IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

142.54.165.154

The Project Honey Pot system has detected behavior from the IP address consistent with that of a rule breaker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	United States
Spider First Seen	approximately 9 years, 1 month, 1 week ago
Spider Last Seen	within 8 years, 8 months, 5 weeks
Spider Sightings	18 visit(s)
User-Agents	seen with 4 user-agent(s)

First Rule-Break On	approximately 8 years, 9 months, 1 week ago
Last Rule-Break On	within 8 years, 8 months, 5 weeks
Rule Breaks	2 web page navigation rule(s) broken by this IP

IPs In The Neighborhood
142.54.164.199
142.54.164.201
142.54.164.205
142.54.164.207
142.54.164.214
142.54.164.226 \| S
142.54.164.234
142.54.164.242
142.54.164.248
142.54.164.249
142.54.164.250 \| C
142.54.164.254
142.54.165.2 \| SW
142.54.165.3 \| S
142.54.165.4 \| S
142.54.165.5 \| S
142.54.165.6 \| S
142.54.165.34
142.54.165.42
142.54.165.50
142.54.165.58
142.54.165.66 \| SD
142.54.165.67 \| SD
142.54.165.68 \| SD
142.54.165.69 \| SD
142.54.165.70 \| SD
142.54.165.71 \| SD
142.54.165.72 \| SD
142.54.165.73 \| SD
142.54.165.74 \| SD
142.54.165.75 \| SD
142.54.165.76 \| SD
142.54.165.77 \| SD
142.54.165.78 \| SD
142.54.165.82 \| SD
142.54.165.83 \| SD
142.54.165.84 \| SD
142.54.165.138
142.54.165.139
142.54.165.140
142.54.165.141
142.54.165.163
142.54.165.173 \| S
142.54.165.175
142.54.165.176 \| D
142.54.165.177 \| D
142.54.165.178 \| D
142.54.165.189
142.54.165.194 \| SD
142.54.165.211
142.54.165.228
142.54.165.231
142.54.165.233
142.54.165.235
142.54.165.240
142.54.165.252
142.54.166.2
142.54.166.3 \| S
142.54.166.4
142.54.166.5
142.54.166.6
142.54.166.7
142.54.166.8
142.54.166.9
142.54.166.10
142.54.166.11
142.54.166.12
142.54.166.13
142.54.166.14
142.54.166.18 \| S
142.54.166.19 \| SD
142.54.166.20 \| S
142.54.166.21 \| SD
142.54.166.22 \| S
142.54.166.27
142.54.166.29
142.54.166.30
142.54.166.42
142.54.166.66
142.54.166.67 \| C
142.54.166.68
142.54.166.71 \| C
142.54.166.72 \| C
142.54.166.73 \| C
142.54.166.77 \| D
142.54.166.78
142.54.166.79
142.54.166.80 \| SC
142.54.166.81 \| SC
142.54.166.82
142.54.166.83 \| SD
142.54.166.84 \| S
142.54.166.85
142.54.166.88
142.54.166.89 \| C
142.54.166.90
142.54.166.96 \| C
142.54.166.98 \| SDC
142.54.166.99 \| SD
142.54.166.100 \| SD
142.54.166.101 \| SD
142.54.166.102 \| S
142.54.166.103 \| D
142.54.166.104
142.54.166.105 \| SDC
142.54.166.106 \| SDC
142.54.166.107 \| D
142.54.166.108
142.54.166.109 \| D
142.54.166.110 \| D
142.54.166.114
142.54.166.115 \| SD
142.54.166.116
142.54.166.117
142.54.166.118
142.54.166.120 \| SD
142.54.166.121 \| SD
142.54.166.122 \| DC
142.54.166.123

142.54.165.154's User Agent Strings

Mozilla/37.0.2

Mozilla/37.0.2 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 2.0.50727; .NET4.0C; .NET4.0E)

8 comment(s) - Comment on this IP | Collapse All

C.Brand3 commented...

same issue here, but again with a new set .....

fckeditor/editor/fckeditor.html
June 27 2015 03:46 AM

J.Judish commented...

hammered site with miserable attempts to upload file
April 30 2015 11:03 AM

B.Garden commented...

Back again - but with a new set of probes

/nam/uploadTester.asp
/support/uploadTester.asp
/ASPupload/uploadTester.asp
/ASP/dropbox/uploadTester.asp
/admin/uploadTester.asp
/fwx/vb/upload/freeaspupload/uploadTester.asp
/resimler/apt-014/uploadTester.asp
/admin/include/uploadTester.asp
/kj/uploadTester.asp
/eeclub/uploadTester.asp
/Picload/uploadTester.asp
/wms_admin/upload_simple/uploadTester.asp
/ContentUpload/admin/freeASPUpload/uploadTester.asp
/aproweb/Admin/uploadTester.asp
/FileUploads/uploadTester.asp
/Test/Upload/uploadTester.asp
/FreeASPUpload/uploadTester.asp
/upload/uploadTester.asp
/dev/bholaday/uploadTester.asp
/demo/uploadTester.asp
/levimccollum/uploadtester.asp
/asp/freeupload/uploadTester.asp
/fortbildning/test/uploadTester.asp
/cadastro/uploadTester.asp
/test/operator/UploadFile/uploadTester.asp
/sell/excess/uploadTester.asp
/ceprtools/freeASPUpload/uploadTester.asp
/uploadTester.asp
/Includes/Advertiser/uploadTester.asp
April 30 2015 07:26 AM

K.Penton commented...

Likewise - 70 shots at potential admin pages on 25 April
April 26 2015 01:39 PM

H.Baken commented...

Ditto!
April 26 2015 10:43 AM

A.Jones40 commented...

agree with others.
this IP is checking to see if InnovaStudio exists.
InnovaStudio appears to be a CMS/Wordpress plugin.

no big deal to me, its simply 'tested' my site then moved on.
i'd give this IP a rating of 2/5 in terms of threat level.
April 17 2015 05:46 AM

E.Flora commented...

Ditto, prior comments, this is just the 1st hit:

142.54.165.154 - - [12/Apr/2015:18:17:47 -0400] "GET /Editor/assetmanager/assetmanager.asp HTTP/1.1" 40x
April 12 2015 08:32 PM

B.Garden commented...

USA: DataShack LC, Missouri, Kansas City
70 different attempts to access administrative part of site...
Below is just a few - I can't put all as it would go over the permitted limit of characters. Also, no user agent.

/start/public/editor/assetmanager/assetmanager.php
/plugins/editors/innova/assetmanager/assetmanager.php
/sitemanager/protected/component/InnovaStudio-Editor/Editor/assetmanager/assetmanager.php
/beheer/novosite_editor/assetmanager/assetmanager.php
/inv/assetmanager/assetmanager.php
/~nga/Edit0r/assetmanager/assetmanager.php
/admin/assetmanager/assetmanager.php
/system/templates/modules/admin/editor/assetmanager/assetmanager.php
April 10 2015 07:19 AM

Page generated on: May 10 2024 06:59:09 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this page from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot