DrDca Posted April 16, 2013 ID:670241 Share Posted April 16, 2013 I'm not sure why I keep getting this as a bad site -- perhaps someone could help? Thanks!50.23.124.152Cheers, Dallas Link to post Share on other sites More sharing options...
snafu Posted April 17, 2013 ID:670250 Share Posted April 17, 2013 I too have perstistant messages regarding that IP address and other IP addresses from Softlayer Technologies. It all started yesterday with a flash update - I think ? It only appears on Ebay- I ran M.B. pro and my Windows defender but they found nothing. Any clues ? I found reference to Softlayer on this site but it was a thread years ago. Link to post Share on other sites More sharing options...
Pudding2000 Posted April 17, 2013 ID:670262 Share Posted April 17, 2013 Using old computer as new one is in getting fixed after the big stuff-up. Now getting 50.23.124.152 coming up as well. Link to post Share on other sites More sharing options...
lcostet Posted April 17, 2013 ID:670312 Share Posted April 17, 2013 Relieved to read that I am not the only one that has been having this problem. It started last night, and is happening on both computers that have Malwarebytes Pro installed on. When I am on ebay, (I have been a seller for 14 years and spend hours everyday on the site, and this has never happened before) and go to one of my listings or any listing, I keep getting a Malwarebytes bubble notification indicating that it has successfully blocked access to a potential malicious website. Type: outgoing. Process: iexplore.exe. The IP addresses have been 50.97.214.162 and 50.97.218.220, and maybe another one that I didn't write down. I performed a System Restore and used CCleaner to clean out all cookies, etc., but to no avail. I ran a scan with Malwarebytes and Webroot but neither picked up anything.Needless to say, I would appreciate any help to resolve this issue. Is it possible that ebay is using some banner ads that are causing this problem? Or, are there issues with Softlayer, who appears to be associated with these IP addresses? Or, is this a false positive? Link to post Share on other sites More sharing options...
DrDca Posted April 17, 2013 Author ID:670350 Share Posted April 17, 2013 I'm using Chrome, and it's happening randomly across many of the sites I use. I don't have any idea who softlayer is! Link to post Share on other sites More sharing options...
quickcougar03 Posted April 17, 2013 ID:670356 Share Posted April 17, 2013 I'm using Chrome, and it's happening randomly across many of the sites I use. I don't have any idea who softlayer is!It appears to be caused by advertisements on web pages. I installed the AdBlock extension on Chrome, and I haven't had a problem since. Link to post Share on other sites More sharing options...
DrDca Posted April 17, 2013 Author ID:670360 Share Posted April 17, 2013 Regretfully, AdBlock didn't make any difference for me :-( Link to post Share on other sites More sharing options...
quickcougar03 Posted April 17, 2013 ID:670386 Share Posted April 17, 2013 Regretfully, AdBlock didn't make any difference for me :-(I'm with you now. It only worked for me for about two hours. Now I am back to getting the same alerts from Malwarebytes. Link to post Share on other sites More sharing options...
funnymoney539 Posted April 17, 2013 ID:670616 Share Posted April 17, 2013 Same here quickcougar03 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 17, 2013 Root Admin ID:670731 Share Posted April 17, 2013 Please check for updates and see if you're still getting the block or not. Some IP ranges were changed recently. Link to post Share on other sites More sharing options...
DrDca Posted April 17, 2013 Author ID:670733 Share Posted April 17, 2013 Yup - still getting it! :-( What I find most irritating is not that it's being blocked, but that I've no idea WHAT or WHY it's blocked. I don't know if it's an ad, or if I really wanted to allow it. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 17, 2013 Root Admin ID:670736 Share Posted April 17, 2013 The post here shows why.http://forums.malwar...ndpost&p=670175In your case its simply another IP that we're working with them to try and get them to remove threats from that IP range so that we can unblock it too. Link to post Share on other sites More sharing options...
