Large site, IP being blocked, please help.

[moosem]

hello there,

i've been notified by a few people now that they can't watch videos on my site. eventually we established it was because your program is blocking the IP on which the videos are hosted. i moved my media server to this new IP a few months ago and i am 100% sure that nothing on there is infected with anything. all i'm using this server/ip for is hosting video files.

so my question is whether you're blocking the IP in error or did someone else in the past use this IP for something not so pleasent? if so can you retest it and whitelist it again, or should i look at changing IPs?

the IP in question is: 95.211.92.161

thanks.

[MysteryFCM]

95.211.* is a Leaseweb IP range, and unfortunately, they are well known for providing housing to criminals, which is why their ranges are blacklisted.

I'd strongly urge you to move to a provider that is not using this range, and not known for criminal behaviour.

[moosem]

95.211.* is a Leaseweb IP range, and unfortunately, they are well known for providing housing to criminals, which is why their ranges are blacklisted.

I'd strongly urge you to move to a provider that is not using this range, and not known for criminal behaviour.

ouch. i actually have nothing to do with leaseweb at all, my hosting is done via a server admin. i believe he has hired out a section of the data center in which leaseweb is also located so that's probably why the IP is in their range.

i don't know much about leaseweb but i can't imagine that it's so bad that you have to ban every single IP hosted by them. you are basically saying guilty until proven innocent, and even when proven innocent you're still guilty. it doesn't make a lot of sense at all. there must be a way for you exclude this particular IP from being blocked?

[Bozie]

ouch. i actually have nothing to do with leaseweb at all, my hosting is done via a server admin. i believe he has hired out a section of the data center in which leaseweb is also located so that's probably why the IP is in their range.

i don't know much about leaseweb but i can't imagine that it's so bad that you have to ban every single IP hosted by them. you are basically saying guilty until proven innocent, and even when proven innocent you're still guilty. it doesn't make a lot of sense at all. there must be a way for you exclude this particular IP from being blocked?

I agree with you totally.

[moosem]

i see you've replied in other threads MysteryFCM but not this one. can you please unblock my IP? moving hosts is not an option, this isn't some small virtual account, we're talking about dedicated servers costing thousands a month.

i see you have unblocked an IP hosted at leaseweb for Kaspersky, so I know it's possible:

http://www.malwarebytes.org/forums/index.php?showtopic=21439

[MysteryFCM]

Apologies for not responding sooner, I'd missed your replies.

Given the only site on this IP is files.sexyandfunny.com, which is obviously related to forums.sexyandfunny.com, this is not going to happen (atleast, not until the fake WLM dialogs from AdultFriendFinder are removed, and certainly not whilst some of the adverts on the site are depicting sexual activity between minors (whether it is or not is irrelevant, the problem is atleast 4 of the images I saw in the adverts, depicted persons under the legal age)).

[moosem]

Apologies for not responding sooner, I'd missed your replies.

Given the only site on this IP is files.sexyandfunny.com, which is obviously related to forums.sexyandfunny.com, this is not going to happen (atleast, not until the fake WLM dialogs from AdultFriendFinder are removed, and certainly not whilst some of the adverts on the site are depicting sexual activity between minors (whether it is or not is irrelevant, the problem is atleast 4 of the images I saw in the adverts, depicted persons under the legal age)).

first of all, the two subdomains are not related. the files subdomain is not serving files for the forum, the two are located on completely different IPs/servers/hosts.

secondly even though it has nothing to do with the IP in question, since when are ads for adult friend finder considered malware? along the same note there are absolutely no minors or depicted minors in ads. unless you're seeing something i'm not, this is an outrageous claim. we take this stuff very seriously and make sure we only work with clean advertisers who don't partake in this type of stuff. again, the forum has nothing to do with the IP in question, but since you brought those things up i had to set things straight.

[MysteryFCM]

As far as the adverts, please refer to the PM I sent you.

As far as the AdultFriendFinder adverts, whilst they aren't considered malware, they are fraudulent, and the AFF site itself is constantly being seen involved in malware and phishing scams.