The GPF DNS Block List

The GPF DNS Block List

Look for an IP:

Filter list by reason:

Data Available for IP 58.30.60.167:

Query this IP at: BlackListAlert.Org | Project Honey Pot | hpHosts Online | Stop Forum Spam | BotScout.com | IP-Lookup.Net

Date Added to Database:
Wed, 26 Jun 2013 08:00:49 -0400
Date Last Seen:
Wed, 26 Jun 2013 08:00:49 -0400
Date Record Expires:
Thu, 26 Jun 2014 14:00:49 -0400
Record Status:
Expired. The ban on this IP has been lifted and it should no longer appear in our generated block lists.
Reason for Ban:
w00tw00t.at.ISC.SANS.DFind
Detailed Reason:
IPs flagged with this reason have made mysterious requests in the form of "GET /w00tw00t.at.ISC.SANS.DFind:)" or something similar. These always result in 404 (Not Found) errors since we do not have any such pages or scripts on our sites. The exact nature of these requests is still unclear, but most of the sources we've been able to find indicate that it is likely a DLink vulnerability scan looking for exploits. The inclusion of "ISC.SANS" has also been rumored to be a "reputation attack" against the Internet Storm Center at the SANS Technology Institute. Because of the nature of these requests, we assume the host making the request cannot be trusted and it is now our policy to block all IPs that make such requests.
Additional Comments:
Chinese IP listed at UCEPROTECT Level 1, JustSpam.org.

58.30.60.167 - - [25/Jun/2013:07:35:14 +0000] "GET /w00tw00t.at.ISC.SANS.Win32:) HTTP/1.1" 400 351 "-" "-"

No other IPs within the same Class C network were found.

Home | Bulk Query | FAQ | Worst Networks | Reason Key | Reason Rankings | Export

This site and its contents are © Copyright 2011-2019, Jeffrey T. Darlington. All rights reserved. It is provided as a service to the Internet community at large and is for informational purposes only. This site and its owner cannot be held responsible for any actions taken by others based on the data contained herein.