immedion Posted November 19, 2012 ID:614971 Share Posted November 19, 2012 Hello,Please remove this IP from your software as being malicious. It is a bank website and does not contain any malicious content. They also have 208.83.143.130, .133, and .141 which are also being blocked. They have customers with your software that are unable to access the website.Any questions please feel free to email me.We would like to get this resolved as soon as possible.Thank you,Allen Hall Link to post Share on other sites More sharing options...
immedion Posted November 20, 2012 Author ID:615171 Share Posted November 20, 2012 As an update, it looks like you are reporting the entire /24 as malicious... 208.83.143.0/24. We purchased a company that owned the IP space previously, and they hosted a UK advertising agency that might have caused you to flag this originally. Our reverse DNS zone for that range had some old entries in it that have now been removed. Link to post Share on other sites More sharing options...
immedion Posted November 20, 2012 Author ID:615257 Share Posted November 20, 2012 Can anyone update me as the status of this request? This really is a critical issue for my company, as many of our end users use your product and don't understand the message they are getting. I'd be willing to pay for phone support but they wouldn't even take my request. Link to post Share on other sites More sharing options...
MysteryFCM Posted November 20, 2012 ID:615342 Share Posted November 20, 2012 Sorry for the delay, I'm still looking into this. Link to post Share on other sites More sharing options...
immedion Posted November 21, 2012 Author ID:615753 Share Posted November 21, 2012 Any update? It looked like an update that was pushed fixed the problem, as I was able to get to the website, but when I ping another address on that subnet, I get a blocked message from MB and then it re-blocked the websites and they have stayed blocked. Link to post Share on other sites More sharing options...
MysteryFCM Posted November 23, 2012 ID:616255 Share Posted November 23, 2012 I am still investigating this.One thing does have me curious though - why you chose an ASN/host that caters (or at least, appears to, given it's the only things I've seen over the time I've been monitoring it) exclusively to porn and phishing/fraud sites? (there's never been anything else on this range in the history of my monitoring it). Link to post Share on other sites More sharing options...
MysteryFCM Posted November 23, 2012 ID:616256 Share Posted November 23, 2012 The block has now been removed. Link to post Share on other sites More sharing options...
immedion Posted November 26, 2012 Author ID:617372 Share Posted November 26, 2012 Thanks. The previous owner of the block allowed this type of content to be hosted on their infrastructure. We were given the block with the aquisition of a company, not knowing until this particular issue that the block was used for unsavory purposes. Given that most blacklist sites have the block as being allowed, we saw no reason not to use it. In our findings MB was pretty much the only software blocking it. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now