| Life In 19x19 http://lifein19x19.com/ |
|
| botnet alert? http://lifein19x19.com/viewtopic.php?f=14&t=11832 |
Page 1 of 1 |
| Author: | skydyr [ Fri May 15, 2015 12:19 pm ] |
| Post subject: | botnet alert? |
Just a heads up for the admins: I'm getting an error trying to browse to life in 19x19. Our firewall is blocking the site because it thinks it is a botnet command and control server. The relevant IP is 50.62.100.1. I'm not sure if this is a spurious error, or related to another site hosted with the same IP, or legitimate, but it may be worth looking into. |
|
| Author: | moyoaji [ Mon May 18, 2015 1:30 am ] |
| Post subject: | Re: botnet alert? |
Apparently, that IP address hosts over 150 different domains. Out of all of those, I wouldn't be surprised if one is not a legitimate site. http://www.iptodomain.com/ip-50-62-100-1.php |
|
| Author: | Jordus [ Mon May 18, 2015 2:38 pm ] |
| Post subject: | Re: botnet alert? |
If you are not familiar with how IP address works it is not unheard of for one address to host multiple domains. So it would not be uncommon to get accidentally associated with something. You also run into issues with IP spoofers etc. Its not something I would personally worry about, however, what firewall are you speaking of? I can send our webhost an email to let them know whats going on. They may want to send an official heads up notice that they don't need to be doing that for all the domains associated to that IP. |
|
| Author: | skydyr [ Tue May 19, 2015 9:43 am ] |
| Post subject: | Re: botnet alert? |
It's our corporate firewall. It's a Sonicwall (now dell) and IIRC pulls its lists from them. It seems to have resolved itself, so it may have been spuriously listed. Never hurts to check, though. |
|
| Page 1 of 1 | All times are UTC - 8 hours [ DST ] |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|