IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

120.50.54.20

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker and comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Malaysia
Spider First Seen approximately 2 years, 3 months, 1 week ago
Spider Last Seen within 1 year, 1 month, 2 weeks
Spider Sightings 253 visit(s)
User-Agents seen with 30 user-agent(s)

First Received From approximately 2 years, 3 months, 4 weeks ago
Last Received From within 2 years, 3 months, 1 week
Number Received 147 email(s) sent from this IP

First Post On approximately 2 years, 3 months, 1 week ago
Last Post On within 1 year, 1 month, 3 weeks
Form Posts 92 web post submission(s) sent from this IP

Dictionary Attacks 22 email(s) sent from this IP
First Received From approximately 2 years, 3 months, 3 weeks ago
Last Received From within 2 years, 3 months, 2 weeks

Associated Harvesters
74.86.209.74 | H
69.50.209.150 | H
216.40.220.34 | H
75.125.194.210 | H
195.22.188.134 | H
77.199.185.124 | H
206.51.234.73 | H
66.96.216.133 | HS
70.84.55.114 | HC
208.66.195.5 | H
216.40.222.50 | H
24.98.51.132 | HS
70.85.113.242 | H
216.40.222.98 | H
208.66.195.6 | H
200.68.90.109 | HS
207.172.125.35 | H
60.229.251.131 | HS
216.40.220.18 | H
62.193.27.250 | H
66.79.162.195 | H
82.205.146.212 | HC
208.66.195.9 | H
74.53.249.34 | HW
85.167.144.135 | HS
74.124.192.3 | H
75.125.168.178 | H
75.125.194.194 | HS
74.53.249.178 | H
213.196.11.4 | H
87.126.151.134 | HS
75.125.52.146 | H
208.66.195.7 | H
24.1.88.66 | H
201.79.93.166 | HS
216.12.207.226 | HC
91.189.162.4 | HS
208.66.195.10 | H
208.66.195.4 | H
66.246.252.117 | HSD
67.19.114.226 | H
222.77.178.187 | H
74.54.60.194 | H
209.160.65.42 | H
68.78.77.106 | H
75.125.52.82 | H
75.125.52.162 | H
70.84.228.106 | H
81.169.225.52 | H
62.194.10.101 | H
208.66.195.8 | H
75.125.47.162 | HSDW
189.79.112.189 | HS
208.101.44.3 | H
86.58.24.118 | H
75.125.18.178 | H
81.169.235.251 | HC
122.167.138.131 | HS
69.117.225.36 | H
216.40.222.82 | HSD
208.53.138.64 | H
66.158.133.145 | HS
82.77.166.90 | H
IPs In The Neighborhood
120.50.54.12 | SD
Sample Spam URLs & Keywords Posted From 120.50.54.20
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~did+levaquin+cure+sinus
Keywords: did levaquin cure sinus
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~brain+zaps+coming+off+antidepressants
Keywords: brain zaps coming off antidepressants
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~lorazepam+without+an+rx
Keywords: lorazepam without an rx
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~fioricet+for+backaches
Keywords: fioricet for backaches
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~levaquin+fresno+california
Keywords: levaquin fresno california
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~lasix
Keywords: lasix
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~2%2525+lidocaine+w+epi
Keywords: 2% lidocaine w epi
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~metformin+study
Keywords: metformin study
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~antibiotic+ointments+with+lidocaine
Keywords: antibiotic ointments with lidocaine
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~lorazepam+shoot+up
Keywords: lorazepam shoot up
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~alcohol+and+lithium+and+lamictal+and+wellbutrin
Keywords: alcohol and lithium and lamictal and wellbutrin
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~vicodin+prescription+approved+online+questionnaire
Keywords: vicodin prescription approved online questionnaire
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~levitra+doses
Keywords: levitra doses
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~efficacy+of+naltrexone+for+alcohol+abuse
Keywords: efficacy of naltrexone for alcohol abuse
Domain: wiki.compiere.com
URL: http://wiki.compiere.com/display/~did+levaquin+cure+sinus
Keywords: efficacy of naltrexone for alcohol abuse
120.50.54.20's User Agent Strings
CheckUrl
Diamond/x.0
FAST Enterprise Crawler 6 (Experimental)
Mozilla/0.6 Beta (Windows)
Mozilla/0.91 Beta (Windows)
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)
Mozilla/3.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; ICS)
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 5.0; Mac_PowerPC; AtHome021)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 2000) Opera 6.0 [en]
Mozilla/4.0 (compatible; MSIE 5.0; Windows 3.1)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95; BCD2000)
Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; KITV4.7 Wanadoo)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; T312461)
Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; APC; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.50215; InfoPath.1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Avant Browser [avantbrowser.com]; Hotbar 4.4.5.0)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; KTXN)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)
Example Messages Sent From 120.50.54.20
From:
Subject: SOLDOUT-I selling rolexes. do you want one? cheap
From:
Subject: SOLDOUT-I selling rolexes. do you want one? cheap
From:
Subject: SOLDOUT-I selling rolexes. do you want one? cheap
From:
Subject: SOLDOUT-We selling ROLE>
From:
Subject: SOLDOUT-We selling ROLE>
From:
Subject: SOLDOUT- cheap prices for watches .. cheap prices
From:
Subject: SOLDOUT- cheap prices for watches .. cheap prices
From:
Subject: SOLDOUT- cheap prices for watches .. cheap prices
From:
Subject: SOLDOUT-Rolex -200$ Omega 200- and others yn9i
Example User Names Used By 120.50.54.20
User-name: 43d6b862.3010900
User-name: 43d6bb0c.7060300
User-name: 43d6bb0e.7040808
User-name: accounts
User-name: admin
User-name: administrator
User-name: advertising
User-name: billing
User-name: clj
User-name: czscsa
User-name: dgfn
User-name: help
User-name: home
User-name: info
User-name: katerine
User-name: katerine_
User-name: mail
User-name: majordomo
User-name: root
User-name: sales
User-name: uucp
User-name: webmaster
A.Bv commented...
Part of a botnet trying to exploit ASP.NET padding oracle vulnerability
October 11 2010 03:04 PM

C.Hill3 commented...
spammer with:
65.111.184.207
75.148.118.189
80.74.110.149
82.114.160.34
82.114.160.35
82.114.160.37
83.15.4.100
87.234.60.165
87.245.187.244
95.62.147.8
120.50.54.20
120.50.62.83
122.128.100.21
122.166.47.134
187.11.229.48
190.14.254.162
190.102.206.48
190.202.110.210
190.213.49.51
193.254.217.58
196.219.213.69
200.3.220.243
200.110.244.81
200.143.141.133
200.217.76.37
201.22.95.137
210.212.130.54
210.212.214.183
217.21.115.189
222.255.27.154
222.255.27.159
222.255.27.162
December 07 2009 07:57 AM

Page generated on: February 11 2012 10:16:18 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–12, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email