Search the Community
Showing results for tags 'incoming'.
I was plagued with multiple incoming IP block messages. After reading some of the suggested solutions, which included downloading software packages, I decided upon a different approach. (I am using Symantec End Point as an antivirus unmanaged.) I went to the Malware protection log and did an IP trace of the IP addresses…there were multiple entries for the same IPs. I then did a Whois for the area (Russia, Ukrane, Netherlands and Spain) and got the IP block associated with the IPs and the slash. Since I do not do business with any of these countries, I went into my edn Point firewall and blocked the IP blocks. The problem persisted even after blocking the IPs in the firewall…it appears that Malwarebytes was intercepting the intrusion before the IP got to the firewall. I then uninstalled Malwarebytes and restarted my computer. After restart, I ran a full scan with endpoint…no problems were found. I then re-installed Malwarebytes and restarted my machine again. After restart, I ran a full scan with Malwarebytes…no problems detected. After do this, the persistent incoming IP blocked occurrences stopped. I repeated the process for all of my servers and work stations. From time to time I do get a message of an IP blockage but such attempted intrusions are now manageable. I check the protection log each day and do a firewall block for that IP block and it now appears that the IPs are getting blocked before Malwarebytes can detect recurring intrusions from the newly added firewall IP blockages. I have absolutely no rational as to why this worked, I only know that it worked for me and I did not have to download any additional software. Smiles
Hey guys, I use Raptr, a common program to track and log your gaming hours and achievements, and is used as a cross-Instant Messanger for XBoXLive, PSN, Yahoo, MSN and a few others. Just yesterday I bought the Pro service, and noticed that the progam frequently calls out. To me, this makes sense because I think every 3-5 minutes it synchronizes with the computer in order to track my hours on a PC game, and synchronizes with me and the website in case I'm playing a game on a different platform, so I can accurately check any recent hours or achievements. As a side note, I know Raptr to be a reputable company, based in either Canada or North America, and the program itself does not display any ads. But when I was Google searching some of these IPs, I noticed that some were coming from China. Specifically the 184.108.40.206+ IP addresses, and one (220.127.116.11) was said to come from "Jiangsu Sumeida International Freight Substitute Co. Ltd Shanghai Office". Then I found some from a country named Moldova. In comparison, I have a few IPS from the 70/18.104.22.168+, and then the rest are 22.214.171.124+. Anyways, I was originally going to ask if there was a way to add the actual program raptr.exe to the exceptions to get these notifications to cease, since I'd want the normal traffic to flow, but when I saw the Chinese IPs, I can't help but be suspicious. So far all of my blocked traffic notifications have come from the program (raptr.exe), in the port 6881 with the varying incoming traffic on mixed IPs. Is there an explanation or solution? this is a new machine, and has not been compromised (yet), and I'd like to keep it that way. I think shutting down Raptr is the best idea at the moment -.-;