Xeon_UK

Think this is ok now. Did full scans in MalwareBytes and Avast, found no problems. After the boot scan of Avast and loading into windows I noticed the Avast IP and the cogentco.com IP showing right away. Went on the Avast forums and it's known that it sometimes connects to third parties for adverts or news.

When I start browsing I notice the following IP's make a TCP connection: 149.7.241.51 149.7.241.52 149.7.241.54 (cogentco.com) Process PID Protocol Local Address Local Port Remote Address Remote Port State AvastSvc.exe 1696 TCP 192.168.1.10 1543 149.7.241.51 http ESTABLISHED Even when I close the browser, the connection still stays active, unless I force close it. As far as I know, my system is clean of malware (latest defs loaded, protection always on). I came across this info regarding the IP's: http://www.abuseipdb...ry/149.7.241.51 Is the info correct, should it be blocked?

Cheers Steven, all working now

IP Address blocked by Malwarebytes, info below. IP: 85.159.233.245 Domain: alfaowner.com Description: A website for Alfa Romeo car owners Occurs using database version v2012.01.13.02

Cheers shadowwar. All working now

A lot of big companies are using content delivery networks (CDNs) so the content is stored more localised to the end user, so it's quicker to retrieve the content. CDNetworks (has acquired Panther Express) and have a large client base, where Mozilla, O2, RightMove must be using them. Hopefully this can be looked at soon

This range of IP's are also getting blocked visiting the O2 website homepage (http://www.o2.co.uk). IP: 93.188.128.30 Occurs using MAM DB version 6929.

IP Addresses blocked by Malwarebytes, info below. IP: 93.188.128.17 IP: 93.188.128.32 IP: 93.188.128.42 IP: 93.188.128.44 Nslookup info: > mozcom-cdn.mozilla.net Server: resolver1.opendns.com Address: 208.67.222.222 Non-authoritative answer: Name: n2.panthercdn.com Addresses: 93.188.128.18, 93.188.128.44 Aliases: mozcom-cdn.mozilla.net, mozcom-cdn.3crowd.mozilla.net Description: This happens when you visit the Mozilla Firefox website (http://www.mozilla.com/en-US/firefox/new/), and MAM is blocking the IP's that host the images (mozcom-cdn.mozilla.net) Occurs using MAM DB version 6923.

Cheers MysteryFCM. All working now

IP Address blocked by Malwarebytes, info below. IP: 95.154.247.196 Domain: check4jobs.com Description: UK job search engine Check4Jobs lists jobs collected from career web sites using keywords that match a users query.