IP Address Inspector

ATTENTION
  • This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

216.104.15.142

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer and rule breaker. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location United States United States (Texas)
Spider First Seen approximately 15 years, 4 weeks ago
Spider Last Seen within 11 years, 7 months, 2 weeks
Spider Sightings 917 visit(s)
User-Agents seen with 1 user-agent(s)

First Post On approximately 13 years, 11 months, 3 weeks ago
Last Post On within 13 years, 9 months, 4 weeks
Form Posts 5 web post submission(s) sent from this IP

First Rule-Break On approximately 14 years, 8 months, 2 weeks ago
Last Rule-Break On within 13 years, 7 months, 3 weeks
Rule Breaks 2 web page navigation rule(s) broken by this IP

IPs In The Neighborhood
216.104.14.234 United States
216.104.15.0 United States
216.104.15.12 United States
216.104.15.13 United States
216.104.15.15 United States
216.104.15.30 United States
216.104.15.34 United States
216.104.15.99 United States
216.104.15.110 United States
216.104.15.129 United States
216.104.15.130 | C United States
216.104.15.131 United States
216.104.15.132 United States
216.104.15.133 United States
216.104.15.134 | CR United States
216.104.15.135 United States
216.104.15.136 United States
216.104.15.137 United States
216.104.15.138 | CR United States
216.104.15.139 United States
216.104.15.140 United States
216.104.15.144 United States
216.104.15.148 United States
216.104.15.150 United States
216.104.15.255 United States
Sample Spam URLs & Keywords Posted From 216.104.15.142
Domain: xnxxe3.weebly.com
URL: http://xnxxe3.weebly.com
Keywords: xnxx
Domain: tube8.110mb.com
URL: http://tube8.110mb.com/pichunter.html
Keywords: pichunter
Domain: yjdes.spruz.com
URL: http://yjdes.spruz.com/gfile/75r4!-!GLGHIL/grayvee.html
Keywords: grayvee
Domain: yjdes.spruz.com
URL: http://yjdes.spruz.com/gfile/75r4!-!GLGHIL/lubeyourtube.html
Keywords: lubeyourtube
Domain: yjdes.spruz.com
URL: http://yjdes.spruz.com/gfile/75r4!-!GLGHIL/newsfilter.html
Keywords: newsfilter
Domain: yjdes.spruz.com
URL: http://yjdes.spruz.com/gfile/75r4!-!GLGHIL/realitykings.html
Keywords: realitykings
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/motorola.ocm.html
Keywords: motorola.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/chevrolet.ocm.html
Keywords: chevrolet.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/2leep.ocm.html
Keywords: 2leep.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/michaels.ocm.html
Keywords: michaels.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/cooliris.ocm.html
Keywords: cooliris.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/thinkexist.ocm.html
Keywords: thinkexist.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/itt-tech.edu.html
Keywords: itt-tech.edu
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/teacherweb.ocm.html
Keywords: teacherweb.ocm
Domain: www.wacker3.ch
URL: http://www.wacker3.ch/1/tnp/physicsforums.ocm.html
Keywords: physicsforums.ocm
216.104.15.142's User Agent Strings
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
L.Nicolai commented...
I blocked by .htaccess:
RewriteCond %{REMOTE_HOST} ^.*sdi\.trendnet.* [NC,OR]
RewriteCond %{REMOTE_HOST} ^.*sjdc.* [NC,OR]
RewriteRule ^.* – [F,L]

deny from 150.70.0.0/16 #Japan Trent Micro
deny from 216.104.0.0/19 #USA Trent Micro
deny from 220.255.252.144 #Singapore Trent Micro
October 27 2011 10:52 AM

K.Kirby commented...
Proxy attempts to http:/www.nola.com
July 15 2011 09:24 AM

WEBSupport commented...
Another Brute Force Bot by Trend Micro
More Info: http://www.projecthoneypot.org/ip_216.104.15.138
More Info: http://en.wikipedia.org/wiki/Trend_Micro
May 19 2011 07:16 AM

M.Hell2 commented...
Another abuse report on Trend Micro and their bots engaged in DDOS attacks which are taking down people's servers.

http://www.inius.ro/posts/230-trendmicro-bot-kills-your-server-how-to-ban-it.html
March 28 2011 11:33 PM

M.Hell2 commented...
These 'Trend Micro' attack bots seem to be trying to DDOS my sites from a number of different IP's.

216.104.15.130
216.104.15.134
216.104.15.138
216.104.15.142

Even though they are blocked in htaccess, that doesn't stop them from constantly requesting pages every second and filling up my logs.

So I'm thinking, since just blocking the Trend Micro attack bots doesn't seem to be enough, maybe suing them for non stop abuse will get their attention.

Anyone else having this problem ?
March 26 2011 11:49 AM

L.Nicolai commented...
Still active as a comment spammer.
In combination with IP 216.104.15.138
January 31 2011 03:47 AM

C.Hill3 commented...
spammer
July 19 2010 11:07 AM

R.Dunkle commented...
this is aggressive spider from TrendMicro.
OrgName: TREND MICRO INCORPORATED
OrgID: TREND-7
Address: 10101 N. De Anza Blvd
City: Cupertino
StateProv: CA
PostalCode: 95014
Country: US
NetRange: 216.104.0.0 - 216.104.31.255
CIDR: 216.104.0.0/19
May 28 2010 07:56 PM

H.User4416 commented...
216.104.15.138 and 216.104.15.142 both tried my site within 20 minutes of the first one being blocked.
March 22 2010 11:06 PM

D.Smith21 commented...
Ignores .htaccess:

216.104.15.142

2010-02-06 16:20:48

IP address found on http:BL blacklist

http:BL:
Suspicious
Comment Spammer
Threat level 30
Age 9 days
GET /training/uniform-faq/&type=wordpress2.9.1&wp=abc HTTP/1.0
Host: www.drumpoint.org
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Accept-Language: en-us
Accept: */*
February 06 2010 02:12 PM

A.E4 commented...
216.104.15.142 seems to be working with 216.104.15.134 and 216.104.15.130 as well!!

I noticed that ever since I installed Trend Micro's Web Protection Add-on (like the RUBotted program) it seems to be following all the activity I am doing and trying to even access my admin section on my forums!!

I have blocked 216.104.15.0-216.104.15.142 now

Also this IP is a known spammer:
20090927.QETGQMJWMNYNGOYO 20090927.QETGQMJWMNYNGOYO@kashi.com
eecimuqa xyxaer@lrwpxn.com
January 16 2010 09:21 AM

P.Smith15 commented...
Uses several IP address,Trend Micro,comment spammeer & harvester.
December 18 2009 02:50 PM

D.Berg commented...
May be working with 216.104.15.138 -- the .138 address got blocked from my site, and the .142 followed up with a lower threat rating and got through.
October 20 2009 08:14 PM

A.Bolchis commented...
Comment Spammer
August 11 2009 05:41 AM

Page generated on: May 06 2024 01:59:13 AM
byronaldrich156@vbwebmail.com brittneybradley984@outlook.com tanishacollier247@yahoo.com byronaldrich156@yahoo.com
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–24, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email