IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

202.112.49.247

The Project Honey Pot system has detected behavior from the IP address consistent with that of a mail server, dictionary attacker, comment spammer and bad web host. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location China
Spider First Seen approximately 4 years, 3 months, 3 weeks ago
Spider Last Seen within 3 years, 3 months, 2 weeks
Spider Sightings 86 visit(s)
User-Agents seen with 30 user-agent(s)

First Received From approximately 4 years, 4 months, 4 weeks ago
Last Received From within 3 months, 2 weeks
Number Received 653 email(s) sent from this IP

First Bad Host Appearance approximately 2 years, 4 weeks ago
Last Bad Host Appearance within 1 year, 8 months, 2 weeks
Bad Host Appearances 230 appearance(s) in spam e-mail or spam post urls

First Post On approximately 4 years, 3 months, 3 weeks ago
Last Post On within 3 years, 3 months, 2 weeks
Form Posts 13 web post submission(s) sent from this IP

Dictionary Attacks 33 email(s) sent from this IP
First Received From approximately 4 years, 4 months, 4 weeks ago
Last Received From within 3 months, 2 weeks

Associated Harvesters
84.198.200.123 | H
207.150.196.49 | HS
67.149.88.78 | HSDC
202.156.9.12 | H
70.84.55.114 | HC
207.150.194.26 | HS
122.167.14.137 | HS
121.44.224.190 | H
88.229.210.162 | HS
71.157.143.200 | H
209.139.91.3 | H
213.196.11.4 | H
208.53.138.64 | H
70.59.18.217 | H
86.145.166.190 | H
24.188.17.101 | HC
151.202.65.50 | HS
200.71.229.179 | HSD
87.118.98.62 | H
66.131.36.118 | HC
75.125.18.178 | H
222.47.76.235 | HSD
68.184.116.239 | HS
74.72.61.86 | H
76.19.199.172 | H
208.66.195.5 | H
66.232.101.78 | HSW
121.44.249.133 | H
195.229.236.247 | HC
173.45.77.106 | HS
75.125.194.210 | H
208.66.195.15 | H
115.124.113.133 | HS
207.150.196.51 | HS
84.235.5.145 | H
89.106.251.240 | HSC
96.31.92.173 | HC
85.96.255.123 | HS
207.150.196.48 | HS
68.36.185.125 | HS
74.208.154.143 | HS
89.178.13.82 | HSD
113.19.17.199 | HS
207.150.196.55 | HS
69.139.93.68 | H
173.99.132.13 | H
72.32.197.253 | H
82.141.159.97 | HSD
207.150.196.52 | HS
207.150.196.54 | HS
195.229.236.245 | HC
201.236.164.1 | HS
69.77.186.118 | H
74.53.243.18 | HC
66.235.180.7 | HS
85.98.196.149 | HS
67.19.250.26 | H
74.73.136.14 | H
68.36.193.224 | H
70.59.15.102 | H
84.40.5.125 | HSW
64.38.35.162 | H
208.65.60.145 | H
74.86.14.10 | H
207.150.196.53 | HS
74.222.11.75 | H
87.110.173.20 | H
209.160.72.139 | HS
208.66.195.2 | H
67.228.115.170 | H
75.125.194.178 | HW
78.166.231.119 | H
97.104.160.50 | HSD
203.144.232.39 | HS
74.86.249.98 | H
IPs In The Neighborhood
202.112.49.242 | C
202.112.49.244 | SC
202.112.49.246
202.112.50.36
202.112.50.61 | SDC
202.112.50.73 | C
202.112.50.74
202.112.50.88 | SDC
202.112.50.96 | C
202.112.50.121
202.112.50.140 | C
202.112.50.141 | C
202.112.50.144
202.112.50.165
202.112.50.195 | C
202.112.50.201 | S
202.112.50.204
Sample Spam URLs & Keywords Posted From 202.112.49.247
Domain: www.vs777.com
URL: http://www.vs777.com/gallery
Keywords: mature drunk wives
Domain: www.hasici.unas.cz
URL: http://www.hasici.unas.cz/porn
Keywords: extreme wife swap porn
Domain: www.tempestinc.org
URL: http://www.tempestinc.org/videos
Keywords: amateur gangbanged
Domain: hallead.com
URL: http://hallead.com/nude
Keywords: elaeagnus angustifolia mature width
Domain: www.vs777.com
URL: http://www.vs777.com/gallery
Keywords: elaeagnus angustifolia mature width
Domain: www.hasici.unas.cz
URL: http://www.hasici.unas.cz/porn
Keywords: elaeagnus angustifolia mature width
Domain: www.tempestinc.org
URL: http://www.tempestinc.org/videos
Keywords: elaeagnus angustifolia mature width
Domain: hallead.com
URL: http://hallead.com/nude
Keywords: elaeagnus angustifolia mature width
Domain: tombakercpa.com
URL: http://tombakercpa.com/digimon
Keywords: hentai ml
Domain: www.artin-co.com
URL: http://www.artin-co.com/dragon
Keywords: scout hentai
Domain: moja-hisa.110mb.com
URL: http://moja-hisa.110mb.com/hot
Keywords: ryu and chun li hentai
Domain: www.devadoes.com
URL: http://www.devadoes.com/girl
Keywords: creampie wife knocked up
Domain: www.segundo.com.br
URL: http://www.segundo.com.br/hot
Keywords: exottic matures
Domain: tombakercpa.com
URL: http://tombakercpa.com/digimon
Keywords: exottic matures
Domain: www.artin-co.com
URL: http://www.artin-co.com/dragon
Keywords: exottic matures
202.112.49.247's User Agent Strings
Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)
Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)
Mozilla/4.0 (compatible; MSIE 4.01; Digital AlphaServer 1000A 4/233; Windows NT; Powered By 64-Bit Alpha Processor)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 3.1)
Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01 [en]
Mozilla/4.0 (compatible; MSIE 5.5; Windows 95)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 4.0; .NET CLR 1.0.2914)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0; T312461)
Mozilla/4.0 (compatible; MSIE 6.0; AOL 9.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 6.0; MSIE 5.5; Windows NT 4.0) Opera 7.0 [en]
Mozilla/4.0 (compatible; MSIE 6.0; Update a; AOL 6.0; Windows 98)
Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90; Creative)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; KTXN)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.00
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; FREE; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.3 (build 01218); .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Netscape/8.0.4
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.01
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; ru) Opera 8.50
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 2.0.0 Beta 1; .NET CLR 1.0.3705; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.1
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.40607)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Example Messages Sent From 202.112.49.247
From:
Subject: Look at me
From:
Subject: I'm a brunette with blue eyes
From:
Subject: We'll be happy together!
From:
Subject: You and I just have a dream
From:
Subject: How long for?
From:
Subject: At four will
From:
Subject: Do you propose to meet?
From:
Subject: Not just for fun ...
From:
Subject: You have 2 messages that will be deleted in a few
From:
Subject: You have 2 unread messages that will be deleted so
From:
Subject: Your photo has been uploaded
From:
Subject: Dominiqueannese you have notifications pending sol
From:
Subject: Dagny Dickel Administration sent you a message dec
From:
Subject: Lawrenceodegard 2 messages waiting to be read assa
From:
Subject: Jazzygwenn Get-MedsHere
From:
Subject: Chau Strangstalien Order MedicinesOnline
From:
Subject: Comparablemarlene-Cheap-Medicines Now
From:
Subject: Hi Teodoraschwarten. Delayed messages milk
From:
Subject: You have 2 messages that will be deleted soon idio
From:
Subject: Attention Gregory M Stakelin. Deferred emails subm
From:
Subject: Claretha G Clemmey - Your files has been sent
From:
Subject: New voicemail(s), Jun 8 2014, 09 seconds
From:
Subject: New voicemail(s), Jun 8
From:
Subject: You're so addictive
From:
Subject: Betty N Bailado HereYou CanGetExclusiveDrugs :)
Example User Names Used By 202.112.49.247
User-name: accounts
User-name: adtnodjfafdj
User-name: alisha_christofori
User-name: louis.laneve
User-name: muccillofek
User-name: ollom
User-name: adamlsieving
User-name: devinrients
User-name: wolaver
User-name: arduini
User-name: bussing
User-name: alicea
User-name: clients
User-name: betteejarrel
User-name: annettevanriper
User-name: connie.k.grew
User-name: annie.r.golab
User-name: pat.colla
User-name: shanifcanedo
User-name: letitia_p_rabbitt
User-name: jong
User-name: karla.g.itri
User-name: pedigreeterminable
User-name: lenard.o.madrazo
User-name: harry_mccroskey
User-name: awnout
User-name: shayna_rogue
User-name: consensualfiser
User-name: carylon_plaisted
User-name: devonnkarnish
K.Kaz commented...
Spam Server
Dictionary Attacker

inetnum: 202.112.48.0 - 202.112.55.255
netname: GZCOMP-CN
descr: CERNET super computer center
descr: Guangzhou
country: CN
admin-c: JW1-CN
tech-c: XL1-CN
tech-c: CER-AP
remarks: origin AS4538
changed: hm-changed@net.edu.cn 19960325
mnt-by: MAINT-CERNET-AP
status: ASSIGNED NON-PORTABLE
source: APNIC

role: CERNET Helpdesk
address: Room 224, Main Building
address: Tsinghua University
address: Beijing 100084, China
country: CN
phone: +86-10-6278-4049
fax-no: +86-10-6278-5933
e-mail: cernet-helpdesk-ip@net.edu.cn
remarks: abuse@net.edu.cn
admin-c: XL1-CN
tech-c: SZ2-AP
nic-hdl: CER-AP
remarks: Point of Contact for admin-c
mnt-by: MAINT-CERNET-AP
changed: cernet-helpdesk-ip@net.edu.cn 20010903
source: APNIC
changed: hm-changed@apnic.net 20111114

person: Jianping Wu
address: China Education and Research Network Center
address: Room 225, Main Building, Tsinghua University
address: Beijing 100084
country: CN
phone: +86-10-6278-5983
fax-no: +86-10-6278-5933
e-mail: jianping@cernet.edu.cn
nic-hdl: JW1-CN
mnt-by: MAINT-CERNET-AP
changed: hm-changed@net.edu.cn 20020918
source: APNIC
changed: hm-changed@apnic.net 20111122
April 29 2014 02:54 PM

Page generated on: November 28 2014 09:33:22 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–14, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email