The GPF DNS Block List

The GPF DNS Block List

Look for an IP:

Filter list by reason:

Data Available for IP

Query this IP at: BlackListAlert.Org | Project Honey Pot | hpHosts Online | Stop Forum Spam | | IP-Lookup.Net

Date Added to Database:
Thu, 24 Sep 2015 15:25:37 -0400
Date Last Seen:
Thu, 24 Sep 2015 15:25:37 -0400
Date Record Expires:
Fri, 23 Sep 2016 21:25:37 -0400
Record Status:
Expired. The ban on this IP has been lifted and it should no longer appear in our generated block lists.
Reason for Ban:
Vulnerability Probe
Detailed Reason:
This IP has actively attempted to scan our scripts for vulnerabilities. While it did not actively attempt to inject code, it did make requests consistent with searching for scripts with known vulnerabilities.
Additional Comments:
Probe for admin interfaces. References below are representatives; all IPs in this list exhibit similar attack behavior. - - [09/Sep/2015:23:40:24 +0000] "GET /bitrix/admin/index.php?lang=en HTTP/1.1" 404 2106 "-" "Mozilla/5.0 (Windows NT 6.2; rv:23.0) Gecko/20100101 Firefox/23.0" - - [14/Aug/2014:01:18:34 +0000] "GET /wp-login.php HTTP/1.0" 404 2106 "-" "Mozilla/5.0 (Windows NT 6.1; rv:19.0) Gecko/20100101 Firefox/19.0" - - [21/Sep/2015:01:59:06 +0000] "GET /admin.php HTTP/1.1" 404 2106 "-" "Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0" - - [22/Sep/2015:22:51:09 +0000] "GET /administrator/index.php HTTP/1.0" 404 14792 "-" "-"

No other IPs within the same Class C network were found.

Home | Bulk Query | FAQ | Worst Networks | Reason Key | Reason Rankings | Export

This site and its contents are © Copyright 2011-2020, Jeffrey T. Darlington. All rights reserved. It is provided as a service to the Internet community at large and is for informational purposes only. This site and its owner cannot be held responsible for any actions taken by others based on the data contained herein.