gobeck Posted September 18, 2009 ID:128717 Share Posted September 18, 2009 Downloading stationery on newsgroup is blocked by Malwarebytes from trusted IP 98.124.199.1 from contributor who recently changed ISP's. Link to post Share on other sites More sharing options...
Ma2t Posted September 18, 2009 ID:128723 Share Posted September 18, 2009 This information is for Tech. Supporthttp://hosts-file.net/default.asp?s=98.124.199.1 Link to post Share on other sites More sharing options...
MysteryFCM Posted September 18, 2009 ID:128737 Share Posted September 18, 2009 Sadly this IP contains far too many malicious domains for us to remove it.http://hosts-file.net/?s=98.124.199.1&view=matcheshttp://hosts-file.net/?s=98.124.199.1&view=historyCould you provide the domain you are trying to download from please? Link to post Share on other sites More sharing options...
gobeck Posted September 23, 2009 Author ID:132003 Share Posted September 23, 2009 Sadly this IP contains far too many malicious domains for us to remove it.http://hosts-file.net/?s=98.124.199.1&view=matcheshttp://hosts-file.net/?s=98.124.199.1&view=historyCould you provide the domain you are trying to download from please?Yes, the domain is: btconnect.com British Telephone is a major telephone provider in Great Britian. Link to post Share on other sites More sharing options...
MysteryFCM Posted September 24, 2009 ID:132270 Share Posted September 24, 2009 Are you sure? btconnect.com is failing to resolve, and according to records, has never been at that IP;http://hosts-file.net/?s=btconnect.comWith the www prefix it does resolve, but still doesn't resolve to that IP.http://hosts-file.net/?s=www.btconnect.com Link to post Share on other sites More sharing options...
gobeck Posted September 25, 2009 Author ID:132755 Share Posted September 25, 2009 No I am not sure but it was my understanding that the ISP is BT. The posters site is www.adams-office.co.uk and Malwarebytes blocks this with the same IP.Art Link to post Share on other sites More sharing options...
MysteryFCM Posted September 25, 2009 ID:132760 Share Posted September 25, 2009 adams-office.co.uk actually resolves to two different IP's;http://hosts-file.net/?s=adams-office.co.ukhttp://hosts-file.net/?s=www.adams-office.co.ukSadly, both IP's are known for malicious behaviour (though the IP for adams-office.co.uk isn't blocked as there's not enough to warrant it).www.adams-office.co.uk uses a Frameset redirect to karmic-portal.co.uk;<html><head><title></title></head><!-- Redirection Services ASH01WRED08 H1 --><frameset rows='100%, *' frameborder=no framespacing=0 border=0><frame src="http://karmic-portal.co.uk" name=mainwindow frameborder=no framespacing=0 marginheight=0 marginwidth=0></frame></frameset><noframes><h2>Your browser does not support frames. We recommend upgrading your browser.</h2><br><br><center>Click <a href="http://karmic-portal.co.uk">here</a> to enter the site.</center></noframes></html>karmic-portal.co.uk is also not located at the same IP, but is actually located at the same IP as adams-office.co.uk (note, without the www prefix)http://hosts-file.net/?s=karmic-portal.co.ukQuite the run-around here ..... Link to post Share on other sites More sharing options...
adamsoffice Posted September 25, 2009 ID:132898 Share Posted September 25, 2009 www.adams-office.co.uk uses a Frameset redirect to karmic-portal.co.uk;karmic-portal.co.uk is also not located at the same IP, but is actually located at the same IP as adams-office.co.uk (note, without the www prefix)http://hosts-file.net/?s=karmic-portal.co.ukQuite the run-around here .....I do not use Malwarebytes and so am unable to test this out. However, I have been paying for the karmic-portal.co.uk domain for around 10 years now through my (business) btconnect account. This account goes back to dial-up days and as I was with a different ISP for the last 6 years, I was paying for this as as part of a business pack addition to my bt business telephone line. I have also been paying for the adams-office.co.uk domain for the past 10 years too. It was a sub-domain to a business account with BT Webworld Gold account. However, that used to cost me around Link to post Share on other sites More sharing options...
adamsoffice Posted September 25, 2009 ID:132900 Share Posted September 25, 2009 Are you sure? btconnect.com is failing to resolve, and according to records, has never been at that IP;http://hosts-file.net/?s=btconnect.comWith the www prefix it does resolve, but still doesn't resolve to that IP.http://hosts-file.net/?s=www.btconnect.comTo clarify this, the original post to the newsgroup wich was blocked for gobeck was sent through my btinternet ISP. Gobeck informed me through the newsgroup that Malwarebytes was blocking it, so I disconnected from my btinternet ISP and connected to my btconnect ISP. I then sent the message again through the btconnect ISP. Gobeck informed me that the second post was also blocked by Malwarebytes. I hope this clarifies the situation. I did check my IP addresses from the source code in both posts and neither seems to be the same as the one being blocked by Malwarebytes. I am totally confused as to why this is happening.AdamsOffice Link to post Share on other sites More sharing options...
