IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

75.150.80.105

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	United States

Harvester First Seen	approximately 2 years, 3 months, 4 weeks ago
Harvester Last Seen	within 2 years, 3 months, 4 weeks
Harvester Sightings	2 visit(s)
Harvester Results	2 messages per visit 4 message(s) resulting from harvests - First: approximately 2 years, 3 months, 4 weeks ago - Last: approximately 2 years, 2 months, 5 weeks ago 2 email address(es) harvested - First: approximately 2 years, 3 months, 4 weeks ago - Last: Wed, 21 Oct 2009 11:07:21 -0700

Associated Mail Servers
72.80.28.13 \| S
75.146.51.78
75.148.116.201 \| S
208.64.33.178

IPs In The Neighborhood
75.150.79.229
75.150.79.233 \| SD
75.150.79.245
75.150.79.250 \| S
75.150.80.30
75.150.80.45
75.150.80.65
75.150.80.161 \| SD
75.150.80.201
75.150.81.9
75.150.81.73 \| S

75.150.80.105's User Agent Strings

Mozilla/4.0 (compatible; MSIE 6.0; Win32)

2 comment(s) - Comment on this IP | Collapse All

H.User581 commented...

On 12/2/09 received phisher spoof email originating from this IP but purporting to be from Bank of America regarding alleged unauthorized login attempts requiring suspension of online banking priveleges. Recipient then directed to phisher site to enter personal information. Reported to UCE and BoA.
December 02 2009 04:55 AM

L.DelCueto commented...

On 9/13 someone using IP 75.150.80.105 ran what appears to be a brute force attack on our mail server several attempts lasting about 2 minutes. Attaching portions of SMTP log:

75.150.80.105 [000005B0] Sun, 13 Sep 2009 09:11:38 -0400 >>> 220 mail.ldc-networks.net ESMTP LDCCS Mail Server v1.0; Sun, 13 Sep 2009 09:11:38 -0400
75.150.80.105 [0000067C] Sun, 13 Sep 2009 09:11:38 -0400 > 334 VXNlcm5hbWU6
75.150.80.105 [00000560] Sun, 13 Sep 2009 09:11:38 -0400 > 334 VXNlcm5hbWU6
75.150.80.105 [00000244] Sun, 13 Sep 2009 09:11:39 -0400 > 250-mail.ldc-networks.net Hello windows [75.150.80.105], pleased to meet you.
75.150.80.105 [0000063C] Sun, 13 Sep 2009 09:11:39 -0400
September 14 2009 06:09 AM

Page generated on: February 14 2012 03:02:11 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot