Echo Posted January 31, 2012 ID:522045 Share Posted January 31, 2012 My website IP 109.163.230.7 is showing as malicious. This is false.http://i.imgur.com/C0uoJ.pngThanks! Link to post Share on other sites More sharing options...
MysteryFCM Posted January 31, 2012 ID:522133 Share Posted January 31, 2012 We've currently got the entire /23 blocked due to malicious content and no response from the AS owner (though you're no doubt not surprised about this, given some of your customers).Though I am curious about your move from the .net to the .com (other than to hide your WhoIs, which courtesy of caching, is still available). Link to post Share on other sites More sharing options...
Echo Posted January 31, 2012 Author ID:522209 Share Posted January 31, 2012 .net is for all our servers. .com is for commerical.How do you mean to hide our whois, we use 2 different TLD's for different things? Link to post Share on other sites More sharing options...
Echo Posted January 31, 2012 Author ID:522210 Share Posted January 31, 2012 You may have not been able to contact the email on the .net domain due to him going to university. Link to post Share on other sites More sharing options...
MysteryFCM Posted January 31, 2012 ID:522211 Share Posted January 31, 2012 You sure that's all it is? I've got DNS records that say otherwise (e.g. everything suddenly switching from your .net to the .com, and new ones only turning up on the .com (e.g. a trojan and phish this morning, where previously they only turned up on the .net, and of course, the sudden switch from a public WhoIs to a hidden one, hiding the previous traces to peer.id.au, adam.com.au etc - oh and of course, extrohosting.net no longer resolving - kinda says it all really) Link to post Share on other sites More sharing options...
MysteryFCM Posted January 31, 2012 ID:522214 Share Posted January 31, 2012 You may have not been able to contact the email on the .net domain due to him going to university.Shouldn't be running a hosting company if he can't both reply to abuse reports, or keep track of what his clients are doing (his host failed to respond too, which is one of the reasons the block was placed).Fact is, until there is a drastic reduction in abuse across the range, the block will not be getting removed - the AS owners were given plenty of opportunities, and they squandered them - choosing instead to simply disable their abuse address entirely (not the brightest idea as it proves beyond doubt, that they're supporting it) Link to post Share on other sites More sharing options...
Echo Posted January 31, 2012 Author ID:522216 Share Posted January 31, 2012 Are you able to email me the details to abuse@extrohosting.com, I will sort it out. I am changing the whois details on the .net, so if anything else you need to report it will get taken care of straight away. Link to post Share on other sites More sharing options...
MysteryFCM Posted January 31, 2012 ID:522218 Share Posted January 31, 2012 I'll get the details sorted out and sent across (please bear in mind, this is only one of hundreds of active investigations, so please allow up to 72 hours) Link to post Share on other sites More sharing options...
Echo Posted January 31, 2012 Author ID:522226 Share Posted January 31, 2012 Thank you. Once I recieve an email I will get everything sorted. Link to post Share on other sites More sharing options...
peerAU Posted February 1, 2012 ID:522480 Share Posted February 1, 2012 Well there is clearly something wrong with you system, I'm the holder of the .net domain, and I haven't received ANY emails from malwarebytes or anything related to any abuse report other than a few from a completely different datacenter form an old botnet attack 4 months ago. the email is on a Google Apps account so it shouldn't have been spamfiltered. Link to post Share on other sites More sharing options...
MysteryFCM Posted February 1, 2012 ID:522549 Share Posted February 1, 2012 It's entirely possible they were filtered, but only a handful of hosts have claimed reports have never been sent - and all have been cases such as this. Coincidence? Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now