Jump to content
gobeck

98.124.199.1

Recommended Posts

Downloading stationery on newsgroup is blocked by Malwarebytes from trusted IP 98.124.199.1 from contributor who recently changed ISP's.

Share this post


Link to post
Share on other sites

Sadly this IP contains far too many malicious domains for us to remove it.

http://hosts-file.net/?s=98.124.199.1&view=matches

http://hosts-file.net/?s=98.124.199.1&view=history

Could you provide the domain you are trying to download from please?

Share this post


Link to post
Share on other sites

Are you sure? btconnect.com is failing to resolve, and according to records, has never been at that IP;

http://hosts-file.net/?s=btconnect.com

With the www prefix it does resolve, but still doesn't resolve to that IP.

http://hosts-file.net/?s=www.btconnect.com

Share this post


Link to post
Share on other sites

No I am not sure but it was my understanding that the ISP is BT. The posters site is www.adams-office.co.uk and Malwarebytes blocks this with the same IP.

Art

Share this post


Link to post
Share on other sites

adams-office.co.uk actually resolves to two different IP's;

http://hosts-file.net/?s=adams-office.co.uk

http://hosts-file.net/?s=www.adams-office.co.uk

Sadly, both IP's are known for malicious behaviour (though the IP for adams-office.co.uk isn't blocked as there's not enough to warrant it).

www.adams-office.co.uk uses a Frameset redirect to karmic-portal.co.uk;

<html><head>

<title></title></head>
<!-- Redirection Services ASH01WRED08 H1 -->
<frameset rows='100%, *' frameborder=no framespacing=0 border=0>
<frame src="http://karmic-portal.co.uk" name=mainwindow frameborder=no framespacing=0 marginheight=0 marginwidth=0></frame>
</frameset>
<noframes>
<h2>Your browser does not support frames. We recommend upgrading your browser.</h2><br><br>
<center>Click <a href="http://karmic-portal.co.uk">here</a> to enter the site.</center>
</noframes></html>

karmic-portal.co.uk is also not located at the same IP, but is actually located at the same IP as adams-office.co.uk (note, without the www prefix)

http://hosts-file.net/?s=karmic-portal.co.uk

Quite the run-around here .....

Share this post


Link to post
Share on other sites
www.adams-office.co.uk uses a Frameset redirect to karmic-portal.co.uk;

karmic-portal.co.uk is also not located at the same IP, but is actually located at the same IP as adams-office.co.uk (note, without the www prefix)

http://hosts-file.net/?s=karmic-portal.co.uk

Quite the run-around here .....

I do not use Malwarebytes and so am unable to test this out. However, I have been paying for the karmic-portal.co.uk domain for around 10 years now through my (business) btconnect account. This account goes back to dial-up days and as I was with a different ISP for the last 6 years, I was paying for this as as part of a business pack addition to my bt business telephone line. I have also been paying for the adams-office.co.uk domain for the past 10 years too. It was a sub-domain to a business account with BT Webworld Gold account. However, that used to cost me around

Share this post


Link to post
Share on other sites
Are you sure? btconnect.com is failing to resolve, and according to records, has never been at that IP;

http://hosts-file.net/?s=btconnect.com

With the www prefix it does resolve, but still doesn't resolve to that IP.

http://hosts-file.net/?s=www.btconnect.com

To clarify this, the original post to the newsgroup wich was blocked for gobeck was sent through my btinternet ISP. Gobeck informed me through the newsgroup that Malwarebytes was blocking it, so I disconnected from my btinternet ISP and connected to my btconnect ISP. I then sent the message again through the btconnect ISP. Gobeck informed me that the second post was also blocked by Malwarebytes. I hope this clarifies the situation. I did check my IP addresses from the source code in both posts and neither seems to be the same as the one being blocked by Malwarebytes. I am totally confused as to why this is happening.