DrDca Posted April 17, 2013 Author ID:670742 Share Posted April 17, 2013 Ah, that 17.10 update has fixed it - many thanks!! Link to post Share on other sites More sharing options...
funnymoney539 Posted April 17, 2013 ID:670888 Share Posted April 17, 2013 not fixed for me with the latest database update Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 17, 2013 Root Admin ID:670897 Share Posted April 17, 2013 @funnymoney539Please run MBAM and check for updates, then run a Quick Scan and post back that log as well as today's protection logThanks Link to post Share on other sites More sharing options...
funnymoney539 Posted April 17, 2013 ID:670906 Share Posted April 17, 2013 Please find the log files attached. Thank you.mbam-log-2013-04-17 (16-00-17).txtprotection-log-2013-04-17.txt Link to post Share on other sites More sharing options...
jazzbrew Posted April 18, 2013 ID:671093 Share Posted April 18, 2013 I am also having problems now with MBAM reporting that it is blocking malicious IPs (outgoing) for several different IP's including 50.23.124.152. I have tried the suggested fix of updating the database and running a quick scan.This notification came up when accessing a news story at www.reuters.com.Is Reuters website really infected? Link to post Share on other sites More sharing options...
Bigcountry02 Posted April 18, 2013 ID:671097 Share Posted April 18, 2013 Fix did not work. Still getting it after going to www.cnet.com website. I cleaned the logs and did scans, computers that have Windows 7 64-bit (Home and Pro) and Windows XP (Pro). I have enabled Flash and privacy is running medium; however changed to medium-High. The only defense to this coming up is turning cookies completely off (disabled). From protection log: 2013/04/18 00:23:43 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61362, Process: iexplore.exe)2013/04/18 00:35:52 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61950, Process: iexplore.exe)2013/04/18 00:35:53 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61949, Process: iexplore.exe)2013/04/18 00:35:53 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61951, Process: iexplore.exe)2013/04/18 00:36:57 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 62063, Process: iexplore.exe) Link to post Share on other sites More sharing options...
Bigcountry02 Posted April 18, 2013 ID:671099 Share Posted April 18, 2013 After further checking, it seems if you set privacy to High or completely block cookies, it stops; however, you have not locked yourself out of forums, email, etc. Link to post Share on other sites More sharing options...
jazzbrew Posted April 18, 2013 ID:671101 Share Posted April 18, 2013 Fix did not work. Still getting it after going to www.cnet.com website. I cleaned the logs and did scans, computers that have Windows 7 64-bit (Home and Pro) and Windows XP (Pro). I have enabled Flash and privacy is running medium; however changed to medium-High. The only defense to this coming up is turning cookies completely off (disabled). From protection log: 2013/04/18 00:23:43 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61362, Process: iexplore.exe)2013/04/18 00:35:52 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61950, Process: iexplore.exe)2013/04/18 00:35:53 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61949, Process: iexplore.exe)2013/04/18 00:35:53 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 61951, Process: iexplore.exe)2013/04/18 00:36:57 -0600 IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 62063, Process: iexplore.exe)I am also getting notifications on just about every news website as well as cnet.com - but on my computer it is blocking 50.123.124.152. I am having a hard time believing that all of these reputable sites have content or ads that are now being blocked as malicious by Malwarebytes. Since so many people are reporting this all of a sudden - I am thinking that this must be a False Positive.Can anyone from malwarebytes test cnet.com, reuters.com, to see if they are infected through these IPs? Link to post Share on other sites More sharing options...
Larbo Posted April 18, 2013 ID:671257 Share Posted April 18, 2013 Still getting 50.97.214.162 and 50.23.124.152. Pop up says "outgoing" and it is happening on various sites like ebay, chowhound and overstock. Link to post Share on other sites More sharing options...
Larbo Posted April 18, 2013 ID:671307 Share Posted April 18, 2013 Add 50.97.218.220 to 50.97.214.162 and 50.23.124.152 Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now