.137.176 \| H
81.169.230.189 \| HS
87.30.193.38 \| H
84.173.199.7 \| H
76.73.62.242 \| H
207.150.196.50 \| HS
81.222.178.4 \| H
67.83.173.170 \| H
81.184.147.88 \| H
82.114.185.23 \| HS
201.34.118.30 \| HS
193.238.41.208 \| H
77.41.121.10 \| HSC
200.233.233.20 \| HS
190.200.220.162 \| H
89.149.194.162 \| H
90.5.39.104 \| H
210.89.53.104 \| HSC
217.12.118.122 \| HSD
4.244.27.62 \| H
12.155.240.244 \| H
12.219.215.19 \| H
24.4.248.106 \| H
24.28.84.81 \| HS
24.37.208.90 \| H
24.56.220.220 \| HSD
24.132.226.28 \| H
24.154.74.116 \| H
24.185.33.195 \| HC
24.185.208.171 \| H
24.191.85.197 \| H
24.201.31.182 \| H
24.201.114.99 \| H
24.226.195.33 \| H
24.253.85.84 \| HC
41.207.206.104 \| HSD
41.250.13.230 \| HSD
58.156.55.142 \| H
59.56.243.170 \| H
59.86.209.41 \| H
59.146.231.138 \| H
60.39.204.165 \| H
60.42.123.183 \| H
60.229.251.131 \| HS
60.238.228.252 \| H
61.17.231.78 \| HSD
61.214.28.119 \| H
61.214.30.206 \| H
62.84.94.1 \| H
62.163.32.108 \| H
62.163.32.248 \| H
62.163.37.157 \| H
62.163.57.172 \| H
62.163.70.57 \| H
62.163.70.106 \| HS
62.163.80.205 \| H
62.193.27.250 \| H
62.193.27.251 \| H
62.194.1.235 \| H
62.194.10.122 \| HS
62.194.10.133 \| H
62.194.61.71 \| H

IPs In The Neighborhood
200.21.17.234 \| S
200.21.18.134 \| S
200.21.18.135
200.21.18.140
200.21.18.141 \| S
200.21.18.145 \| SD
200.21.18.146 \| SD
200.21.18.149 \| SD
200.21.18.152 \| S
200.21.18.156 \| SD
200.21.18.166 \| SD
200.21.18.168 \| SD
200.21.18.240 \| S
200.21.18.241 \| S
200.21.18.242 \| S
200.21.19.38
200.21.19.42 \| S
200.21.19.98
200.21.19.114 \| S
200.21.19.125

Sample Spam URLs & Keywords Posted From 200.21.18.189

Domain: blog.360.yahoo.com
URL: http://blog.360.yahoo.com/blog-T3L7CZ85fqKdLWHwHhVaVfnE6Q--?p=4
Keywords: no faxing cash advance

Domain: blog.360.yahoo.com
URL: http://blog.360.yahoo.com/blog-QTyc1OA_cqvezZh8qvmqp8pJ?p=
Keywords: texas holdem fr

Domain: blog.360.yahoo.com
URL: http://blog.360.yahoo.com/blog-mKOuVUM7KP.vJycbQLzP0ILJ.M.8ww--?p=1
Keywords: no deposit casino

Domain: blog.360.yahoo.com
URL: http://blog.360.yahoo.com/blog-T3L7CZ85fqKdLWHwHhVaVfnE6Q--?p=44
Keywords: no deposit casino

Domain: blog.360.yahoo.com
URL: http://blog.360.yahoo.com/blog-QTyc1OA_cqvezZh8qvmqp8pJ?p=9
Keywords: no deposit casino

Domain: teachingcopyright.org
URL: http://teachingcopyright.org/talk/wp-content/1/casino-sanremo-on-line.htm
Keywords: casino sanremo on line

Domain: www.mainedition.com
URL: http://www.mainedition.com/annking/blog/wp-content/1/party-poker-bonus.htm
Keywords: party poker registrierungs bonus

Domain: www.mainedition.com
URL: http://www.mainedition.com/annking/blog/wp-content/1/online-poker-ohne-registrierung.htm
Keywords: online poker ohne registrierung

