Blog for hpHosts, and whatever else I feel like writing about ....

Monday, 13 July 2009

Major addition to hpHosts blacklist

Just a note folks, after identifying some new Internet Service Team ranges, I am currently in the process of adding over 3000 new entries to the database. I am seriously wishing the HOSTS file allowed blocking IP ranges, as this could've easily been accomplished by adding the following single line to the blacklist (which is what you can add to your firewall filter if you've not already done so).

217.20.112.0, 217.20.127.255

This block is used by the IST, and owned, surprise surprise, by NetDirekt (yep, I already knew that, which is why it's not a surprise). 217.20.112.* is already in hpHosts, but 113-127 is not (at least, not completely, little scraps here and there were already in the database).

You can see all of the IP ranges I am aware of that are in use by the IST at;

hosts-file.net/pest.asp?show=internetserviceteam




References:

Google poisoning, IST, rogues and 250+ reasons to avoid 209.44.* ......
http://hphosts.blogspot.com/2009/05/google-poisoning-ist-rogues-and-250.html

IST (Internet Service Team - *.internetserviceteam.com) in blackhat SEO campaign - again
http://hphosts.blogspot.com/2009/05/ist-internet-service-team.html

MalwareURL: Internet Service Team
http://www.malwareurl.com/search.php?domain=&s=internetserviceteam&match=0&rp=50&urls=on&redirs=on&ip=on&reverse=on&as=on&ns=on

MalwareURL: AS28753
http://www.malwareurl.com/search.php?domain=&s=AS28753&match=0&rp=50&urls=on&redirs=on&ip=on&reverse=on&as=on

MalwareDomainList: Internet Service Team
http://malwaredomainlist.com/mdl.php?search=internetserviceteam&colsearch=All&quantity=50

No comments: