The GPF DNS Block List

The GPF DNS Block List

Look for an IP:

Filter list by reason:

Data Available for IP 200.130.99.249:

Query this IP at: BlackListAlert.Org | Project Honey Pot | hpHosts Online | Stop Forum Spam | BotScout.com | IP-Lookup.Net

Date Added to Database:
Thu, 24 Sep 2015 15:53:09 -0400
Date Last Seen:
Thu, 24 Sep 2015 15:53:09 -0400
Date Record Expires:
Fri, 23 Sep 2016 21:53:09 -0400
Record Status:
Expired. The ban on this IP has been lifted and it should no longer appear in our generated block lists.
Reason for Ban:
Vulnerability Probe
Detailed Reason:
This IP has actively attempted to scan our scripts for vulnerabilities. While it did not actively attempt to inject code, it did make requests consistent with searching for scripts with known vulnerabilities.
Additional Comments:
Probe for admin interfaces. References below are representatives; all IPs in this list exhibit similar attack behavior.

185.57.29.220 - - [21/Sep/2015:01:17:01 +0000] "GET /wp-login.php HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
185.57.29.220 - - [21/Sep/2015:01:17:01 +0000] "GET /wp-admin/ HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"
193.201.227.18 - - [23/Sep/2015:22:10:46 +0000] "GET /administrator/index.php HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
193.201.227.18 - - [23/Sep/2015:22:10:47 +0000] "GET /admin.php HTTP/1.1" 404 1210 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
200.130.99.249 - - [24/Sep/2015:11:05:41 +0000] "GET /administrator/index.php HTTP/1.0" 301 - "-" "-"
200.130.99.249 - - [24/Sep/2015:11:05:42 +0000] "GET /feed/administrator/index.php HTTP/1.0" 301 - "-" "-"

IPs Within the Same Class C Network

IPReasonDate AddedLast SeenActive?
200.130.99.64Forum/Comment/Wiki SpammerWed, 27 May 2015 05:07:01 -0400Wed, 27 May 2015 05:07:01 -0400Expired

Home | Bulk Query | FAQ | Worst Networks | Reason Key | Reason Rankings | Export

This site and its contents are © Copyright 2011-2019, Jeffrey T. Darlington. All rights reserved. It is provided as a service to the Internet community at large and is for informational purposes only. This site and its owner cannot be held responsible for any actions taken by others based on the data contained herein.