Malicious Inbound IP Detected.

[JaymzPhoenix]

Hi all,

 

I'm running a trial of MalwareBytes with the intention to buy. I've just had a popup advising that there was an malicious inbound IP address blocked.

 

Does any one else get these? Or am I being targeted for some reason?

 

I've done a check on the IP address and it has come up clean. I'm not sure if I'm allowed to post the IP. If it is needed I will post it.

 

Regards

Jaymz

[1PW]

Hello JaymzPhoenix and

 

Does any one else get these? Or am I being targeted for some reason?

Certainly. Blocking potentially malicious input is one of the finest features of Malwarebytes Anti-Malware Pro/Premium.

If an IP address has previously been reported, professionally investigated and judged malicious, then that IP address is blacklisted in the Malwarebytes Anti-Malware database.

 

I've done a check on the IP address and it has come up clean. I'm not sure if I'm allowed to post the IP. If it is needed I will post it.

Thank you for your polite concern, but yes, for now you may reply with the complete IP address here.

In the future you may query the False Positives > Website Blocking sub-forum on this site.

 

Thank you.

[JaymzPhoenix]

Thanks for the quick reply 1PW.

 

At this stage I'm not certain that is a false positive as there was nothing running on my machine at the time, and the fact that it was inbound as well.

 

The IP in question is: 64.34.253.40

 

Thanks.

[1PW]

At this stage I'm not certain that is a false positive as there was nothing running on my machine at the time, and the fact that it was inbound as well.

I somewhat agree with your analysis. Theoretically then, a patron's software at H4Y Technologies LLC, a web hosting service, is making an unsolicited and unwelcome system access attempt upon your computer.

 

The IP in question is: 64.34.253.40

 

Although the sub-forum's name perhaps implies the opposite, please do consider starting a topic in the above mentioned sub-forum and let our professionals investigate. Please make reference to this thread for additional clarity.

You may wish to copy/paste the full relevant entries from your "Daily Protection Log" in your new topic.

Thank you.

[JaymzPhoenix]

Thank you very much for your assistance 1PW.

 

I will action your recommendation

[pondus]

IP is blacklisted by. dnsbl.justspam.org and dnsbl-1.uceprotect.net

concrete allegations

Portscans or hacking attempts were seen against an UCEPROTECT-System from IP 64.34.253.40

http://whatismyipaddress.com/blacklist-check