The GPF DNS Block List

The GPF DNS Block List

Look for an IP:

Filter list by reason:

Data Available for IP 95.211.217.144:

Query this IP at: BlackListAlert.Org | Project Honey Pot | hpHosts Online | Stop Forum Spam | BotScout.com | IP-Lookup.Net

Date Added to Database:
Tue, 08 Oct 2013 08:36:23 -0400
Date Last Seen:
Tue, 08 Oct 2013 08:36:23 -0400
Date Record Expires:
Wed, 08 Oct 2014 14:36:23 -0400
Record Status:
Expired. The ban on this IP has been lifted and it should no longer appear in our generated block lists.
Reason for Ban:
w00tw00t.at.ISC.SANS.DFind
Detailed Reason:
IPs flagged with this reason have made mysterious requests in the form of "GET /w00tw00t.at.ISC.SANS.DFind:)" or something similar. These always result in 404 (Not Found) errors since we do not have any such pages or scripts on our sites. The exact nature of these requests is still unclear, but most of the sources we've been able to find indicate that it is likely a DLink vulnerability scan looking for exploits. The inclusion of "ISC.SANS" has also been rumored to be a "reputation attack" against the Internet Storm Center at the SANS Technology Institute. Because of the nature of these requests, we assume the host making the request cannot be trusted and it is now our policy to block all IPs that make such requests.
Additional Comments:
95.211.217.144 - - [07/Oct/2013:09:57:34 +0000] "GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1" 400 351 "-" "-"

IPs Within the Same Class C Network

IPReasonDate AddedLast SeenActive?
95.211.217.156Forum/Comment/Wiki SpammerTue, 29 Jan 2013 00:25:40 -0500Tue, 29 Jan 2013 00:25:40 -0500Expired

Home | Bulk Query | FAQ | Worst Networks | Reason Key | Reason Rankings | Export

This site and its contents are © Copyright 2011-2019, Jeffrey T. Darlington. All rights reserved. It is provided as a service to the Internet community at large and is for informational purposes only. This site and its owner cannot be held responsible for any actions taken by others based on the data contained herein.