Jump to content

Question about an IP-Block


Misoir

Recommended Posts

This is my first time in the malwarebytes forum and am not the best with computers. I know the basics and even some handy information about using anti-malware programs. I just have a question of whether or not my Malwarebytes blocking IP-Address 195.68.160.175 should be a concern for me. Here is the information:

2012/07/21 16:29:00 -0400 SULLIVAN-HP Sullivan2 MESSAGE Executing scheduled update: Daily

2012/07/21 16:29:23 -0400 SULLIVAN-HP Sullivan2 MESSAGE Scheduled update executed successfully: database updated from version v2012.07.20.08 to version v2012.07.21.11

2012/07/21 16:29:23 -0400 SULLIVAN-HP Sullivan2 MESSAGE Starting database refresh

2012/07/21 16:29:23 -0400 SULLIVAN-HP Sullivan2 MESSAGE Stopping IP protection

2012/07/21 16:32:43 -0400 SULLIVAN-HP Sullivan2 MESSAGE IP Protection stopped

2012/07/21 16:32:46 -0400 SULLIVAN-HP Sullivan2 MESSAGE Database refreshed successfully

2012/07/21 16:32:46 -0400 SULLIVAN-HP Sullivan2 MESSAGE Starting IP protection

2012/07/21 16:32:51 -0400 SULLIVAN-HP Sullivan2 MESSAGE IP Protection started successfully

2012/07/21 18:53:46 -0400 SULLIVAN-HP Sullivan2 IP-BLOCK 195.68.160.175 (Type: outgoing, Port: 60589, Process: firefox.exe)

This occurred when I was on Firefox just viewing WOT approved sites. Those open on my browser were city-data, pandora radio, weather base, and noaa. After seeing that I turned off my internet connection and ran a Malwarebytes full scan which found nothing wrong anywhere on my system. This must have also passed by my COMODO Internet Security because it does not show any problems with blocked IP's.

Should I be worried or not? What do you recommend I do?

Link to post
Share on other sites

Hello and welcome, MissMuffitt:

IP blocks can indicate a number of things:

  • They could indicate that MBAM is doing its job of blocking bad content on websites.

  • They can also occur when running certain P2P and other programs, such as Skype -- For example, please see this recent post by forum Admin AdvancedSetup about IP blocks and Skype.

  • In some cases the blocks are a false positive.

  • However, they can also be a sign of infection, especially if the blocks are outgoing and they occur when no browsers are open.

--> There is more information about the IP blocking module in the FAQ - Section G (and in the Helpdesk-FAQ).

It includes instructions on how to set MBAM to ignore a particular IP, if you wish to do so.

It also contains instructions on how to determine what process might be trying to make the connections.

And you may also research the IP in question at www.ip-lookup.net or a similar site.

On the other hand, if you think the IP blocks might be a false positive, then please read this article before starting a new topic in the False Positives forum.

Alternatively, if you think you might be infected, based on the IP blocks and/or other suspicious computer behavior, then please read the following to begin the cleaning process.

  • Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  • If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.

  • Then please start a new post in the Malware Removal forum.
  • When starting your new post, please note the following:
  • Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  • Please COPY/PASTE the requested logs into your post, rather than attaching them.
  • Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.

  • Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  • Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  • Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.

Please be patient - someone will assist you as soon as possible.

Thanks!

daledoc1

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.