Domain: www.mainedition.com
URL: http://www.mainedition.com/annking/blog/wp-content/1/video-poker-gratis.htm
Keywords: video poker gratis

Domain: teachingcopyright.org
URL: http://teachingcopyright.org/talk/wp-content/1/video-poker-freeware.htm
Keywords: video poker freeware

Domain: teachingcopyright.org
URL: http://teachingcopyright.org/talk/wp-content/1/casino-sanremo-on-line.html
Keywords: casino sanremo on line

Domain: www.mainedition.com
URL: http://www.mainedition.com/annking/blog/wp-content/1/party-poker-bonus.html
Keywords: bonus bei party poker

Domain: www.mainedition.com
URL: http://www.mainedition.com/annking/blog/wp-content/1/online-poker-ohne-registrierung.html
Keywords: online poker ohne registrierung

Domain: www.mainedition.com
URL: http://www.mainedition.com/annking/blog/wp-content/1/video-poker-gratis.html
Keywords: video poker gratis

Domain: teachingcopyright.org
URL: http://teachingcopyright.org/talk/wp-content/1/video-poker-freeware.html
Keywords: video poker freeware

200.21.18.189's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; InfoPath.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; FunWebProducts; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET CLR 3.0.30618)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; .NET4.0C; .NET4.0E)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.2; .NET4.0C)

Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; es-es) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16

Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.17) Gecko/20080829 Firefox/2.0.0.17

Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7

Mozilla/5.0 (Windows; U; Windows NT 6.0; es-ES; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)

Example Messages Sent From 200.21.18.189

From:
Subject: /US$ 600 ist für Sie echtes Geld, das Sie bei Anm

From:
Subject: WESTERN UNION: REMITTANCE ADVICE

From:
Subject: WESTERN UNION: MONEY TRANSFER FOR YOU

From:
Subject: Western Union: Transfer Of Money

From:
Subject: WESTERN UNION: YOU HAVE MONEY TRANSFER

From:
Subject: WESTERN UNION: YOU HAVE RECEIVED A MONEY TRANSFER

From:
Subject: Western Union: You Have Money Transfer

From:
Subject: MONEY TRANSFER INFORMATION

From:
Subject: Money Transfer Notice

From:
Subject: Re: Re: Re: Re: Medicare and Medical Insurance con

From:
Subject: Re: Re: US dollar purchasing power

From:
Subject: Fw: Fw: Summer End Pharmacy Sale

From:
Subject: Money Transfer Information 61774

From:
Subject: MONEY TRANSFER INFORMATION 35148

From:
Subject: From FedEx 99702752

From:
Subject: FedEx ATTENTION 33953088

From:
Subject: Fed Ex Attention 886692

From:
Subject: =?windows-1251?B?wvv17uTt++Ug7eAg4eXw5ePg9SDC7uvj6=?=

From:
Subject: =?windows-1251?B?8vPw+yDu5O3u4+4g5O3/IO7yIDYwMCDw8=?=

From:
Subject: FedEx id. 3784630

From:
Subject: FEDEX Attention 490687

From:
Subject: FEDEX id. 4334349

Example User Names Used By 200.21.18.189

User-name: 0111925611

User-name: 02qloe

User-name: 04yeg

User-name: 0774-32-9397hamaguch

User-name: 092-713-1689.murakami

User-name: 0adagny_dickel

User-name: 1224796611

User-name: 129471

User-name: 2131834201

User-name: 265

User-name: 2751

User-name: 2ono

User-name: 2sects2

User-name: 3233007001

User-name: 3354660701

User-name: 3788

User-name: 4

User-name: 411

User-name: 4113857201

User-name: 41-v337.f09bk188g-03jzay11

User-name: 43d6b862.3010900

User-name: 43d6bb0c.7060300

User-name: 43d6bb0e.7040808

User-name: 44738_bnr139

User-name: 45aa22dd.1000509

User-name: 46c97cb1.2050306

User-name: 46c97ef6.2050306

User-name: 46fc5db8.7010304

User-name: 46fc5f73.3060604

User-name: 46fe44bb.4050106

0 comment(s) - Comment on this IP

Page generated on: February 13 2012 03:20:41 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot