Kate- Posted August 5, 2010 ID:296224 Share Posted August 5, 2010 The following IP shows that it's listed in Malwarebytes IP list: 204.152.194.27 as well as 96.44.128.110. Link to post Share on other sites More sharing options...
MysteryFCM Posted August 5, 2010 ID:296230 Share Posted August 5, 2010 Can you tell me the domains involved please? Link to post Share on other sites More sharing options...
Kate- Posted August 5, 2010 Author ID:296235 Share Posted August 5, 2010 Can you tell me the domains involved please?96.44.128.110 is being blocked as-is as it is a new dedicated server, not as a domain.204.152.194.27 is being blocked as https://manage.quadranet.com Link to post Share on other sites More sharing options...
MysteryFCM Posted August 5, 2010 ID:296249 Share Posted August 5, 2010 I'm actually more interested in the domains you've got pointing to these IPs, as one of these /24s is well known for malicious content (96.44.128.110 used to house malicious Chinese sites), which is why they were blocked.Indeed, loading 96.44.128.110 itself, shows source code to what looks to be a phishing site (tdbank.com).204.152.194.27 unless I'm mistaken, is the login page for quadranet customers, and indeed, shouldn't be blocked, so I'll get that unblocked - I can't unblock the other one at present, given it's current content. Link to post Share on other sites More sharing options...
Kate- Posted August 5, 2010 Author ID:296288 Share Posted August 5, 2010 I'm actually more interested in the domains you've got pointing to these IPs, as one of these /24s is well known for malicious content (96.44.128.110 used to house malicious Chinese sites), which is why they were blocked.Indeed, loading 96.44.128.110 itself, shows source code to what looks to be a phishing site (tdbank.com).204.152.194.27 unless I'm mistaken, is the login page for quadranet customers, and indeed, shouldn't be blocked, so I'll get that unblocked - I can't unblock the other one at present, given it's current content.Steve:I have sent you my email I received from the bank regarding this website including headers. Note I didn't include it in this ticket as it contains private bank staff email and phone numbers.Thanks! Link to post Share on other sites More sharing options...
Kate- Posted August 5, 2010 Author ID:296289 Share Posted August 5, 2010 I'll also have to go over a few other IPs with you. The main ones being:66.63.160.0/1972.11.128.0/19216.45.48.0/2098.143.144.0/20204.152.192.0/1996.44.128.0/18Thanks! Link to post Share on other sites More sharing options...
MysteryFCM Posted August 6, 2010 ID:296713 Share Posted August 6, 2010 Thanks for letting me know, and apologies for taking so long. Link to post Share on other sites More sharing options...
Kate- Posted August 6, 2010 Author ID:296810 Share Posted August 6, 2010 Thanks for letting me know, and apologies for taking so long.It's fine Steven. You have a life above and beyond helping people on the forums of that I am certain.Let me know how I can have the rest of the IP blocks checked.Thanks! Link to post Share on other sites More sharing options...
MysteryFCM Posted August 7, 2010 ID:297495 Share Posted August 7, 2010 I'll be checking them all myself Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now