MysteryFCM Posted September 25, 2009 ID:132947 Share Posted September 25, 2009 AdamsOffice,BT isn't being blocked at all, neither of the domains go through BT IP space (the only reference to BT, is the MX records, which aren't blocked). You can see the company that owns the IP's at;http://hosts-file.net/?s=98.124.199.1OrgName: eNom, Incorporated OrgID: ENOMAddress: 15801 NE 24th StreetCity: BellevueStateProv: WAPostalCode: 98008Country: UShttp://hosts-file.net/?s=209.235.144.9OrgName: InternetNamesForBusiness.com OrgID: INFBAddress: 500 East Broward BoulevardAddress: Suite 1700City: Fort LauderdaleStateProv: FLPostalCode: 33394Country: US Link to post Share on other sites More sharing options...
adamsoffice Posted September 26, 2009 ID:133457 Share Posted September 26, 2009 AdamsOffice,BT isn't being blocked at all, neither of the domains go through BT IP space (the only reference to BT, is the MX records, which aren't blocked). You can see the company that owns the IP's at;http://hosts-file.net/?s=98.124.199.1OrgName: eNom, Incorporated OrgID: ENOMAddress: 15801 NE 24th StreetCity: BellevueStateProv: WAPostalCode: 98008Country: UShttp://hosts-file.net/?s=209.235.144.9OrgName: InternetNamesForBusiness.com OrgID: INFBAddress: 500 East Broward BoulevardAddress: Suite 1700City: Fort LauderdaleStateProv: FLPostalCode: 33394Country: USThanks for the information Mystery FCM. I have done my own checking through DNS Tools website and foud the same information. I just spent a considerable amout of time talking to technical support at BT (business) but was categorically told that there was nothing they could do!! They said that I was the first person to have raised this issue about Malwarebytes rejection. They also said that the same top host was used for their BT sites. So, I guess they are not going to change unless a significant number of BT customers complain! The technician didn't have Malwarebytes installed and said that he could add my website as trusted to his McAfee. Given that a large number of computer users probably think that touching their keyboard might cause an infection of their computer, I am sure that they would not take the trouble to write to owner of the blocked domain to advise them that there is a problem. Gobeck took up this issue on my behalf because he has known me for some time and was aware that I wouldn't knowingly be involved in anything connected with malware. BT even suggested that I move my domain elsewhere!! Clearly, by paying the Link to post Share on other sites More sharing options...
MysteryFCM Posted September 26, 2009 ID:133483 Share Posted September 26, 2009 Malwarebytes does not currently have a whitelist facility. However, it's not the hosting that needs changed, it's only the DNS (at present, it uses a frameset redirect). If you change the DNS for the domain, to point directly to the IP it actually takes you to, this issue will be resolved. Link to post Share on other sites More sharing options...
adamsoffice Posted September 26, 2009 ID:133495 Share Posted September 26, 2009 Malwarebytes does not currently have a whitelist facility. However, it's not the hosting that needs changed, it's only the DNS (at present, it uses a frameset redirect). If you change the DNS for the domain, to point directly to the IP it actually takes you to, this issue will be resolved.Thanks Steven.....but, how do I do that? I think I already explained that BT couldn't amalgamate the original business pack with the karmic-portal domain with the adams-office domain. The BT Webworld Gold account had a Limited company top domain with the adams-office as a sub domain, which I brought across to BTNAMES. Therefore, it just sits there with no website account attached to it. I just didn't think it would appear very 'professional' to have the karmic-portal address being used to a business website...hence asking for it to be re-directed. So, I think you are saying that I would have to close the karmic-portal account and upload everything I have there to a newly created account using the adams-office domain? That would be a lot of work plus some people still have both addresses.AdamsOffice Link to post Share on other sites More sharing options...
MysteryFCM Posted September 26, 2009 ID:133506 Share Posted September 26, 2009 You wouldn''t need to close anything, no. If BT do not provide facilities for customizing the DNS records for your domain, you may want to transfer the domain (and ONLY the adams-office.co.uk domain) to Domain Monster, who do allow customizing of DNS records. Link to post Share on other sites More sharing options...
adamsoffice Posted September 26, 2009 ID:133517 Share Posted September 26, 2009 You wouldn''t need to close anything, no. If BT do not provide facilities for customizing the DNS records for your domain, you may want to transfer the domain (and ONLY the adams-office.co.uk domain) to Domain Monster, who do allow customizing of DNS records.Thanks for the reply. However, I have paid for the domain ( Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now