kalimba Posted March 14, 2014 ID:803193 Share Posted March 14, 2014 This has happened a couple of times in the last few days.I'm not even using the computer, but my browser is open.Usually to my email, but also to boston.com I get a popup message sayingSuccessfully blocked access to potentially malicious site72.21.215.133 It appears that IP belongs to Amazon. Do you think it's a tracker or something?? Thanks ! Link to post Share on other sites More sharing options...
John L. Galt Posted March 14, 2014 ID:803223 Share Posted March 14, 2014 More specifically, it belongs to S3 servers from Amazon: https://dazzlepod.com/ip/72.21.215.133/ The problem here is that according to https://www.robtex.com/advisory/ip/72/21/215/133/?deep=1#information there are numerous domains that point to that one IP - and one of those domains might actually be malicious. Do you have any software running in the background that might be making use of an Amazon S3 server, for whatever reason? Link to post Share on other sites More sharing options...
kalimba Posted March 15, 2014 Author ID:803320 Share Posted March 15, 2014 Thanks for your reply. I'm not running any unusual software ... and I don't know what an S3 server is. I just looked in taskmanager processes and I don't see anything unusual. I've gotten that pop-up 3 times in the last 2 days - I'll keep an eye on it. Any other ideas would be welcome. Link to post Share on other sites More sharing options...
MysteryFCM Posted March 18, 2014 ID:804630 Share Posted March 18, 2014 Sorry for the delay. It's not an F/P I'm afraid, it's involved in malvertising (for Optimum Installer) Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now