False positive logs included ip block

[johnbor]

Getting a website blocked by Malwarebytes, here is the logs I checked as described.

Protection Log:

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51693, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51694, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51702, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51703, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51704, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51705, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51707, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51708, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51717, Process: avastsvc.exe)

2013/01/27 09:11:15 -0500 DELLMAIN-PC Dell Main IP-BLOCK 83.125.22.192 (Type: outgoing, Port: 51718, Process: avastsvc.exe)

Here is my dds.txt file

and attached.txt

I will wait for a response..

dds.txt

attach.txt

[johnbor]

Here are links to 2 sites similar that are being blocked but come up clean

https://www.virustotal.com/url/e2177a588ddad2499007cb42b22162a2db2b914827bc3696d161c72b24ade636/analysis/1359297707/

and

https://www.virustotal.com/url/399ca2bc7dba427a5f649b83f28a8bed50d5214dead5d1783d18314e660d9e6e/analysis/

[johnbor]

I see other posted after me and got their responses.. what about these?

[MysteryFCM]

Sorry for missing your post.

This isn't an F/P. The block was put in place due to malicious content including but not limited to;

hxxp://epitome.atwebpages.com/no/yes/upload/jbnudes.exe

hxxp://instagram-survey.com

So far, the host has not responded, which is why the decision was taken to block the IP.

/edit

Just a note, the report concerning this, was re-sent to both runhosting.com and atwebpages.com, this morning).

You'll also be pleased to know, the cases on this IP are now not sufficiently high enough, to warrant the continued blocking, so the IP will be unblocked on the next update.

[johnbor]

thank you