Jump to content
HerbWard

False positive homework303.

Recommended Posts

After investing a lot of work in a new website, I asked a potential customer to test it.

He reported to me that its IP number had gotten blocked by your Malwarebytes AntiMalware program.

I received the IP number about 10 days ago. I could ask for a new IP number, but it might be blocked also.

Apparently, my IP number has a tainted history. Can anyone help me? The domain name is "homework303.com", and the IP number is 204.124.182.205

I have three questions:

1. Can we "unblock" this IP?

2. If so, how long will it take for the change to propagate to my potential customer?

3. How can I find a web hosting company with untainted IP numbers?

Share this post


Link to post
Share on other sites

Looking over the domains that are or were, hosted on this IP range, it would appear the entire hosting company has a tainting issue (to put it politely).

Based on what I've seen on this range, I'd advise changing to a different hosting company as soon as possible. Although I can't recommend a specific hosting company at present (I host most of my sites myself, and the rest, on a friends server), I used to use Inspiratech 2000 Ltd (inspiratech.uk.com), and HostGator (hostgator.com) have a good reputation.

My advice for those seeking a hosting company is to enquire about the IP ranges they use, and research the ranges, aswell as the hosting company - this will highlight any issues with both of them.

Share this post


Link to post
Share on other sites

Thanks for the info. Just for my own curiosity, do you know type of activity is involved? Spam, phishing, fraud, hate crimes, ...?

Share this post


Link to post
Share on other sites

Activity I have seen includes exploits, malware, phishing and CP (the latter of which, I've reported to the IWF (iwf.org.uk))

Share this post


Link to post
Share on other sites

Thanks for the info. One last question. In investigating alternative hosting companies, how can I "research their IP ranges"? Is there a web site which lists suspicious IP addresss or domain names? Could I use this forum for that purpose?

Share this post


Link to post
Share on other sites

There's a multitude of sites you can use to investigate IP ranges, including;

http://hosts-file.net

http://malwareurl.com

http://malwaredomainlist.com

http://support.clean-mx.de

hosts-file.net is run by me, and provides the relevant links to other sites you can use for research (including for example, Google diagnostics).

If when contacting a hosting company, they refuse to tell you which IP ranges they use, this should immediately spark a red flag.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.