IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

216.104.15.134

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer and rule breaker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location United States United States (Texas)
Spider First Seen approximately 15 years, 4 weeks ago
Spider Last Seen within 11 years, 7 months, 2 weeks
Spider Sightings 865 visit(s)
User-Agents seen with 1 user-agent(s)

First Post On approximately 15 years, 1 week ago
Last Post On within 13 years, 10 months, 2 weeks
Form Posts 5 web post submission(s) sent from this IP

First Rule-Break On approximately 13 years, 4 months, 4 weeks ago
Last Rule-Break On within 11 years, 11 months, 2 weeks
Rule Breaks 3 web page navigation rule(s) broken by this IP

IPs In The Neighborhood
216.104.14.234 United States
216.104.15.0 United States
216.104.15.12 United States
216.104.15.13 United States
216.104.15.15 United States
216.104.15.30 United States
216.104.15.34 United States
216.104.15.99 United States
216.104.15.110 United States
216.104.15.129 United States
216.104.15.130 | C United States
216.104.15.131 United States
216.104.15.132 United States
216.104.15.133 United States
216.104.15.135 United States
216.104.15.136 United States
216.104.15.137 United States
216.104.15.138 | CR United States
216.104.15.139 United States
216.104.15.140 United States
216.104.15.142 | CR United States
216.104.15.144 United States
216.104.15.148 United States
216.104.15.150 United States
216.104.15.255 United States
Sample Spam URLs & Keywords Posted From 216.104.15.134
Domain: www.kaboodle.com
URL: http://www.kaboodle.com/tubesite/pichunter.html
Keywords: pichunter
Domain: members.webs.com
URL: http://members.webs.com/manageapp/blog/show/4086667-yuvutu
Keywords: yuvutu
216.104.15.134's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
T.PERFECT NAME commented...
...
BANNED
...
These visits were preceded by visits from IP Address = 96.26.52.120
...
That IP address has been banned also, by guilt through association. No loss to me.
...
September 14 2011 04:56 PM

T.J. commented...
216.104.15.134 - - [04/Sep/2011:11:33:36 +0200] "GET /index.php?file=Forum&page=viewtopic&forum_id=7&thread_id=545 HTTP/1.0" 403 1008 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
September 04 2011 06:11 AM

C.Paws commented...
I cannot figure out why bots from the Trend Micro Smart Protection Network cloud solution -- if that's what they are -- are on my site all the time. I have three of them right now:

216.104.15.138 Jun 29 2011 02:27 PM
216.104.15.142 Jun 29 2011 02:26 PM
216.104.15.134 Jun 29 2011 02:24 PM

Phoned Trend Micro 800-228-5651 support and got this: These bots gather data for a "Web reputation" rating to support TM security products. I told the guy they have a bad reputation themselves and the Trend Micro IP range is being banned.

Banned 216.104.15.*
June 29 2011 05:58 PM

WEBSupport commented...
Another Brute Force Bot by Trend Micro
More Info: http://www.projecthoneypot.org/ip_216.104.15.138
More Info: http://en.wikipedia.org/wiki/Trend_Micro
May 19 2011 07:12 AM

M.Hell2 commented...
These 'Trend Micro' attack bots seem to be trying to DDOS my sites from a number of different IP's.

216.104.15.130
216.104.15.134
216.104.15.138
216.104.15.142

Even though they are blocked in htaccess, that doesn't stop them from constantly requesting pages every second and filling up my logs.

So I'm thinking, since just blocking the Trend Micro attack bots doesn't seem to be enough, maybe suing them for non stop abuse will get their attention.

Anyone else having this problem ?
March 26 2011 12:02 PM

C.Hill3 commented...
spammer
July 19 2010 10:50 AM

M.Prather commented...
this IP has crawled/hit my .NET site and resulted in the error:

WebResource.axd?d=I3qRPzYKyGNoE8ZyTFnBaA2&t=633802405995006876

"padding is invalid and cannot be removed"
June 05 2010 02:34 AM

F.Heinzmann commented...
I set up a new photo gallery and this IP has been trying to access it since day one. It is even trying to look at my security log:
0S/ C (5) BLOCKED 216.104.15.134 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Last active: 10 (27) 2010-05-29 - 23:38:39
/gallery/viewlog.php?log=security
May 30 2010 10:57 AM

D.Smith21 commented...
216.104.15.134

2010-01-26 19:54:05

IP address found on http:BL blacklist

http:BL:
Suspicious
Comment Spammer
Threat level 29
Age 29 days
GET /&type=wordpress2.9.1&wp=abc HTTP/1.0
Host: www.drumpoint.org
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Accept-Language: en-us
Accept: */*
January 27 2010 11:56 AM

A.E4 commented...
Yeah I think M.V6 is correct. However, I don't know if it is exploited or what but it seems that TrendMicro needs to improve their software as there has been comment spam from the same IP's!

216.104.15.134 associated with 216.104.15.130 and 216.104.15.142

216.104.15.130 spammed:
walnawqe
envvzi@ucnxed.com

216.104.15.142 spammed:
eecimuqa
xyxaer@lrwpxn.com
January 16 2010 09:37 AM

J.Brisebois commented...
Yeah well they ignored robots .txt by accessing my js directory and got banned for it.
December 29 2009 08:59 PM

P.Smith15 commented...
Constantly hitting my site. They are a real pest!
December 27 2009 11:33 AM

A.Bolchis commented...
Comment Spammer
August 05 2009 10:43 AM

M.V6 commented...
This IP address (and anything starting with 216.104.15.) is registered to Trend Micro Incorporated. Based on an analysis of the URLs that this IP address have accessed on our servers, it appears likely that the IP address is part of the Trend Micro Smart Protection Network cloud solution. See http://itw.trendmicro.com/smart-protection-network/how_it_works.php.
July 01 2009 06:48 AM

Page generated on: May 05 2024 03:50:17 AM
sonyajewell962@outlook.com megangoodman535@gmail.com laracarson821@outlook.com vernonmichael769@outlook.com
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–24, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email