IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

85.21.81.120

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Russia (More, Leningrad)
Spider First Seen	approximately 2 years, 9 months, 4 weeks ago
Spider Last Seen	within 2 years, 6 months, 4 weeks
Spider Sightings	270 visit(s)
User-Agents	seen with 9 user-agent(s)

First Received From	approximately 3 years, 9 months, 3 weeks ago
Last Received From	within 2 years, 7 months, 4 weeks
Number Received	20 email(s) sent from this IP

First Post On	approximately 2 years, 9 months, 4 weeks ago
Last Post On	within 2 years, 6 months, 4 weeks
Form Posts	139 web post submission(s) sent from this IP

Associated Harvesters
69.64.73.123 \| H
208.65.60.145 \| H
74.86.249.98 \| H
74.53.249.34 \| HW
208.66.195.4 \| H
216.40.222.66 \| H
211.3.200.236 \| H
216.40.222.50 \| H
70.84.212.114 \| H
208.66.195.8 \| H
75.125.194.194 \| HS
208.66.195.19 \| H
208.53.147.136 \| H
69.50.208.24 \| H
64.20.38.178 \| H
74.86.14.10 \| H
208.66.195.5 \| H
74.86.209.74 \| H

IPs In The Neighborhood
85.21.80.206 \| S
85.21.80.241 \| S
85.21.81.50 \| SD
85.21.81.66 \| S
85.21.81.89 \| S
85.21.81.90 \| SD
85.21.81.114 \| S
85.21.81.121
85.21.81.150 \| SD
85.21.81.178 \| S
85.21.81.184 \| SD
85.21.81.185 \| S
85.21.81.187 \| S
85.21.81.188 \| S
85.21.81.242 \| S
85.21.82.18 \| S

Sample Spam URLs & Keywords Posted From 85.21.81.120

Domain: udqvvlocjklv.com
URL: http://udqvvlocjklv.com/
Keywords: udqvvlocjklv

Domain: mllkgponsxij.com
URL: http://mllkgponsxij.com/
Keywords: mllkgponsxij

Domain: rjxjcmptgtgi.com
URL: http://rjxjcmptgtgi.com/
Keywords: mllkgponsxij

Domain: wss-id.org
URL: http://wss-id.org/members/kristindavissextape.aspx
Keywords: kristin davis sex tape

Domain: wss-id.org
URL: http://wss-id.org/members/mortgageratespredictions.aspx
Keywords: mortgage rates predictions

Domain: wss-id.org
URL: http://wss-id.org/members/nocreditcheckstudentloan.aspx
Keywords: high risk no credit check student loan

Domain: wss-id.org
URL: http://wss-id.org/members/lindsaylohansextape.aspx
Keywords: watch lindsay lohan sex tape

Domain: wss-id.org
URL: http://wss-id.org/members/chanelpurses.aspx
Keywords: cheap chanel purses

Domain: www.worldusabilityday.org
URL: http://www.worldusabilityday.org/en/users/watchmywife#1
Keywords: watch my wife online

Domain: www.worldusabilityday.org
URL: http://www.worldusabilityday.org/en/users/megwhitesextape#1
Keywords: meg white sex tape

Domain: www.worldusabilityday.org
URL: http://www.worldusabilityday.org/en/users/kimkardashiansextape#1
Keywords: kim kardashian sex tape

Domain: www.worldusabilityday.org
URL: http://www.worldusabilityday.org/en/users/insurancesamplecancellationletter#1
Keywords: good insurance sample cancellation letter

Domain: www.worldusabilityday.org
URL: http://www.worldusabilityday.org/en/users/studentdebtconsolidationloans#1
Keywords: student debt consolidation loans card

Domain: showhype.com
URL: http://showhype.com/profile/coach_handbags/

Domain: showhype.com
URL: http://showhype.com/profile/fake_coach_purses/

85.21.81.120's User Agent Strings

Mozilla/4.0 (compatible; MSIE 4.0; Windows NT 5.1) [en]

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.3 (build 01218); .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)

Mozilla/4.0 (Windows 98; U; MEGAUPLOAD 1.0; en-AU; rv:1.8.0) Gecko/20050728 Firefox/1.4.0

Mozilla/5.0 (Windows Vista; U; en-AU; rv:1.7.5) Gecko/20041110

Mozilla/6.0 (X11; U; Linux i686; en-GB; rv:1.8.1.2) Gecko/20070221 SUSE/2.0.0.2-6.1 Firefox/2.0.0.2

Opera/9.00 (Windows NT 4.0; U; en)

Example Messages Sent From 85.21.81.120

From:
Subject: =?windows-1251?B?weXx7/Du4u7k7fvlIOLo5OXu6uDs5fD7L=?=

From:
Subject: =?windows-1251?B?wujk5e7q4Ozl8Psg8SDs6Orw7vTu7e7sI=?=

From:
Subject: Íóæíîå ìåñòî_dejs

From:
Subject: Ðàçâðàòíàÿ ñåñòðà_maxt

From:
Subject: Ìàðèþ Øàðàïîâó òðàõàþò ðàêîì_cyfy

From:
Subject: ß õî÷ó ñåêñà âñåãäà_lxew

From:
Subject: gcdhrupsly

From:
Subject: folwmhqxaf

From:
Subject: ifbhxklibd

From:
Subject: aijyscrfjw

From:
Subject: gsnxwttncg

From:
Subject: jvbiltfhbz

From:
Subject: glqmsakirh

From:
Subject: hufcsduaqw

From:
Subject: ildlcesvfz

From:
Subject: lasyutvwno

From:
Subject: emufrcpudr

From:
Subject: rcfxljpffd

From:
Subject: dkvkufwdvi

From:
Subject: gozjjsnyln

0 comment(s) - Comment on this IP

Page generated on: February 12 2012 11:41:27 PM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this paged from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot