The only pattern that I have seen is the URL blocked most time is HTTP://89.151.88.145 See the attachment. A few times I recall something else being blocked.