temerc.com and fluidhosting.com down

Not entirely sure why at the moment, but both temerc.com and fluidhosting.com (temerc.com hosting company) are down at present.I'm still looking into why, and due to a very annoying difference in time (i.e. their being several hours behind us folk in the UK), is making contacting them a little difficult. I have ruled out an issue with DNS as they're resolving absolutely fine, and trying to load

Read More

vURL Server downtime

Apologies for the vURL Online server downtime earlier folks. Sadly the PSU died (was busy at the time so didn't notice right away). I've popped in an older spare PSU until I can get to the shop for a new one.

Read More

fSpamlist: New "profile" cards

Just a note folks, there's now "profile cards" available for the IP's/email addresses, listed in fSpamList.Example84.237.157.41http://www.fspamlist.com/?c=profile&num=177292c3@pradas.infohttp://www.fspamlist.com/?c=profile&num=174253Note: Additional information on the domains in the e-mail addresses, should be listed on e-mail address profile/report cards, in due course

Read More

fSpamList.com - New RSS feeds!

I am happy to announce, Josh at fSpamList has now added two RSS feeds;Latest additionshttp://www.fspamlist.com/feed.phpMost reported spammershttp://www.fspamlist.com/feed.php?most

Read More

Spambot Search Tool: v0.47

Due to a bug in the SBST UI, v0.47 has now been released. Sorry folks.http://support.it-mate.co.uk/?mode=Products&p=spambotsearchtool

Read More

Spambot Search Tool: v0.46R2

I've re-released v0.46 of the SBST that was released a couple or so hours ago, due to a bug in the script that produces a warning when the whitelist is empty.http://forum.hosts-file.net/viewtopic.php?f=68&t=1955Download:http://support.it-mate.co.uk/?mode=Products&act=DL&p=spambotsearchtool

Read More

100webspace.net: A quick followup

Just an update to this folks.100webspace.net never responded, the support@ address didn't bounce (so presumably they did actually receive it), but the postmaster@ address did.errorsguru.com is no longer a Paretologic affiliate, but instead, is now peddling a much much worse "fully fledged" rogue - RegTool. And what have errorsguru.com' hosting company had to say? Well, disgustingly "Robert R.,

Read More

Naming and Shaming ‘Bad’ ISPs

Roughly two years ago, I began an investigation that sought to chart the baddest places on the Internet, the red light districts of the Web, if you will. What I found in the process was that many security experts, companies and private researchers also were gathering this intelligence, but that few were publishing it. Working with several other researchers, I collected and correlated mounds of

Read More

Avant Force: Development update

Avant Force, the team (well I say Team, last I knew there was actually only my friend, Anderson Che, developing both Avant Browser and Orca Browser), have published an update on the blog, giving outlines of what's going on, with regards to Avant Browser and the much anticipated v12, previously scheduled for release both in January, then February 2010.Sadly, v12 is still not here, we're still with

Read More

Dear Avira: Errr, say it ain't so .....

Going on a little hunt for new stuffage whilst the test machines image was restored, I stumbled upon a thread on the Avira forums, referencing hpHosts, nothing wrong there.http://forum.avira.com/wbb/index.php?page=Thread&postID=920112The post was alerting the Avira folk, to a SpyEraser variant at spyeraser-security.com (post references a different IP (91.201.28.20,AS44107 91.201.28.0/22

Read More

hpHOSTS - UPDATED March 16th, 2010

hpHOSTS - UPDATED March 16th, 2010The hpHOSTS Hosts file has been updated. There is now a total of 126,051 listed hostsnames.If you are NOT using the installer, please read the included Readme.txt file for installation instructions. Enjoy! :)Latest Updated: 16/03/2010 14:00Last Verified: 16/03/2010 13:00Download hpHosts now!http://hosts-file.net/?s=DownloadJust a note folks, I am aware of the

Read More

gtomart.com: A lesson in guaranteeing you'll be blacklisted

There's many many ways to ensure your site will be blacklisted;1. Utilizing malware/exploits2. Developing/distributing [1]3. Using unethical means to promote a site or program4. Utilizing hijacks5. Utilizing blackhat SEO techniques... etc etc etc etcThe list goes on and on and on.Another method however, of ensuring you'll be blacklisted, is by spamming through compromised e-mail accounts. This is

Read More

100webspace.net: OI! Anyone awake over there?

Dear 100webspace.net,I am writing this because you evidently couldn't be bothered to conform to the RFC's and have an active ABUSE@ address!!!When will these companies realise, if they're offering a service such as hosting, connectivity, they MUST provide a WORKING abuse@ address for abuse complaints.Ref:http://www.faqs.org/rfcs/rfc2142.htmlI've already had Paretologic kill off the errorsguru.com

Read More

Crimeware friendly ISP's: VITAL TEKNOLOJI (AS44565)

Turkish based ISP, VITAL TEKNOLOJI (AS44565) have been appearing on my radar for quite some time, and not under the most flattering of terms - they've been and continue to be, home to a major source of badness. Namely, exploits and fake AV's.They actually have several ranges under their control, the most active of which are;79.171.16.0/2193.186.112.0/20188.124.0.0/19I can't say which has been the

Read More

Microsoft Tech Days: Are you going?

A week of free technology events for developers, IT professionals and IT managersWhat's on for Developers?We'll be updating the agenda and session information over the coming days. Follow @uktechdays to be the first in the know.We're going back to basics and have hired two London cinemas during the week so we can deliver the kind of content you've been asking to hear about. Please note that we'll

Read More

Spambot Search Tool: Undisposable.net offline

I have had a few users telling me they were having problems both contacting me, and using the SBST. One user narrowed it down to undisposable.net, and I stupidly didn't think to check the site myself at the time.Checking undisposable.net today shows the site is offline. It's still resolving to 64.202.189.170, but no content is there, so it's failing to connect. There's no contact information in

Read More

Pinball Publisher Network: Yet more blackhat SEO goodness

Going through the latest Google results for new malicious goodness, I stumbled upon a URL I was fully expecting to be serving me with a fake AV (the last 10 or so I'd checked had done), but alas no, not this time. This time I was to be served a page that led me to a fake search results page (PPC fraud);And from there, on to porntubevault.com, which leads you to Pinball Publisher Network.Where

Read More

Server downtime

Sorry for the downtime folks. 89.15.156.197 (kobz-590f9cc5.pool.mediaWays.net) decided it would be fun to constantly flood the server./edit 01:20 03-03-2010This little bugger is back, this time using 83.14.243.106 (efj106.internetdsl.tpnet.pl)

Read More