IP Address Inspector

121.54.54.47

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server and dictionary attacker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Philippines
Spider First Seen approximately 2 years, 10 months, 4 weeks ago
Spider Last Seen within 1 week
Spider Sightings 108 visit(s)
User-Agents seen with 30 user-agent(s)

First Received From approximately 2 years, 11 months, 2 weeks ago
Last Received From within 1 week
Number Received 7,100 email(s) sent from this IP

Dictionary Attacks 2,434 email(s) sent from this IP
First Received From approximately 2 years, 11 months, 2 weeks ago
Last Received From within 1 week

Associated Harvesters
66.232.123.38 | HS
66.90.95.245 | H
81.208.83.241 | HSD
98.173.195.47 | HS
212.183.136.194 | H
65.93.200.165 | H
85.99.38.95 | HS
69.50.209.150 | H
124.120.71.40 | HS
89.113.74.123 | H
201.243.39.33 | H
85.99.214.105 | HS
203.114.116.5 | H
203.144.232.39 | HS
87.1.195.44 | H
71.87.206.81 | HSD
211.131.156.100 | H
201.9.7.131 | HSD
64.7.161.15 | H
62.65.183.38 | HSDC
24.13.226.241 | H
204.9.52.5 
83.8.232.8 | HSD
64.231.101.252 | H
60.39.206.195 | H
76.109.206.211 | H
24.49.222.41 | H
212.67.21.160 | HS
71.83.51.29 | HS
64.52.8.74 | HS
131.95.180.32 | H
71.56.224.179 | HC
172.182.63.103 | H
172.174.114.80 | H
203.144.143.8 | HC
172.183.108.159 | H
202.60.91.35 | H
77.125.29.243 | H
58.110.139.203 | H
68.190.205.98 | H
89.138.211.172 | HS
24.180.29.14 | H
221.135.246.118 | H
213.103.243.157 | H
207.150.196.55 | HS
222.149.215.44 | H
75.125.168.178 | H
216.40.222.50 | H
208.66.195.7 | H
216.40.222.98 | H
74.86.209.74 | H
216.40.220.34 | H
208.66.195.5 | H
75.125.52.146 | H
74.86.249.98 | H
75.125.52.82 | H
70.84.228.42 | H
216.40.220.18 | H
209.160.65.42 | H
80.90.232.1 | HSD
208.66.195.4 | H
75.125.47.162 | HSDW
217.12.118.122 | HSD
67.19.114.226 | H
208.66.195.10 | H
64.34.255.239 | HC
208.66.195.2 | H
74.86.14.10 | H
216.40.222.66 | H
67.19.122.2 | H
208.53.147.89 | H
221.126.252.185 | H
216.37.217.29 | H
91.105.35.138 | H
66.246.252.117 | HSD
IPs In The Neighborhood
121.54.53.147
121.54.53.149
121.54.53.151
121.54.53.174
121.54.53.249 | SD
121.54.53.250 | SD
121.54.53.251 | SD
121.54.53.252 | SD
121.54.53.253 | SD
121.54.53.254 | SD
121.54.54.1
121.54.54.21
121.54.54.32 | SD
121.54.54.33 | SD
121.54.54.34 | SD
121.54.54.35 | SD
121.54.54.36 | SD
121.54.54.37 | SDC
121.54.54.38 | SD
121.54.54.39 | SD
121.54.54.40 | SD
121.54.54.41 | SD
121.54.54.42 | SD
121.54.54.43 | HSD
121.54.54.44 | SDC
121.54.54.45 | SDC
121.54.54.46 | SD
121.54.54.48 | SD
121.54.54.49 | SDC
121.54.54.50 | SD
121.54.54.51 | SD
121.54.54.52 | SD
121.54.54.53 | SD
121.54.54.54 | SD
121.54.54.55 | SD
121.54.54.56 | HSD
121.54.54.57 | SD
121.54.54.58 | SD
121.54.54.59 | SD
121.54.54.60 | SD
121.54.54.61 | SD
121.54.54.62 | SD
121.54.54.63 | SD
121.54.54.82
121.54.54.84
121.54.54.120 | SD
121.54.54.121 | SD
121.54.54.122 | SD
121.54.54.123 | SD
121.54.54.124 | SD
121.54.54.125 | SD
121.54.54.126 | SD
121.54.54.127 | SD
121.54.54.128 | SD
121.54.54.129 | SD
121.54.54.130 | SD
121.54.54.131 | SD
121.54.54.132 | SD
121.54.54.133 | SD
121.54.54.134 | SD
121.54.54.135 | SD
121.54.54.136 | SD
121.54.54.137 | SD
121.54.54.138 | SD
121.54.54.139 | SD
121.54.54.140 | SD
121.54.54.141 | SD
121.54.54.142 | SD
121.54.54.143 | SD
121.54.54.144 | SD
121.54.54.145 | SD
121.54.54.146 | SD
121.54.54.147 | SD
121.54.54.148 | SD
121.54.54.149 | SD
121.54.54.150 | SD
121.54.54.151 | SD
121.54.54.152 | SD
121.54.54.153 | SD
121.54.54.154 | SD
121.54.54.155 | SD
121.54.54.156 | SD
121.54.54.157 | SD
121.54.54.158 | SD
121.54.54.159 | SD
121.54.54.197
121.54.54.198
121.54.54.200
121.54.54.209
121.54.54.254
121.54.54.47's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; ShopperReports 3.0.470.0; SRS_IT_E8790271BD765B5037A097)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; AT&T CSM8.2; .NET CLR 1.0.3705)
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; Ant.com Toolbar 1.6; SIMBAR={DFEC7087-931E-49BF-A93F-48B898B13809}; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; InfoPath.3)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; SRS_IT_E8790472B1765F5537A896)
Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; GTB6.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; eSobiSubscriber 2.0.4.16; InfoPath.1; .NET4.0C)
Mozilla/5.0 (compatible; Genieo/1.0 http://www.genieo.com/webfilter.html)
Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Mozilla/5.0 (iPad; CPU OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A403 Safari/8536.25
Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B208 Safari/7534.48.3
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.151 Safari/535.19
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.202 Safari/535.1
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.874.121 Safari/535.2
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.77 Safari/535.7
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.8 (KHTML, like Gecko) Chrome/17.0.942.0 Safari/535.8
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.52 Safari/536.5
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.64 Safari/537.11
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.172 Safari/537.22
Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/25.0.1364.97 Safari/537.22
Mozilla/5.0 (Windows NT 5.1; rv:16.0) Gecko/20100101 Firefox/16.0
Mozilla/5.0 (Windows NT 5.1; rv:19.0) Gecko/20100101 Firefox/19.0
Mozilla/5.0 (Windows NT 5.1; rv:20.0) Gecko/20100101 Firefox/20.0
Mozilla/5.0 (Windows NT 5.1; rv:5.0.1) Gecko/20100101 Firefox/5.0.1
Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Example Messages Sent From 121.54.54.47
From:
Subject: Make Money Online
From:
Subject: Wow... This Is My Stock Discovery Of A Lifetime!
From:
Subject: This Stock is Back!
From:
Subject: Your transaction is completed
From:
Subject: Your transaction is completed
From:
Subject: Мега пр
From:
Subject: Мега пр
From:
Subject: Мега пр
From:
Subject: Мега пр
From:
Subject: Мега пр
From:
Subject: Мега пр
From:
Subject: Мега пр
From:
Subject: invoice copy
Example User Names Used By 121.54.54.47
User-name: 1224796611
User-name: 129471
User-name: 2sects2
User-name: 3354660701
User-name: 4113857201
User-name: 43d6b862.3010900
User-name: 43d6bb0c.7060300
User-name: 43d6bb0e.7040808
User-name: 46c73280.2000302
User-name: 46c97cb1.2050306
User-name: 46c97ef6.2050306
User-name: 470c0603.3020203
User-name: 8
User-name: 88931016-wd
User-name: aafljnraltmann
User-name: aamjustsendingthisleter
User-name: ab
User-name: abbounleut
User-name: abondjfafdj
User-name: acnadjfafdj
User-name: acnddjfafdj
User-name: acnrdjfafdj
User-name: acnudjfafdj
User-name: acnxdjfafdj
User-name: adanpdjfafdj
User-name: adm
User-name: af88dssw_miyachi
User-name: agidaja
User-name: agnadijfafdj
User-name: ahchan-cha
Honey Pot System commented...
WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
April 29 2013 01:05 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
April 27 2013 03:40 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 04:20:25. Documented reason for whitelist: Mistaken Listing
April 26 2013 11:14 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
April 04 2013 09:50 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:52:05. Documented reason for whitelist: Belongs to Search Engine
April 04 2013 08:48 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
July 06 2012 11:43 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
July 05 2012 06:40 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:10:25. Documented reason for whitelist: Owner of a Dynamic IP Address
July 05 2012 06:23 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
December 03 2011 11:19 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
December 03 2011 12:10 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:02:05. Documented reason for whitelist: Hit by a virus or trojan
December 03 2011 12:05 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
October 10 2011 12:40 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:00:25. Documented reason for whitelist: Mistaken Listing
October 10 2011 12:35 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been REMOVED from Project Honey Pot whitelists; bad activity was encountered.
March 23 2011 11:34 PM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been whitelisted. Future bad activity will result in automatic removal.
March 23 2011 08:00 AM

Honey Pot System commented...
WHITELIST NOTICE: This IP has been marked to be included on Project Honey Pot whitelists. The whitelist is scheduled with a delay of 00:00:05. Documented reason for whitelist: Mistaken Listing
March 23 2011 07:55 AM

F.Heinzmann commented...
Looks like he is trying to run some kind of script:
/lazarusgb/?entry=10/javascript:letmein()/javascript:letmein()/javascript:letmein()/javascript:letmein()/javascript:letmein()/javascript:letmein()/
July 21 2010 10:09 PM

Page generated on: May 18 2013 01:10:10 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–13, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email