IP Address Inspector
This IP addresses has been seen by at least one Honey Pot. However, none of its visits have resulted in any bad events yet. It's possible that this IP is just a harmless web spider or Internet user. If you know something about this IP, please leave a comment.
|Geographic Location||United States|
|Spider First Seen||approximately 6 months, 2 weeks ago|
|Spider Last Seen||within 1 week|
|Spider Sightings||174 visit(s)|
|User-Agents||seen with 12 user-agent(s)|
Not respecting robots.txt from many semrush ips in 126.96.36.199/24 and 188.8.131.52/24 range. Blocking all on all web servers.
December 27 2016 08:22 PM
I've banned them but they still try to connect.
30 June 2015, two attempts from this IP and 184.108.40.206
Use-agent: Mozilla/5.0 (compatible; SemrushBot/0.98~bl; +http://www.semrush.com/bot.html)
From the CBL:
IP Address 220.127.116.11 is listed in the CBL. It shows signs of being infected with a spam sending trojan, malicious link or some other form of botnet.
It was last detected at 2015-07-01 03:00 GMT (+/- 30 minutes), approximately 2 days, 12 hours, 59 minutes ago.
This IP address is infected with, or is NATting for a machine infected with the ZeuS trojan, also known as "Zbot" and "WSNPoem".
The infection was detected by observing this IP address attempting to make contact to a ZeuS Command and Control server (C&C), a central server used by the criminals to control with ZeuS infected computers (bots).
This was detected by a TCP/IP connection from 18.104.22.168 on port 56997 going to IP address 22.214.171.124 (the sinkhole) on port 80.
The botnet command and control domain for this connection was "www.besiktastesisat.com".
July 03 2015 08:42 AM
Semrush definitely do NOT respect robots.txt. Their FAQ says they do and if you email them they will promise that they do - but they don't.
Recommend blocking 126.96.36.199 - 188.8.131.52 inclusive.
February 04 2014 07:35 PM
T.PERFECT NAME commented...
BANNED - multiple times per day, over multiple days, no robots.txt requests AND its Haldex Ltd = entire range banned.
June 30 2013 06:28 PM