Blog for hpHosts, and whatever else I feel like writing about ....

Thursday, 28 April 2011

Tucows + Fake AV + new (but old) /24

It was bound the happen, after having their IPs killed a few days ago, and I'm actually surprised it took them this long, but alas as of the 28th, there's yet more malicious fake AV domains via Tucows (wonder if Tucows are actually going to put a stop to this?).

Some of these are living on, owned by AS51786 HAKVA LLC 2H Akva Group. Not surprisingly, this AS has a history of serving up maliciousness in the form of everything from fake AVs to trojans to exploits, and a bit of everything else inbetween.

Others are living at, which is owned by SoftLayer (yet another AS with a history of housing malicious content).

I've added the domains to hpHosts and MDL, and Malwarebytes' AntiMalware users will be pleased to know, the IPs being used, are already blocked by the IP Protection facility :o)

Tuesday, 26 April 2011

Have a router with wireless? Have it secured yet?

Many have been bleating on about securing WiFi pretty much since WiFi was first available to the masses, but many still don't bother securing it, leaving them wide open to abuse at best, and at worst, being prosecuted because someone used YOUR unsecured wireless connection, to download child pornography.

A case has been brought to light yet again, of a man prosecuted because a neighbour used his WiFi to download child pornography, so if you've not secured yours yet - NOW IS THE TIME TO DO SO!. It only takes 5 minutes at most, and will save you a world of trouble.

Read the story at:

Sunday, 24 April 2011

Success!: Fake AVs at CaroNet (AS11368)

I am pleased to report, with the help of my friend William (GoDaddy), every single one of the following, has had their IPs suspended by CaroNet (better late than never). I fully expect them to move to new IPs, but in the meantime, it's ~500 sites less, that can infect its victims.

Tuesday, 19 April 2011

hpHOSTS - Updated April 2011

hpHOSTS - Updated April 2011

The hpHOSTS Hosts file has been updated. There is now a total of 122,034 listed hostsnames.

If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)
  1. Latest Updated: 20/04/2011 03:00
  2. Last Verified: 20/04/2011 01:00
Download hpHosts now!