Why is MBAM is blocking outgoing VPN Gate IP address 80.82.64.193 ?

[Slartibartfarst]

As a trial, I've been using VPN Gate on and off for a few months. For probably most of the time it sits passively in my Systray (executable is vpnclient_x64.exe).
However, MBAM (the Malwarebytes Anti-Malware proggy that I use) regularly reports it as being blocked whilst trying to communicate with a dodgy IP address - 80.82.64.193 (Type: outgoing, Port: 57126, Process: vpnclient_x64.exe)

I did a WHOIS via http://ipaddress.is/80.82.64.193 on this IP address, which returned this information (and more):

Quote

IP Address 80.82.64.193 Profile
A detailed IP address report for 80.82.64.193 is below. The timezone of 80.82.64.193 is Europe/Amsterdam. The current local time of 80.82.64.193 is Friday 27th of September 2013 03:08:36 AM.
IP Address Location Information For 80.82.64.193
IP Address   80.82.64.193
Host   dea.anonymouse.me
Country   Netherlands
ISP   Eyes4media GmbH
Organization   AS29073, Ecatel LTD
Latitude   52°30'00" N
Longitude   5°45'00" E
_______________________

That looks like it is probably one of the "anonymous" VPN Gate network nodes, but I would like to find out more about why MBAM blocks it and why it (in Holland) is a main node for my client in the VPN Gate network - which I thought was Japan-based.
I just wonder whether there might be an NSA connection sucking on the end of that IP address...

 

Any suggestions or more info about this IP address?

[Wide_Glide]

Hello  Slartibartfarst   and Welcome,

 

IP Address   80.82.64.193= ET-RBN Known Russian Buisness Network IP with malicious detections as of Today-9-27-2013

It would seem your software is allowing you to connect to IP's that can be malicious.

 

You might want to wait for a Admin or Expert's opinion as I am neither, just a helper

 

Have a great day!

[AdvancedSetup]

Can you please post the Protection Log for this.

[Slartibartfarst]

This is an excerpted example from today's log (with obfuscated user name):

2013/09/27 00:05:55 +1200    HPENVY14-1112TX    User    MESSAGE    Starting protection
2013/09/27 00:05:55 +1200    HPENVY14-1112TX    User    MESSAGE    Protection started successfully
2013/09/27 00:05:55 +1200    HPENVY14-1112TX    User    MESSAGE    Starting IP protection
2013/09/27 00:05:58 +1200    HPENVY14-1112TX    User    MESSAGE    IP Protection started successfully
2013/09/27 12:33:17 +1200    HPENVY14-1112TX    User    IP-BLOCK    80.82.64.193 (Type: outgoing, Port: 57126, Process: vpnclient_x64.exe)
2013/09/27 12:33:17 +1200    HPENVY14-1112TX    User    IP-BLOCK    80.82.64.193 (Type: outgoing, Port: 57126, Process: vpnclient_x64.exe)
2013/09/27 12:33:17 +1200    HPENVY14-1112TX    User    IP-BLOCK    80.82.64.193 (Type: outgoing, Port: 57126, Process: vpnclient_x64.exe)
2013/09/27 12:33:17 +1200    HPENVY14-1112TX    User    IP-BLOCK    80.82.64.193 (Type: outgoing, Port: 57126, Process: vpnclient_x64.exe)

[AdvancedSetup]

Thanks for the information.  As posted by Wide Glide that IP is on a range of servers that are known to recently be participating or housing threats that can potentially harm someones computer and why the IP is blocked.