ConfigServer shutting down as of 31st of August 2025

zEitEr said:
BE AWARE! download.configserver.com has address 94.130.90.175. The IP is already taken and another website is hosted on the IP. SSL/TLS certificate is of course invalid, but they might place a download file there.
Click to expand...
Just found a few more IPs, to delete from csf.allow:

94.130.90.175 # download.configserver.com
54.36.165.115 # download2.configserver.com
66.165.246.166 # license.configserver.com
2604:4500:9:156::6 # ipv6.license.configserver.com
 
johannes said:
Just found a few more IPs, to delete from csf.allow:
Click to expand...

Good catch. If the ips are whitelisted unconditionally, then they should of course be removed from csf.allow.

My alert is about the domains which still resolve and might contain infected software available for download. I would expect them to stop resolving of their download domains.
 
johannes said:
Just found a few more IPs, to delete from csf.allow:

94.130.90.175 # download.configserver.com
54.36.165.115 # download2.configserver.com
66.165.246.166 # license.configserver.com
2604:4500:9:156::6 # ipv6.license.configserver.com
Click to expand...
I've never seen those IP addresses in csf.allow before, i've only got my personal IPv4 & 6 listed and the softaculous server IPs. I will however pop those IPs in my csf.deny file though, cheers 😁
 
You must log in or register to reply here.
Back
Top