The GPF DNS Block List

The GPF DNS Block List

Look for an IP:

Filter list by reason:

Data Available for IP 193.201.227.18:

Query this IP at: BlackListAlert.Org | Project Honey Pot | hpHosts Online | Stop Forum Spam | BotScout.com | IP-Lookup.Net

Date Added to Database:
Thu, 24 Sep 2015 15:53:09 -0400
Date Last Seen:
Thu, 24 Sep 2015 15:53:09 -0400
Date Record Expires:
Fri, 23 Sep 2016 21:53:09 -0400
Record Status:
Expired. The ban on this IP has been lifted and it should no longer appear in our generated block lists.
Reason for Ban:
Vulnerability Probe
Detailed Reason:
This IP has actively attempted to scan our scripts for vulnerabilities. While it did not actively attempt to inject code, it did make requests consistent with searching for scripts with known vulnerabilities.
Additional Comments:
Probe for admin interfaces. References below are representatives; all IPs in this list exhibit similar attack behavior.

185.57.29.220 - - [21/Sep/2015:01:17:01 +0000] "GET /wp-login.php HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
185.57.29.220 - - [21/Sep/2015:01:17:01 +0000] "GET /wp-admin/ HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
193.201.227.18 - - [23/Sep/2015:22:10:46 +0000] "GET /administrator/index.php HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
193.201.227.18 - - [23/Sep/2015:22:10:47 +0000] "GET /admin.php HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
200.130.99.249 - - [24/Sep/2015:11:05:41 +0000] "GET /administrator/index.php HTTP/1.0" 301 - "-" "-"
200.130.99.249 - - [24/Sep/2015:11:05:42 +0000] "GET /feed/administrator/index.php HTTP/1.0" 301 - "-" "-"

IPs Within the Same Class C Network

IPReasonDate AddedLast SeenActive?
193.201.227.3Forum/Comment/Wiki SpammerSun, 01 Feb 2015 17:30:29 -0500Sun, 01 Feb 2015 17:30:29 -0500Expired
193.201.227.21Forum/Comment/Wiki SpammerMon, 16 Feb 2015 12:03:55 -0500Mon, 16 Feb 2015 12:03:55 -0500Expired
193.201.227.51Forum/Comment/Wiki SpammerSun, 29 Nov 2015 12:52:30 -0500Sun, 29 Nov 2015 12:52:30 -0500Expired
193.201.227.57Vulnerability ProbeThu, 03 Sep 2015 08:53:34 -0400Thu, 03 Sep 2015 08:53:34 -0400Expired
193.201.227.70Forum/Comment/Wiki SpammerMon, 30 Nov 2015 01:07:14 -0500Mon, 30 Nov 2015 01:07:14 -0500Expired
193.201.227.73Forum/Comment/Wiki SpammerThu, 18 Jun 2015 17:43:18 -0400Thu, 18 Jun 2015 17:43:18 -0400Expired
193.201.227.91Forum/Comment/Wiki SpammerMon, 28 Dec 2015 05:07:01 -0500Mon, 28 Dec 2015 05:07:01 -0500Expired
193.201.227.92Forum/Comment/Wiki SpammerMon, 17 Aug 2015 05:07:01 -0400Mon, 17 Aug 2015 05:07:01 -0400Expired
193.201.227.97Vulnerability ProbeMon, 07 Sep 2015 09:23:36 -0400Mon, 07 Sep 2015 09:23:36 -0400Expired
193.201.227.99Forum/Comment/Wiki SpammerWed, 30 Dec 2015 05:07:01 -0500Thu, 31 Dec 2015 05:07:01 -0500Expired
193.201.227.126Vulnerability ProbeThu, 20 Aug 2015 09:44:52 -0400Thu, 20 Aug 2015 09:44:52 -0400Expired
193.201.227.130Vulnerability ProbeThu, 24 Sep 2015 15:36:25 -0400Thu, 24 Sep 2015 15:36:25 -0400Expired
193.201.227.131Forum/Comment/Wiki SpammerSun, 26 Jul 2015 05:07:01 -0400Sun, 26 Jul 2015 05:07:01 -0400Expired
193.201.227.143Forum/Comment/Wiki SpammerTue, 15 Sep 2015 16:17:07 -0400Tue, 15 Sep 2015 16:17:07 -0400Expired
193.201.227.154Forum/Comment/Wiki SpammerSun, 02 Aug 2015 19:58:13 -0400Sun, 02 Aug 2015 19:58:13 -0400Expired
193.201.227.182Vulnerability ProbeThu, 17 Sep 2015 09:12:45 -0400Thu, 17 Sep 2015 09:12:45 -0400Expired

Home | Bulk Query | FAQ | Worst Networks | Reason Key | Reason Rankings | Export

This site and its contents are © Copyright 2011-2019, Jeffrey T. Darlington. All rights reserved. It is provided as a service to the Internet community at large and is for informational purposes only. This site and its owner cannot be held responsible for any actions taken by others based on the data contained herein.