IP Address Inspector

94.142.134.238

This IP addresses has been seen by at least one Honey Pot. However, none of its visits have resulted in any bad events yet. It's possible that this IP is just a harmless web spider or Internet user. If you know something about this IP, please leave a comment.

Lookup IP In: Domain Tools | SpamHaus | Spamcop | SenderBase | Google Groups | Google

Geographic Location Latvia
Spider First Seen approximately 1 year, 7 months, 1 week ago
Spider Last Seen within 1 year, 4 months, 1 week
Spider Sightings 7 visit(s)
User-Agents seen with 7 user-agent(s)

IPs In The Neighborhood
94.142.134.13
94.142.134.14
94.142.134.26 | C
94.142.134.27
94.142.134.28
94.142.134.29 | C
94.142.134.30
94.142.134.31
94.142.134.32 | C
94.142.134.34 | C
94.142.134.35
94.142.134.36 | C
94.142.134.37 | C
94.142.134.38 | C
94.142.134.39 | C
94.142.134.40 | C
94.142.134.41 | C
94.142.134.43 | C
94.142.134.46 | C
94.142.134.56 | C
94.142.134.94
94.142.134.98
94.142.134.105
94.142.134.131 | C
94.142.134.144 | C
94.142.134.145 | C
94.142.134.146
94.142.134.147 | C
94.142.134.148 | C
94.142.134.149
94.142.134.150
94.142.134.151
94.142.134.152 | C
94.142.134.154
94.142.134.155 | C
94.142.134.156
94.142.134.157
94.142.134.158 | C
94.142.134.159 | C
94.142.134.160 | C
94.142.134.170
94.142.134.178 | C
94.142.134.188
94.142.134.194 | C
94.142.134.195 | C
94.142.134.196 | C
94.142.134.198 | C
94.142.134.199 | C
94.142.134.200
94.142.134.202
94.142.134.203 | C
94.142.134.204
94.142.134.205
94.142.134.206 | C
94.142.134.207
94.142.134.208
94.142.134.210
94.142.134.211
94.142.134.213 | C
94.142.134.214 | C
94.142.134.215
94.142.134.216
94.142.134.218 | C
94.142.134.219 | C
94.142.134.220 | C
94.142.134.221 | C
94.142.134.226 | C
94.142.134.227 | C
94.142.134.230 | C
94.142.134.231 | C
94.142.134.232 | C
94.142.134.233 | C
94.142.134.236 | C
94.142.134.239 | C
94.142.134.246 | C
94.142.134.247
94.142.135.12 | C
94.142.135.23
94.142.135.48 | C
94.142.135.102 | C
94.142.135.121
94.142.135.122
94.142.135.185
94.142.135.194
94.142.134.238's User Agent Strings
Mozila/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)
Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.0; Trident/4.0; InfoPath.1; SV1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 3.0.04506.30)
Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; SLCC1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)
Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SLCC1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)
Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET CLR 1.0.3705; .NET CLR 1.1.4322)
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.814.0 Safari/535.1
Mozilla/5.0 (Windows NT 6.2; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0
K.Keeton commented...
94.142.134.238

Brute force attempt 6 times in a day...

wp-login attacked...
January 31 2012 02:26 PM

N.Daugherty commented...
Multiple attacks on site. Brute force on admin
January 23 2012 12:18 PM

G.Argento commented...
Also Brute force on admin
January 23 2012 07:07 AM

A.Smith37 commented...
Have had multiple attacks on WP site. Brute force on admin.
January 21 2012 06:08 PM

A.Smith37 commented...
Brute force attack on wp admin account. Evil.
January 19 2012 11:45 AM

J.Smith74 commented...
Tried to brute force wp-admin. "Possibly a harmless spider," my foot!
January 16 2012 11:17 AM

A.Heathcock commented...
Attempting admin hack
December 19 2011 07:17 AM

J.Woody commented...
ATTEMPTED ADMIN EXPLOIT HACK(Attempt to access non existing admin area using known exploit)

94.142.134.238 - Latvia - Sia Css Group - Resolve Host: h-134-238.cssgroup.lv

SMALL SAMPLE:
h-134-238.cssgroup.lv - - [19/Dec/2011:05:56:10 +0000] "GET /admin/xxx HTTP/1.1" 403 396 "-" "Mozila/4.0 (compatible; MSIE 6.0; Windows NT 5.1;)
December 19 2011 05:01 AM

T.Phillips5 commented...
Attempted to access /sqlmanager/index.php .
November 28 2011 08:11 AM

S.G8 commented...
Now attempted to access /sqlmanager/index.php
November 27 2011 08:50 PM

S.G8 commented...
Tried it again on the 23rd of November.
November 24 2011 06:26 AM

C.Abuse2 commented...
Incident Type: RFI Attack detected
Target: /phpMyAdmin/index.php
Host: h-134-238.cssgroup.lv
Country: Latvia (LV)
Last Activity: 09/11/11 : 04:59:55
User Agent: Mozilla/5.0 (Windows NT 5.0; rv:5.0) Gecko/20100101 Firefox/5.0
From IP: 94.142.134.238
Net Range: 94.142.134.0 - 94.142.134.255
Company: CSS Group, Latvia, LV
November 15 2011 10:48 AM

S.G8 commented...
Attempted to access /phpMyAdmin/index.php - hack attempt
November 10 2011 06:11 PM

M.Otgaar commented...
Another phpmyadmin hack attempt
Definitely malicious - may be an auto bot looking for backdoors
November 09 2011 11:50 PM

F.Wagner4 commented...
Not Harmless.

Arrived at /phpMyAdmin/index.php

where is certainly doesn't belong. Mark him!
November 08 2011 12:41 PM

A.Hall5 commented...
94.142.134.238 - phpmyadmin hack attempt
October 31 2011 02:17 PM

F.Heinzmann commented...
ip: 94.142.134.238
user-agent string: Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.1
(KHTML, like Gecko) Ubuntu/11.04 Chromium/14.0.814.0 Chrome/14.0.814.0
Safari/535.1
requested url:
/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php
referer:
October 10 2011 08:49 PM

Page generated on: May 19 2013 07:28:00 PM
do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | CloudFlare Site Protection | Contact Us

Copyright © 2004–13, Unspam Technologies, Inc. All rights reserved.

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot

contact | wiki | email