Sponsored by..

Friday, 6 August 2010

Evil network: MAXHOSTING Services / GlobalNET Bosnia (AS42560 / 77.78.239.0/23)

Back in May they were called Maximus Hosting Services but I guess it's always embarrassing  when you're not number on in Google for your own name.. so now this outfit from Russia appears to be calling itself MAXHOSTING SERVICES. Note that it looks like there are several Russian businesses of a very similar name, presumably most of which are legitimate.

inetnum:        77.78.239.0 - 77.78.240.255
netname:        MAXHOSTING-SERVICES
remarks: ### in case of abuse please contact: godaccs@gmail.com  ###
descr:          MAXHOSTING-SERVICES
country:        MD
admin-c:        VM3351-RIPE
tech-c:         VM3351-RIPE
status:         ASSIGNED PA
mnt-by:         BA-GLOBALNET
source:         RIPE # Filtered

person:         Vadim Makarenko
address:        Leningradskaya 28 kv 26, Bendery, Moldova
e-mail:         godaccs@gmail.com
phone:          +373-680-45324
nic-hdl:        VM3351-RIPE
source:         RIPE # Filtered

route:          77.78.192.0/18
descr:          GlobalNET Bosnia
origin:         AS42560
mnt-by:         BA-GLOBALNET
source:         RIPE # Filtered

It looks like it is working closely with GlobalNET Bosnia.. which is kind of weird because Russia doesn't exactly have a shortage of dodgy web hosts. GlobalNET operate AS42560 77.78.192.0/18, MAXHOSTING appear to have rented out half of that to give 77.78.224.0/19 i.e. 77.78.224.0 - 77.78.255.255. The other half of the GlobalNET range is mostly legitimate apart from an apparent Stelivo phishing site on 77.78.192.140 called justadultchat.co.uk

Anway,  77.78.224.0/19 is a real sewer consisting of fake job sites, phishing, hacking sites, fake escrow sites, illegal downloads, malware and other nasty stuff. According to ratings from the WOT API it is mostly toxic rubbish, and even the sites with "good" rankings are involved in something illegal.

77.78.224.0/19 is certainly worth blocking, and/or the domains listed below. If you want the IP addresses and the WOT ratings in a handy form then you can download them from here, else there's a list of the currently dodgy domains below:

Clairvoyantcss.info
Honstrategy.info
2iii.org
Divambee35.net
Eagen85.net
Forceclub-us.com
Forceclub-us.net
Janoodle6.net
Zabil.in
King-invest.org
Search-static.org
Vostokgear.org
Francecore.com
Genreystick.com
Grand-vitaro-club.com
Odistanyachts.com
Statxonline.com
Xsbot.net
Planopetroleumteam.com
Acunetxweb.net
Dottasink.net
Nowisisdudescars.com
Onlineisdudescars.com
Whereisdudescars.com
Zettapetta.net
Google-server09.info
Google-server10.info
Google-server11.info
Google-server12.info
Google-server14.info
Google-server29.info
Google-server31.info
Google-server41.info
Google-server42.info
Google-server43.info
Jhuiuhxfgxhlfkjhjth.info
Jhuiuhxfgxhtfkjhjth.info
Jhuluhxfgxhlfkjhjth.info
Top-teen-porn.info
Kalashmalash.org
Pro100-soft.net
Ruslan7777.com
Hyporesist.com
Vstils.ru
Clickwebanalitick.com
Hotporncatalog.com
Ns3emeringo.com
Thevipbuyconterst.com
Youngirlsactions.com
Kingdol.com
Pcf-osow.com
Utorrentde.com
Homesiteuk.com
Firmar.org
Sabadel4444z.org
Superlayout.org
Ceberm.com
Ceberm.net
Ceberm.org
Ceberz.net
Ceberz.org
Ceterz.biz
Bestviewbar.net
Thestatserver.com
Donservers.ru
Checkege.ru
Friendsparty.org
Otvetege.ru
Sdalege.ru
1host4me.ru
Stylysxvk.ru
Vkxstile.ru
1-aa.com
222-abbb.com
Caucasus-a.com
Altdmnfrsh.com
Suphazgdman.com
Free-pac.net
Ebay-sc.com
Albums-onlinenow.info
Albums-onlines.info
Albums-photo.info
Dwnld0020.com
Fotodownloads.info
Myfotoalbums.info
Photo-downloadsonline.info
Photo-downloadssite.info
Spmfb2299.com
Thefotoalbums.info
Thefotodownloads.info
Videophotodownloads.info
Hosting-backup.org
Darksiti.net
Ditdum.com
Onlinejbanking.com
Asmatrin.com
Mvk.net.ru
Mynewspages.com
Newsdownloads.cn
Nvk.net.ru
Rsite.net.ru
Supercarsinfo.net
Vkhost.net.ru
Webvk.net.ru
Sec-stats.org
Eu-analytics.com
Statistics-of-world.org
Google-stat.org
Auto-russo-trah.com
Sed-machinery.com
55echosend.com
66kooum.com
Avilantup.com
Bytrin.com
Club-world-auto.org
Erityng.com
Govenablog.org
Grebtiklop.com
Hercegovinablog.org
Horsebloggovena.org
Horseblogovena.org
Horsegovena.org
Janesblog.org
Nikranox.org
Roxenda.com
Zrefkilops.com
18trucero.org
29topiccat.org
42bubbletag.org
52chatshare.org
53cogilith.org
59trilia.org
62pixonoodle.org
70eanu.org
7jetdrive.org
81wordfly.org
84chatterworks.org
90snapset.org
92dynalith.org
94brainworks.org
96chatterfeed.org
Divambee35.org
Eagen85.org
Edgepath61.org
Leenoodle20.org
Linkbuzz76.org
Myjam19.org
Myzoom84.org
Photopath49.org
Pixomia65.org
Shuffleshots22.org
Toppulse32.org
Wikimbo94.org
Yonu9.org
Zalith76.org
Zoodeo10.org
Gerero.info
Adrevbillst.com
Ellennommists.com
Hasterulits.com
Hellopattern.com
Jungle-team.com
Letstrywithme.com
Newbraga.cn
Newporto.cn
Quarittle.com
Rettinasl.com
Signnowonline.net
Thecargotime.com
Theleoideas.com
Thewrongroad.com
Topshowcar.com
Tryfindithere.com
Eiueuiuewi.com
Connectionsupport.org
Helpsupport.biz
Belgrad-noc.org
Avalonassistants.com
Bettertasks.com
Blogsonline.info
Bongblogs.net
Bonglove.net
Eblognow.info
Freeeblog.info
Freespeechblog.info
Freetravelblog.info
Freeymail.info
Kmails.info
Love4net.net
Mailsblog.info
Mailsstore.info
Myeblog.info
Newblogs.info
Sendingmail.info
Smails.info
Smileonline.info
Themails.info
Theymail.info
Adjustedresults.com
Resultscache.com
Deutschenoote.com
Pootervom.com
Gl-transport.com
N-transport.com
Hilary-blog.net
Jacksonstatue.com
Allhdmovies.com
Office-direct.org
Office-exchange.biz
Office-exchange.info
Mybisiness.org
Onlinerentalparadise.com
Kernet.name
Lizazebrova.name
Mksdjhfu.com
Mlhsgdhh.com
Myasjhaa.com
Escrow-ento.com
Shop-n-ship.net
Arbeit-vitrea.com
Careers-at-lexor.com
Careers-at-stendal.com
Careers-at-vitrea.com
Careers-stendal.com
Europe-stendal.com
Hallway-careers.com
Hallway-group-careers.com
Hallway-group-jobs.com
Hallway-jobs.com
Hallway-news.com
Hallway-today.com
Immobilie-vitrea.com
Jobs-at-hallway-group.com
Jobs-at-lexor.com
Jobs-at-stendal.com
Jobs-at-stendalgroup.com
Jobs-lexor.com
Jobs-stendal.com
Karrieren-immobilie-vitrea.com
Karrieren-vitrea.com
Lexor-careers.com
Lexor-consulting.com
Lexor-jobs.com
Lexorsl.com
Lexor-sl.com
Lexor-sl-careers.com
Lexor-sl-consulting.com
News-stendal.com
Stendal-applications.com
Stendalcareers.com
Stendal-careers-now.com
Stendal-careers-today.com
Stendal-consulting.com
Stendal-consulting-group.com
Stendaljobs.com
Stendal-news.com
Stendaltoday.com
Stendal-today.com
Vitrea-arbeit.com
Vitrea-deutchland.eu
Vitrea-estate.eu
Vitreaestate-agent.com
Vitrea-estate-agents.com
Vitreaestatecareers.com
Vitreaestate-europe.com
Vitrea-immobilie.com
Vitrea-immobilie-karrieren.com
Vitreajobs.com
Vitrea-karrieren.com
Vitreanews.com
Vitrea-today.com
Vitrea-uk.com
Careers-at-duolux.com
Careers-at-feonix.com
Careers-at-trilane.com
Careers-kivox.com
Careers-tekset.com
Careers-trilane.com
Duoluxcareers.com
Duolux-careers.com
Duoluxconsulting.com
Duolux-consulting.com
Duoluxjobs.com
Duolux-jobs.com
Feonixcareers.com
Feonix-careers.com
Feonixconsulting.com
Feonix-consulting.com
Feonixjob.com
Feonixjobs.com
Feonix-jobs.com
Job-at-duolux.com
Job-at-feonix.com
Jobs-at-trilane.com
Jobs-kivox.com
Jobs-tekset.com
Jobstrilane.com
Kivox-careers.com
Kivox-company.com
Kivox-consulting.com
Kivox-jobs.com
Kivox-today.com
Tekset-careers.com
Tekset-consulting.com
Tekset-jobs.com
Tekset-news.com
Trilanecareers.com
Trilane-careers.com
Trilaneconsulting.com
Trilane-consulting.com
Trilane-jobs.com
Work-at-duolux.com
Work-at-tekset.com
Cancun-rx.com
Ebaysquaretrade.com
Com-id82115326.net
Dragporno.ru
Megaru.com
Nafani.net
Pop-banner.ru
Watchporno.ru
Xlivetv.ru
Qzzb.ru
Best-freemovie.com
Best-freemovies.com
Dasoundservices.com
Datingprivates.com
Datingteen.net
Datingteenonline.net
Datingwork.com
Freemoviebest.com
Free-moviebest.com
Fremoviesbest.com
Moviebest-free.com
Moviefree-best.com
Moviesbest-free.com
Moviesfree-best.com
Myalternativedating.com
Naebalova.net
Releaseadultsex.com
Releaseating.com
Thefreedating.com
Webalternativedating.com
Webfreeadultsexnet.com
Darkode.com

1 comment:

Bosko said...

you got it all wrong :)
maxhosting services are allocated to 2 C class IP address range, 77.78.239.0 - 77.78.240.255, not 224/19 :)