The GPF DNS Block List

The GPF DNS Block List

Look for an IP:

Filter list by reason:

Data Available for IP 158.69.27.241:

Query this IP at: BlackListAlert.Org | Project Honey Pot | hpHosts Online | Stop Forum Spam | BotScout.com | IP-Lookup.Net

Date Added to Database:
Thu, 24 Sep 2015 16:00:56 -0400
Date Last Seen:
Thu, 24 Sep 2015 16:00:56 -0400
Date Record Expires:
Fri, 23 Sep 2016 22:00:56 -0400
Record Status:
Expired. The ban on this IP has been lifted and it should no longer appear in our generated block lists.
Reason for Ban:
Vulnerability Probe
Detailed Reason:
This IP has actively attempted to scan our scripts for vulnerabilities. While it did not actively attempt to inject code, it did make requests consistent with searching for scripts with known vulnerabilities.
Additional Comments:
Probe for WebDAV instances, possibly looking for vulnerabilities or to inject code. None of our sites use WebDAV, nor would they be publicly accessible if we did. No legitimate requests.

158.69.27.241 - - [22/Sep/2015:04:59:15 +0000] "PROPFIND /webdav/ HTTP/1.1" 301 394 "-" "WEBDAV Client"
192.99.144.140 - - [24/Sep/2015:06:32:12 +0000] "PROPFIND /webdav/ HTTP/1.1" 301 394 "-" "WEBDAV Client"
192.99.34.154 - - [23/Sep/2015:20:56:19 +0000] "PROPFIND /webdav/ HTTP/1.1" 301 394 "-" "WEBDAV Client"

No other IPs within the same Class C network were found.

Home | Bulk Query | FAQ | Worst Networks | Reason Key | Reason Rankings | Export

This site and its contents are © Copyright 2011-2019, Jeffrey T. Darlington. All rights reserved. It is provided as a service to the Internet community at large and is for informational purposes only. This site and its owner cannot be held responsible for any actions taken by others based on the data contained herein.