184.82.146.118

[ClassyJakey]

I keep getting a ip blocked from 184.82.146.118 on chrome all the time, it seems to lead to a very bad website.
 Thank you malwarebytes for stopping it! I suspect i have a virus.

[Michael (alan1998)]

False Positive I think.

VirusTotal: https://www.virustotal.com/en/url/294cb3bb196ce3e1d17b0163b5638f35abdfb495f3b56a553c9f1e53379cd1a2/analysis/1373715958/

Avast didn't say anything. It's a Photo sharing site.

[polonus]

Hi alan1998,

FP maybe momentarily, but blacklisted and for valid reasons. Unable to connect.
http://hosts-file.net/default.asp?s=184.82.146.118

Do some further  investigation please, before giving advice!

I do not know about the actual situation at that IP but,
there was malware there: http://support.clean-mx.de/clean-mx/viruses.php?sort=firstseen%20desc&review=184.82.146.118
Down:   mdl_trojan   ARIN   US   nic at hostnoc.net   184.82.146.118    to 184.82.146.118   insightmatch.com   htxp://army.insightmatch.com/w.php?f=19&e=2
Togglevirusname:   mdl_Blackhole exploit kit to unknown_html_RFI   ARIN   US   nic at hostnoc.net   184.82.146.118    to 184.82.146.118   insightmatch.com   htxp://army.insightmatch.com/main.php?page=e54d81cabec42639

Chinese Taiwan provider had flash malware galore for other IPs,
Up(nil):   unknown_html_RFI   ARIN   US   nic at hostnoc.net   184.82.146.118    to 184.82.146.118   insightmatch.com   htxp://army.insightmatch.com/main.php?page=e54d81cabec42639 (situation on 2012-01-19- now also dead)
IP is therefore still being blacklisted: http://www.ipvoid.com/scan/184.82.146.118/
3 red warnings from WOT web rep: http://www.mywot.com/en/scorecard/184.82.146.118

polonus

[polonus]

Furthermore see what issues could arise with the application server for that IP "Phusion Passenger (mod_rails/mod_rack) 3.0.11" resulting in  problems towards scanning as we see at hpHosts. "Passenger" seems to override Apache's ErrorDocument entirely or rather has it's own. That's a shame: if a 404
error could get passed back to Apache, it could call a non-static resource (another
redirect, a PHP script, anything)  credits go to jes5 on google documents...  (support ISSUE in relation to Apache, solution is to use full URLs should rather than relative URLs))...

pol