Blog for hpHosts, and whatever else I feel like writing about ....

Monday 9 November 2009

More on MSN scams ......

Jonathan has been firing off e-mails to abuse depts for the various ISP's involved in providing hosting to one of the domains, and has sent me an update that includes those that have both responded and taken action, and those that have not.

ISP's who have taken action already:

24.117.242.185 - > CableOne = DOWN, or just timing out.
77.127.51.53 - > Zahav.net.il = DOWN, or just timing out
82.249.4.178 - > PROXAD.net, DOWN, or just timing out
24.150.120.91 - > CGOCable.net, DOWN, or just timing out
24.138.228.242 - > LibertyPR.net, DOWN, or just timing out..
199.76.166.241 - > Level3.net, DOWN, or just timing out
174.50.132.75 - > ComCast.net, DOWN, or just timing out
174.6.234.64 - > SJRB (Shaw Communcations), my ISP actually, DOWN! or just timing out, good to see my ISP acts quickly!
71.7.207.128 - > EastLink.ca , DOWN, or just timing out
99.231.34.94 - > Rogers.com, DOWN, or just timing out

ISP's that have NOT taken action (Sites are still up), if the site says "Site is underconstruction! " when navigating to the IP, you know it still is up..

76.200.168.241 - > SBCGlobal
71.149.143.37 - > SBCGlobal.net
99.136.108.225 - > SBCGlobal
98.213.85.94 - > COMCAST
69.254.67.43 - > Comcast
88.167.29.114 - > ProXAD.net
24.237.90.98 - > GCI.net
92.254.231.25 - > RIKSNET.se
213.89.29.183 - > COMHEM.com
207.255.68.141 - > AtlanticBB.net
97.65.77.188 - > TWTelecom.net
75.237.25.163 - > VerizonWireless
71.70.234.199 - > RoadRunner (rr.com)
66.241.173.212 - > AmericanBB.com
66.231.135.49 - > TeamPardigm
208.120.179.200 - > EarthLink (They said they would act quickly (over chat session)!, apparently not)
138.210.154.36 - > EmbarqServices.net
67.77.32.172 - > EmbarqServices.net
71.55.63.64 - > EmbarQServices.net
99.239.86.254 - > Rogers.com
68.123.103.61 -> ATT
67.223.6.126 - > Btes.net
198.211.205.219 - > TelwestLLC
84.108.166.70 - > Bezequint.net
71.55.63.64 - > EastLink.ca


The domain in question is pick-blocked-buddies.com, and unlike the previous domains involved, this one is hosted on a botnet (as you've no doubt guessed).

No comments: