IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

81.169.145.25

The Project Honey Pot system has detected behavior from the IP address consistent with that of a spam harvester and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Germany

Harvester First Seen approximately 6 years, 6 months, 2 weeks ago
Harvester Last Seen within 1 year, 7 months, 2 weeks
Harvester Sightings 596 visit(s) to 9 honey pot(s)
Harvester Results 0.034 messages per visit
20 message(s) resulting from harvests
- First: approximately 6 years, 5 months, 3 weeks ago
- Last: approximately 3 years, 7 months, 3 weeks ago
452 email address(es) harvested
- First: approximately 6 years, 6 months, 2 weeks ago
- Last: Thu, 14 Aug 2008 09:55:55 -0700
Time From Harvest
To First Spam
Fastest: 1 day, 5 hours, 51 mins, 2 secs
Slowest: 1 month, 1 week, 3 days, 6 hours, 59 mins, 15 secs
Average: 2 weeks, 1 day, 17 hours, 24 mins, 45 secs
Std Dev: 2 weeks, 2 days, 3 hours, 41 mins, 43 secs

First Post On approximately 6 years, 4 weeks ago
Last Post On within 5 years, 8 months, 5 weeks
Form Posts 2 web post submission(s) sent from this IP

Associated Mail Servers
58.61.155.65 | S
58.71.7.20 | S
59.12.239.106 | SD
62.23.221.88 | S
62.225.1.71 | SD
63.151.40.201 
66.64.162.124 | S
77.186.160.44 | S
80.55.79.54 | S
81.169.140.177 | SD
85.10.221.194 | S
86.109.165.35 | S
124.105.79.185 | SD
195.25.44.1 | S
195.47.1.41 | S
196.219.109.41 | SD
207.188.23.144 | S
209.133.32.154 | S
212.216.176.236 | SD
217.114.219.158 
IPs In The Neighborhood
81.169.144.135 | HR
81.169.144.167
81.169.144.248
81.169.144.249
81.169.145.1
81.169.145.3
81.169.145.11 | H
81.169.145.28 | HC
81.169.145.35
81.169.145.36
81.169.145.39 | W
81.169.145.47
81.169.145.61
81.169.145.65 | W
81.169.145.66 | W
81.169.145.67 | W
81.169.145.68 | W
81.169.145.69 | W
81.169.145.70 | W
81.169.145.71 | W
81.169.145.72 | W
81.169.145.73 | W
81.169.145.74 | W
81.169.145.75 | W
81.169.145.80 | W
81.169.145.81 | W
81.169.145.82 | W
81.169.145.83 | W
81.169.145.84 | W
81.169.145.85 | W
81.169.145.86 | W
81.169.145.87 | W
81.169.145.88 | W
81.169.145.89 | W
81.169.145.90 | W
81.169.145.91 | W
81.169.145.98
81.169.145.99
81.169.145.100
81.169.145.101
81.169.145.102
81.169.145.105 | W
81.169.145.118 | W
81.169.145.119
81.169.145.132
81.169.145.133
81.169.145.136
81.169.145.144 | W
81.169.145.145 | W
81.169.145.146 | W
81.169.145.147 | W
81.169.145.148 | W
81.169.145.149 | W
81.169.145.150 | W
81.169.145.151 | W
81.169.145.152 | W
81.169.145.153 | W
81.169.145.154 | W
81.169.145.155 | W
81.169.145.156 | W
81.169.145.157 | W
81.169.145.158 | W
81.169.145.159 | W
81.169.145.160 | W
81.169.145.161 | SW
81.169.145.162 | W
81.169.145.163 | W
81.169.145.164 | W
81.169.145.165 | W
81.169.145.166 | SW
81.169.145.167 | SW
81.169.145.168 | W
81.169.145.169 | W
81.169.145.170
81.169.145.173
81.169.145.174 | S
81.169.145.175 | S
81.169.145.176 | S
81.169.145.179 | S
81.169.145.187 | W
81.169.145.192 | W
81.169.145.194 | W
81.169.145.195 | W
81.169.145.196 | W
81.169.145.221 | W
81.169.145.223 | W
81.169.145.224 | W
81.169.145.226 | W
81.169.145.238
Sample Spam URLs & Keywords Posted From 81.169.145.25
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: банзай порно
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бане рассказы порно
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: создам порно сайт
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бандаж порно фото
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бандаж порно
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: создание порно
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бананы порно видео
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: банан порно фото
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бан ip на порносайте
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: создать порно бизнес
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: создать свой порно сайт
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бальзаковское порно фото
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бальзаковское порно
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: бальзаковский секс порно фото
Domain: tikosra.times.lv
URL: http://tikosra.times.lv
Keywords: балок порно
81.169.145.25's User Agent Strings
none/blank
3GSE bot (Internet Research Institute UK, http://iri-uk.com)
Acoon-Robot 4.0.0RC2 (http://www.acoon.de)
Acoon-Robot 4.0.2.17 (http://www.acoon.de)
betaBot
CyberPatrol SiteCat Webbot (http://www.cyberpatrol.com/cyberpatrolcrawler.asp)
DotBot/1.0.1 (http://www.dotnetdotcom.org/#info, crawler@dotnetdotcom.org)
EmeraldShield.com Web Spider (http://www.emeraldshield.com/webbot.aspx)
Eurobot/1.0 (http://www.ayell.eu)
findlinks/1.1.4-beta1 (+http://wortschatz.uni-leipzig.de/findlinks/)
Gigabot/3.0 (http://www.gigablast.com/spider.html)
gonzo1[D] +http://www.suchen.de/faq.html
gonzo1[P] +http://www.suchen.de/faq.html
ia_archiver
ICCrawler - ICjobs (http://www.icjobs.de/bot.htm)
Jakarta Commons-HttpClient/3.0.1
Jakarta Commons-HttpClient/3.1
Java1.4.0_01
Java/1.4.1_04
Java/1.5.0_10
Java/1.6.0_01
Java/1.6.0_02
Java/1.6.0_03
Java/1.6.0_04
Java/1.6.0_05
Java/1.6.0_06
Java/1.6.0_07
libwww-perl/5.805
MLBot (www.metadatalabs.com/mlbot)
Mozilla
T.Otsubo commented...
23 hits on my site using the following in the URL: ../../../../etc/passwd%00 Banned again.
January 10 2013 07:21 AM

T.Otsubo commented...
Sent an email to abuse@strato.de and received this message back: Dear Sirs,

thank you for your message.

Unfortunately we cannot further help you, because the IP 81.169.145.25 belongs to our STRATO Loadbalancer. It distributes incoming requests amongst different servers to evenly disseminate the load. Due to the reason that the incoming load is very high, we cannot keep connection logs in our data center. A further investigation is therefore not possible.

Queries originating from the above mentioned IP-address might be due to a STRATO customer activating a redirect. We use a proxy (Loadbalancer) for this redirect, which uses the above mentioned IP.

Yours sincerely,

STRATO AG | Abuse Management
December 18 2012 01:32 PM

T.Otsubo commented...
This IP has been hitting my site over and over for the past day.
December 11 2012 12:50 PM

M.Prosper commented...
The trojan javascript code JS:Redirector-H2 has been inserted into my website by this server. They got in through an unsecured FTP space.
May 13 2009 02:29 PM

B.Morris3 commented...
@ B.Kennedy4... the same thing is happening to a client of mine. It is something on his computer or connection. I found this by insulating him to a specific FTP folder and the injection took place last night with the rest of the site unaffected. I will report back when I find out more from him.
April 21 2009 05:19 AM

B.Kennedy4 commented...
This ip address 81.169.145.25 has been showing up on my logs in the past two weeks. Code has been inserted into my .html files, php files and js files.

I strip it out and it is back again 2 days later.
April 11 2009 02:20 PM

R.L7 commented...
Had http POSTS from this ip to our web site. United States. User-agent is WordPress/2.7.1?
March 13 2009 06:55 AM

Page generated on: October 30 2014 08:29:17 AM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–14, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email