IP Address Inspector

200.80.140.61

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester, mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | OpenRBL | Spamcop | SenderBase | Google Groups | Google

Geographic Location Argentina

Harvester First Seen approximately 1 year, 8 months, 3 weeks ago
Harvester Last Seen within 2 weeks
Harvester Sightings 73 visit(s)
Harvester Results 0.137 messages per visit
10 message(s) resulting from harvests
- First: approximately 8 months, 3 weeks ago
- Last: approximately 6 months, 2 weeks ago
2 harvested address(es) have seen message(s)
- First: approximately 9 months, 1 week ago
- Last: Thu, 12 Feb 2009 00:26:50 -0500

First Received From approximately 2 years, 1 month, 2 weeks ago
Last Received From within 1 week
Number Received 20,463 email(s) sent from this IP

Dictionary Attacks 2,421 email(s) sent from this IP
First Received From approximately 1 year, 11 months, 2 weeks ago
Last Received From within 1 week

Associated Mail Servers
208.84.242.231 | S
208.84.242.235 | S
208.84.242.243 | S
208.84.242.244 | S
Associated Harvesters
24.10.35.67 | H
87.177.249.250 | HS
58.93.53.241 | H
211.3.202.95 | H
193.238.41.208 | H
83.55.189.114 | HS
59.146.231.138 | H
83.85.212.55 | H
195.174.69.138 | HS
89.136.21.173 | H
65.55.208.165 | Se
65.92.122.214 | H
82.205.172.116 | H
217.151.53.130 | HSD
68.82.157.29 | H
80.253.80.77 | H
69.162.82.226 | H
216.245.223.50 | HR
218.224.120.192 | H
58.11.82.74 | HS
222.148.21.121 | H
87.217.117.22 | HS
75.117.232.177 | HS
85.185.82.2 | H
66.183.150.148 | H
74.86.244.130 | H
87.1.195.44 | H
66.90.95.70 | H
83.248.26.237 | H
125.233.165.113 | H
84.247.26.33 | H
83.114.101.58 | H
217.24.240.8 | HSD
81.195.121.253 | HSDC
77.250.211.110 | HS
82.139.26.139 | HS
66.38.108.214 | HS
68.77.93.180 | H
200.104.55.190 | H
91.207.4.170 | H
218.186.8.243 | H
87.240.15.31 | H
77.199.19.147 | HS
221.135.246.118 | H
85.17.173.1 | H
71.199.38.5 | H
80.253.81.92 | H
80.253.80.66 | H
80.253.80.73 | H
88.161.133.204 | HS
213.118.26.161 | H
125.163.75.213 | HS
76.235.42.206 | H
90.31.64.112 | H
201.12.176.17 | H
76.174.52.199 | H
69.159.84.110 | H
124.121.248.213 | HS
62.37.51.232 | H
77.46.225.176 | H
213.165.170.85 | H
72.153.64.218 | H
222.123.21.244 | HS
77.125.29.243 | H
64.20.38.178 | H
210.214.89.40 | HS
85.17.173.2 | H
87.109.222.111 | H
81.245.251.93 | H
90.230.39.171 | H
60.35.186.90 | H
82.140.78.21 | HSD
89.136.0.233 | HSC
76.233.113.141 | H
80.200.107.19 | H
IPs In The Neighborhood
200.80.140.4
200.80.140.71 | S
200.80.140.72 | S
200.80.140.73 | S
200.80.140.99 | S
200.80.140.108 | S
200.80.140.110 | S
200.80.140.114 | S
200.80.140.130 | SD
200.80.140.139
200.80.140.61's User Agent Strings
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; A1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; A1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; A1; .NET CLR 1.0.3705)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; A1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; RadioPopular)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; SIMBAR={26A08416-353E-4CB3-B190-7BA30F3A57A0}; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; A1; MSN Optimized;ES; .NET CLR 2.0.50727; MSN Optimized;ES)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Alexa Toolbar; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; FunWebProducts; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; FunWebProducts; SIMBAR={0A4ABF3D-77D6-441A-8CAC-5F1A01B888D5}; GTB6; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; InfoPath.2; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; uE v7; uE v7)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; WinuE v6; FDM; WinuE v6)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; uE v7; .NET CLR 2.0.50727; uE v7)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SIMBAR={1E7194B6-3352-431B-95EB-3E420C50D3C0}; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; InfoPath.2; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Chuy; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB6; SLCC1; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.5.30729; .NET CLR 3.0.30618)
Example Messages Sent From 200.80.140.61
From:
Subject: Re:
From:
Subject: Re:
From:
Subject: Re:
From:
Subject: =?koi8-r?B?V2UgZGVsaXZlciBxdWFsaXR5IHNvZ=?=
From:
Subject: We Offer You Best Deals On Software.
From:
Subject: Choose the needed field.
From:
Subject: Get a timepiece you won▓t be
From:
Subject: Did you know that replica watches have diamonds to
From:
Subject: Nothing creates a better look than a classy watch.
From:
Subject: You will get tired to count the diamonds on your w
From:
Subject: Your old watch doesn▓t match
From:
Subject: Cheap watches of undeniable quality.
From:
Subject: Sick and tired of your old time-piece? Get a new o
From:
Subject: Nothing can make a better present than a watch.
From:
Subject: Hot deals on classy watches √
From:
Subject: Your decent watch will upgrade your status.
From:
Subject: Irresistible watches you can▓
From:
Subject: Dear jsulley3 75% 0FF on Pfizer.
From:
Subject: Dear katherine_b_girellini 75% 0FF on Pfizer.
From:
Subject: for maps.stepan.com email service user
From:
Subject: please update your abigailjanway@mail3.midrange.co
From:
Subject: dear owner of the tyronescalese@relay3.atopia.net
Example User Names Used By 200.80.140.61
User-name: 0370433611
User-name: 04yeg
User-name: 06fazhpt
User-name: 0774-32-9397hamaguch
User-name: 09
User-name: 092-713-1689.murakami
User-name: 1224796611
User-name: 129471
User-name: 2131834201
User-name: 2h
User-name: 2ono
User-name: 2sects2
User-name: 3233007001
User-name: 3aalecia.k.ulery
User-name: 411
User-name: 41-v337.f09bk188g-03jzay11
User-name: 45a9528bc.ca9f22c3e
User-name: 46fe44bb.4050106
User-name: 46fe44c4.4050106
User-name: 47017c4c.4050800
User-name: 47017c5a.6000304
User-name: 488f90dd.4050806
User-name: 49a308e011b
User-name: 9e29890123888483de3260
User-name: a
User-name: aallenson
User-name: ab
User-name: a.bernmen
User-name: abyndjfafdj
User-name: account
D.Oro2 commented...
This IP belongs to the entire providence of "San Luis" situated in Argentina, since the local goverment on this providence has set up a Public - Free (as in free beer) internet, with WiFi antenas covering the entire providence, the whole San Luis is connected free to the internet through this single IP address.
It is logical that tons of mails had passed through this IP since a LOT of people is connected, I already pass this IP to whitelist and would like you to take into consideration this IP since it will probably exibit behavior of mails spam, for obvious reasonss.
June 04 2009 02:49 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
June 04 2009 02:40 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:00:05. Documented reason for whitelist: Mistaken Listing
June 04 2009 02:39 PM

Page generated on: November 22 2009 12:08:48 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Contact Us

Copyright © 2004–09, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email