IP Address Inspector

200.94.21.2

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Mexico (Mexico, Distrito Federal)
Spider First Seen approximately 2 years, 6 months, 2 weeks ago
Spider Last Seen within 1 year, 4 months, 3 weeks
Spider Sightings 10 visit(s)
User-Agents seen with 8 user-agent(s)
First Received From approximately 3 years, 6 months, 4 weeks ago
Last Received From within 4 weeks
Number Received 1,562 email(s) sent from this IP
First Post On approximately 1 year, 4 months, 3 weeks ago
Last Post On within 1 year, 4 months, 3 weeks
Form Posts 1 web post submission(s) sent from this IP
Dictionary Attacks 183 email(s) sent from this IP
First Received From approximately 3 years, 6 months, 1 week ago
Last Received From within 1 year, 5 months, 1 week
Associated Harvesters
87.118.98.62 | H
24.10.171.26 | HS
24.57.1.238 | H
24.75.192.34 | H
41.209.121.78 | HSD
58.1.134.137 | H
61.145.185.15 | H
62.193.27.247 | H
62.193.27.250 | H
62.194.11.221 | H
62.194.12.141 | H
64.34.174.33 | H
64.38.35.162 | H
64.231.116.200 | H
66.90.101.55 | HC
66.90.101.66 | H
66.90.101.75 | H
66.98.184.81 | H
66.148.67.104 | H
66.167.50.101 | H
66.199.236.50 | H
66.199.246.138 | H
66.246.252.117 | HSD
67.15.130.23 | H
67.18.200.5 | H
67.19.114.226 | H
67.19.122.2 | H
67.19.250.26 | H
67.171.161.172 | HC
68.103.197.12 | H
69.41.171.15 | H
69.64.73.123 | H
70.84.55.114 | HC
70.85.113.242 | H
70.85.172.170 | H
71.82.22.114 | H
71.83.51.29 | HS
71.206.81.186 | HC
71.231.246.187 | H
72.88.141.212 | HS
74.53.249.34 | HW
74.54.110.194 | H
74.86.14.10 | H
74.86.209.74 | H
74.86.249.98 | H
74.124.192.3 | H
75.51.169.122 | H
75.108.103.116 | H
75.125.18.178 | H
75.125.47.162 | HSDW
75.125.52.66 | H
75.125.52.82 | H
75.125.52.98 | HS
75.125.52.146 | H
75.125.52.162 | H
76.74.153.27 | H
77.200.246.35 | H
77.250.220.51 | H
79.74.248.84 | H
80.245.176.113 | HS
81.169.235.251 | HC
81.237.234.187 | H
82.140.78.21 | HSD
82.208.169.20 | HS
84.31.219.156 | H
84.82.219.223 | H
84.232.149.16 | H
85.98.17.36 | HSD
85.101.179.7 | HS
85.106.162.34 | HS
85.107.4.201 | HS
85.112.33.228 | H
86.39.2.230 | HS
86.209.165.65 | H
87.167.213.74 | H
IPs In The Neighborhood
200.94.20.61 | SD
200.94.20.78 | S
200.94.20.82 | SDC
200.94.20.86
200.94.20.90
200.94.20.115 | S
200.94.20.202 | SD
200.94.20.254 | S
200.94.21.32
200.94.21.50 | S
200.94.21.59 | SD
200.94.21.69 | S
200.94.21.130 | SD
200.94.21.146 | SD
200.94.21.162 | S
200.94.21.196 | S
Sample Spam URLs & Keywords Posted From 200.94.21.2
Domain: pulse.yahoo.com
URL: http://pulse.yahoo.com/_7ZBHPZN6MRZ464AMKGHQTU6HXM/blog/articles/202421
Keywords: phentermine no rx us licensed pharmacies
Domain: connect.silive.com
URL: http://connect.silive.com/user/Tramadol-Online-s149m/index.html
Keywords: tramadol active ingredients
Domain: connect.al.com
URL: http://connect.al.com/user/Xanax-Online-9149m/index.html
Keywords: buy xanax without a prescription
200.94.21.2's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB6.5; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MRA 4.3 (build 01218))
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
Mozilla/5.0 (Windows; U; Windows NT 6.1; es-ES; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
Example Messages Sent From 200.94.21.2
From:
Subject: =?koi8-r?B?U29sdXRpb24gZm9yIHBlb3BsZSB3aG8gY2Fuk=?=
From:
Subject: We offer high-valued but low-priced watches.
From:
Subject: Our store offers lowest price
From:
Subject: Want to save money when you buy earrings? Low pric
From:
Subject: Only now we lowered our prices for branded and sty
From:
Subject: A wide range of branded earrings is presented on o
From:
Subject: Every girl dreams about wearing all the accessorie
From:
Subject: Learn how to make your wife to stop cheating on yo
From:
Subject: Ladies will come up to you on the streets if you w
From:
Subject: Creating vivid images is easier with the latest Fl
From:
Subject: Upgrading Flash Professional for Mac for $69,95, y
From:
Subject: eos1216@mail7.kincheloe.name, 81% huge discout, 00
From:
Subject: kevin.u.piquette@mailrelay30.piirakka.com, 82% dis
From:
Subject: kevin.u.luehring@stuff.dvsi.net, 89% discout on Pf
From:
Subject: The prosperity starts with original looking access
From:
Subject: You will get your new diploma
From:
Subject: 87% discout on Pfizer, 6153025
From:
Subject: 70% discout on Pfizer, 2919
From:
Subject: Only a few dollars needed for
From:
Subject: Only Mont Blanc pen can raise your authority among
From:
Subject: Seen the size of our rebates? vyzkpet
From:
Subject: pearl_anzures@news.thetimeswitch.com Rolex Today -
From:
Subject: 2012 год - мешок с деньгами
From:
Subject: rubioandreoli@mail666.drissman.com Rolex Today -03
From:
Subject: tradeinepisode@mail2.chadderton.com Rolex Today -4
Example User Names Used By 200.94.21.2
User-name: 092-713-1689.murakami
User-name: 3dsimon
User-name: aamjustsendingthisleter
User-name: abmndjfafdj
User-name: acnadjfafdj
User-name: acnidjfafdj
User-name: afbndrjfafdj
User-name: ahdnedgjfafdj
User-name: amabelwxvxf
User-name: aonmdwjefafdj
User-name: arouchejeri
User-name: avto
User-name: bandjfmafdj
User-name: bank
User-name: barnette
User-name: bbtndjfvafdj
User-name: bcntdjfiafdj
User-name: bddnodjfcafdj
User-name: bgcib
User-name: billharziara
User-name: bsnlo
User-name: buh
User-name: buhg
User-name: buhgalter
User-name: buhgalteria
User-name: bux
User-name: cdqnydjfacfdj
User-name: cfqndtjfawfdj
User-name: cknldjkfahfdj
User-name: collect
0 comment(s) - Comment on this IP
Page generated on: February 10 2012 10:18:13 PM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Twitter Button from twitbuttons.com


Follow projecthoneypot on Twitter

do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email