The New Tech - View Single Post - HOW TO SECURE Windows 2000/XP/Server 2003 & VISTA

**APK** · 09:51pm

More "RBN" info. ... apk

"New NEWS": Well, it appears I was correct in my "assumption/guess" above (about my suspecting the "RBN being @ it again") 2 posts up, which are NOW verified, per this quote from the above source:

SECOND MASS HACK EXPOSED:

http://www.itnews.com.au/News/72214,second...ck-exposed.aspx

AND, the source I used for this list:

http://ddanchev.blogspot.com/2008/03/more-...ame-attack.html

And, the salient portion that notes that my suspicion was correct:

"if you look at the IPs used in the IFRAMEs, these are the front-end to rogue anti virus and anti spyware tools that were using RBN's infrastructure before it went dark, and continue using some of the new netblocks acquired by the RBN"

So, with that said? Here are those URL's from the list above, albeit altered to 0.0.0.0 equations, for your CUSTOM HOSTS FILE, that shuts out RBN (these appear to be their newly acquired domains list) & the servers they use:

START OF LIST TO ADD TO YOUR CUSTOM HOSTS FILE FOR BLOCKING OUT BAD SITEs/ADBANNERS THAT MAY BE INFECTED ETC.:
0.0.0.0 do-t-h-e.com
0.0.0.0 rx-pharmacy.cn
0.0.0.0 m5b.info
0.0.0.0 hotpornotube08.com
0.0.0.0 hot-pornotube-2008.com
0.0.0.0 hot-pornotube08.com
0.0.0.0 adult-tubecodec2008.com
0.0.0.0 adulttubecodec2008.com
0.0.0.0 hot-tubecodec20.com
0.0.0.0 media-tubecodec2008.com
0.0.0.0 porn-tubecodec20.com
0.0.0.0 scanner.spyshredderscanner.com
0.0.0.0 xpantivirus2008.com
0.0.0.0 xpantivirus.com
0.0.0.0 bestsexworld.info
0.0.0.0 requestedlinks.com
END OF LIST TO ADD TO YOUR CUSTOM HOSTS FILE FOR BLOCKING OUT BAD SITEs/ADBANNERS THAT MAY BE INFECTED ETC.:

FOR THOSE INTERESTED (or, those that need actual IP addresses to add to firewall rules tables OR IE restricted zones etc.), here are the actual IP addresses of the bogus servers:

do-t-h-e.com (69.50.167.166)
rx-pharmacy.cn (82.103.140.65)
m5b.info (124.217.253.6)
hotpornotube08.com (206.51.229.67)
hot-pornotube-2008.com (206.51.229.67)
hot-pornotube08.com (206.51.229.67)
adult-tubecodec2008.com (195.93.218.43)
adulttubecodec2008.com (195.93.218.43)
hot-tubecodec20.com (195.93.218.43)
media-tubecodec2008.com (195.93.218.43)
porn-tubecodec20.com (195.93.218.43)
scanner.spyshredderscanner.com (77.91.229.106)
xpantivirus2008.com (69.50.173.10)
xpantivirus.com (72.36.198.2)
bestsexworld.info (72.232.224.154)
requestedlinks.com (216.255.185.82)

Also - These you won't be able to block via HOSTS file filtering methods, but still can be blocked via other means (IE restricted zones, firewall rules tables, etc. et al):

89.149.243.201
89.149.243.202
72.232.39.252
195.225.178.21

* Enjoy, stay safe, & keep surfing!

APK

Jan 16, 2008, 09:39am	More "RBN" info. ... apk
APK Elite Member Posts: 368 Name: The Duke of URL Karma:	More "RBN" info. ... apk "New NEWS": Well, it appears I was correct in my "assumption/guess" above (about my suspecting the "RBN being @ it again") 2 posts up, which are NOW verified, per this quote from the above source: SECOND MASS HACK EXPOSED: http://www.itnews.com.au/News/72214,second...ck-exposed.aspx AND, the source I used for this list: http://ddanchev.blogspot.com/2008/03/more-...ame-attack.html And, the salient portion that notes that my suspicion was correct: "if you look at the IPs used in the IFRAMEs, these are the front-end to rogue anti virus and anti spyware tools that were using RBN's infrastructure before it went dark, and continue using some of the new netblocks acquired by the RBN" So, with that said? Here are those URL's from the list above, albeit altered to 0.0.0.0 equations, for your CUSTOM HOSTS FILE, that shuts out RBN (these appear to be their newly acquired domains list) & the servers they use: START OF LIST TO ADD TO YOUR CUSTOM HOSTS FILE FOR BLOCKING OUT BAD SITEs/ADBANNERS THAT MAY BE INFECTED ETC.: 0.0.0.0 do-t-h-e.com 0.0.0.0 rx-pharmacy.cn 0.0.0.0 m5b.info 0.0.0.0 hotpornotube08.com 0.0.0.0 hot-pornotube-2008.com 0.0.0.0 hot-pornotube08.com 0.0.0.0 adult-tubecodec2008.com 0.0.0.0 adulttubecodec2008.com 0.0.0.0 hot-tubecodec20.com 0.0.0.0 media-tubecodec2008.com 0.0.0.0 porn-tubecodec20.com 0.0.0.0 scanner.spyshredderscanner.com 0.0.0.0 xpantivirus2008.com 0.0.0.0 xpantivirus.com 0.0.0.0 bestsexworld.info 0.0.0.0 requestedlinks.com END OF LIST TO ADD TO YOUR CUSTOM HOSTS FILE FOR BLOCKING OUT BAD SITEs/ADBANNERS THAT MAY BE INFECTED ETC.: FOR THOSE INTERESTED (or, those that need actual IP addresses to add to firewall rules tables OR IE restricted zones etc.), here are the actual IP addresses of the bogus servers: do-t-h-e.com (69.50.167.166) rx-pharmacy.cn (82.103.140.65) m5b.info (124.217.253.6) hotpornotube08.com (206.51.229.67) hot-pornotube-2008.com (206.51.229.67) hot-pornotube08.com (206.51.229.67) adult-tubecodec2008.com (195.93.218.43) adulttubecodec2008.com (195.93.218.43) hot-tubecodec20.com (195.93.218.43) media-tubecodec2008.com (195.93.218.43) porn-tubecodec20.com (195.93.218.43) scanner.spyshredderscanner.com (77.91.229.106) xpantivirus2008.com (69.50.173.10) xpantivirus.com (72.36.198.2) bestsexworld.info (72.232.224.154) requestedlinks.com (216.255.185.82) Also - These you won't be able to block via HOSTS file filtering methods, but still can be blocked via other means (IE restricted zones, firewall rules tables, etc. et al): 89.149.243.201 89.149.243.202 72.232.39.252 195.225.178.21 * Enjoy, stay safe, & keep surfing! APK Last edited by APK; May 23, 2008 at 09:51pm.