188.65.49.143

[Jay Lapidus]

The Pro edition blocked an incoming probe from the above address, based in Russia. Whois info is below.

Is that IP address known for sending malware?

My other PC is running a Quick Scan.

I noticed in the protection log that IP protection frquently stops and starts. That's not normal, is it?

 

TIA,

Jay

    [Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '188.65.48.0 - 188.65.51.255'

% No abuse contact registered for 188.65.48.0 - 188.65.51.255

inetnum: 188.65.48.0 - 188.65.51.255
netname: sint-ltd-net
descr: Limited Company "SiNT"
country: ru
org: ORG-LC18-RIPE
admin-c: AIA7-RIPE
tech-c: AIA7-RIPE
status: ASSIGNED PA
mnt-by: SINT-MNT
source: RIPE # Filtered

organisation: ORG-LC18-RIPE
org-name: Limited Company "SiNT"
org-type: LIR
address: Limited Company "SiNT"
address: Chemali Ramazashvili
address: 1 microdistrict, structure 55a-2
address: 662150 Achinsk
address: RUSSIAN FEDERATION
phone: +73915156000
fax-no: +73915156056
mnt-ref: RIPE-NCC-HM-MNT
mnt-ref: SINT-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

person: Avdoshkin Igor Aleksandrovich
address: 1 microdistrict, structure 55a-2
address: Krasnoyarskiy kray,
address: Russia, 662150
phone: +73915156998
fax-no: +73915156056
nic-hdl: AIA7-RIPE
source: RIPE # Filtered
mnt-by: SINT-MNT

% Information related to '188.65.48.0/22AS44347'

route: 188.65.48.0/22
descr: Limited Company "SiNT"
origin: AS44347
mnt-by: SINT-MNT
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.70.1 (WHOIS3)

 

 

[Jay Lapidus]

I forgot to mention that within a few minutes of the IP  block, I got a BSoD 4e PFN LIST CORRUPT.

I rebooted w/o incident and started the scan.

[AdvancedSetup]

If you're concerned that there might be something going on I would suggest following the advice from the topic here Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

In most cases a random IP block is normal and not something to be too concerned about. Continuous IP blocks on the other hand are something that you should probably investigate.

[Jay Lapidus]

Thanks for the prompt reply. Scan finished. I'll contact the Help Desk.

[AdvancedSetup]

Okay, sounds good.  I'll go ahead then and close your post here.

 

Take care