blocked ip addresses, what action to take

[flippoTheCow]

MBAM has blocked the following IP addresses:

IP-BLOCK 66.196.118.37 (Type: outgoing, Port: 53784, Process: svchost.exe)
(INKTOMI CORPORATION)

 

IP-BLOCK 213.186.122.10 (Type: outgoing, Port: 54721, Process: svchost.exe)
(ns2.ukrtelecom.ua, expert.ukrtel.net,Utel DataCenter, Ukraine)

 

In general, how does MBAM determine that an IP address should be blocked?

 

Is there a way to discover what application is attempting to connect to these addresses?

 

What action, if any, do I need to take?

 

TIA, Phil

[daledoc1]

Hello and :
 

MBAM has blocked the following IP addresses:
IP-BLOCK 66.196.118.37 (Type: outgoing, Port: 53784, Process: svchost.exe)
(INKTOMI CORPORATION)
 
IP-BLOCK 213.186.122.10 (Type: outgoing, Port: 54721, Process: svchost.exe)
(ns2.ukrtelecom.ua, expert.ukrtel.net,Utel DataCenter, Ukraine)

 
In general, how does MBAM determine that an IP address should be blocked?

These KB topics should answer your question:
How do you determine when an IP\website is malicious?
What does it mean when I get an IP alert about blocking a 'malicious' site?
 

Is there a way to discover what application is attempting to connect to these addresses?

 
The FAQ section G has some info on that.
 

What action, if any, do I need to take?

 
Given the location of the IP you mention and the process involved (svchost.exe, a Windows file that is often the target of malware), I would suggest that you please follow the recommendations in this pinned topic: Available Assistance For Possibly Infected Computers.
A malware analyst will assist you with looking into your issue.
 
Thanks,

daledoc1