AdamsOffice

Share this post


Link to post
Share on other sites

AdamsOffice,

BT isn't being blocked at all, neither of the domains go through BT IP space (the only reference to BT, is the MX records, which aren't blocked). You can see the company that owns the IP's at;

http://hosts-file.net/?s=98.124.199.1

OrgName: eNom, Incorporated 
OrgID: ENOM
Address: 15801 NE 24th Street
City: Bellevue
StateProv: WA
PostalCode: 98008
Country: US

http://hosts-file.net/?s=209.235.144.9

OrgName: InternetNamesForBusiness.com 
OrgID: INFB
Address: 500 East Broward Boulevard
Address: Suite 1700
City: Fort Lauderdale
StateProv: FL
PostalCode: 33394
Country: US

Share this post


Link to post
Share on other sites
AdamsOffice,

BT isn't being blocked at all, neither of the domains go through BT IP space (the only reference to BT, is the MX records, which aren't blocked). You can see the company that owns the IP's at;

http://hosts-file.net/?s=98.124.199.1

OrgName: eNom, Incorporated 
OrgID: ENOM
Address: 15801 NE 24th Street
City: Bellevue
StateProv: WA
PostalCode: 98008
Country: US

http://hosts-file.net/?s=209.235.144.9

OrgName: InternetNamesForBusiness.com 
OrgID: INFB
Address: 500 East Broward Boulevard
Address: Suite 1700
City: Fort Lauderdale
StateProv: FL
PostalCode: 33394
Country: US

Thanks for the information Mystery FCM. I have done my own checking through DNS Tools website and foud the same information. I just spent a considerable amout of time talking to technical support at BT (business) but was categorically told that there was nothing they could do!! They said that I was the first person to have raised this issue about Malwarebytes rejection. They also said that the same top host was used for their BT sites. So, I guess they are not going to change unless a significant number of BT customers complain! The technician didn't have Malwarebytes installed and said that he could add my website as trusted to his McAfee. Given that a large number of computer users probably think that touching their keyboard might cause an infection of their computer, I am sure that they would not take the trouble to write to owner of the blocked domain to advise them that there is a problem. Gobeck took up this issue on my behalf because he has known me for some time and was aware that I wouldn't knowingly be involved in anything connected with malware. BT even suggested that I move my domain elsewhere!! Clearly, by paying the

Share this post


Link to post
Share on other sites

Malwarebytes does not currently have a whitelist facility. However, it's not the hosting that needs changed, it's only the DNS (at present, it uses a frameset redirect). If you change the DNS for the domain, to point directly to the IP it actually takes you to, this issue will be resolved.

Share this post


Link to post
Share on other sites
Malwarebytes does not currently have a whitelist facility. However, it's not the hosting that needs changed, it's only the DNS (at present, it uses a frameset redirect). If you change the DNS for the domain, to point directly to the IP it actually takes you to, this issue will be resolved.

Thanks Steven.....but, how do I do that? I think I already explained that BT couldn't amalgamate the original business pack with the karmic-portal domain with the adams-office domain. The BT Webworld Gold account had a Limited company top domain with the adams-office as a sub domain, which I brought across to BTNAMES. Therefore, it just sits there with no website account attached to it. I just didn't think it would appear very 'professional' to have the karmic-portal address being used to a business website...hence asking for it to be re-directed. So, I think you are saying that I would have to close the karmic-portal account and upload everything I have there to a newly created account using the adams-office domain? That would be a lot of work plus some people still have both addresses.

AdamsOffice

Share this post


Link to post
Share on other sites

You wouldn''t need to close anything, no. If BT do not provide facilities for customizing the DNS records for your domain, you may want to transfer the domain (and ONLY the adams-office.co.uk domain) to Domain Monster, who do allow customizing of DNS records.

Share this post


Link to post
Share on other sites
You wouldn''t need to close anything, no. If BT do not provide facilities for customizing the DNS records for your domain, you may want to transfer the domain (and ONLY the adams-office.co.uk domain) to Domain Monster, who do allow customizing of DNS records.

Thanks for the reply. However, I have paid for the domain (

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.