crazywasp Posted June 13, 2017 ID:1135313 Share Posted June 13, 2017 Drudgereport.com is being blocked currently. The Malwarebytes pop-up notification says " malicious website blocked", listing an IP and port each time, sometimes different IPs. Now blocked IP is 54.175.88.49. All of the IPs are from AWS, Amazon web services. It's been going on for a few days now. Added www.drudgereport.com to website exclusions, but still blocked. Process blocked is firefox. Link to post Share on other sites More sharing options...
Staff Zynthesist Posted June 13, 2017 Staff ID:1135316 Share Posted June 13, 2017 Hello, Can you please post your protection log. Link to post Share on other sites More sharing options...
MysteryFCM Posted June 14, 2017 ID:1135451 Share Posted June 14, 2017 I can't reproduce the block here. As requested, please post your protection log. Link to post Share on other sites More sharing options...
Alky Posted June 14, 2017 ID:1135632 Share Posted June 14, 2017 Apparently drudgereport.com is using some kind of anti-adblocker software which trips up Malwarbytes. If you use an adblocker, you'd likely be able to reproduce it. Anyway here's my log of the issue.... Malwarebytes Anti-Malware www.malwarebytes.org Protection, 2017-06-14 7:57 AM, SYSTEM, BEAST, Protection, Malware Protection, Starting, Protection, 2017-06-14 7:57 AM, SYSTEM, BEAST, Protection, Malware Protection, Started, Protection, 2017-06-14 7:57 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Starting, Protection, 2017-06-14 7:57 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Started, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50065, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50065, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50066, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50069, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50069, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50073, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50074, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50075, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50076, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:19 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.171.32, bn7v3w.8m5sew59gr.bid, 50077, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:21 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50124, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:21 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50130, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:21 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50131, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:21 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50132, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50184, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50185, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50189, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50190, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50191, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50192, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:23 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 50194, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Protection, 2017-06-14 8:33 AM, SYSTEM, BEAST, Protection, Malware Protection, Starting, Protection, 2017-06-14 8:33 AM, SYSTEM, BEAST, Protection, Malware Protection, Started, Protection, 2017-06-14 8:33 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Starting, Protection, 2017-06-14 8:33 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Started, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49825, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49825, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49826, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49830, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49831, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49832, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49833, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:44 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49834, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:47 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49906, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:47 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49910, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:47 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49913, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, Detection, 2017-06-14 8:47 AM, SYSTEM, BEAST, Protection, Malicious Website Protection, Domain, 52.8.196.113, bn7v3w.8m5sew59gr.bid, 49914, Outbound, C:\Program Files (x86)\Mozilla Firefox\firefox.exe, (end) Link to post Share on other sites More sharing options...
MysteryFCM Posted June 14, 2017 ID:1135642 Share Posted June 14, 2017 Those are due to our having a block on the .bid gTLD (due to the sheer volume of malicious content, compared to non-legit) Link to post Share on other sites More sharing options...
Alky Posted June 14, 2017 ID:1135651 Share Posted June 14, 2017 So, short of turning off MB to go to the site, is there a work-around? Link to post Share on other sites More sharing options...
Staff Zynthesist Posted June 15, 2017 Staff ID:1135907 Share Posted June 15, 2017 @Alky You can read this if you need to set up exclusions. Link to post Share on other sites More sharing options...
Recommended Posts