Pshemo Posted August 1, 2017 ID:1148181 Share Posted August 1, 2017 (edited) When I try to open http://www.orotempo.be/ : 1 Anti-Malware 91.121.219.140 Blocked web site Type: outgoing, Port: 62219, Process: chrome.exe 2 Anti-Malware 91.121.219.140 Blocked web site Type: outgoing, Port: 62220, Process: chrome.exe 3 Anti-Malware 91.121.219.140 Blocked web site Type: outgoing, Port: 62221, Process: chrome.exe ...and many other ports 62xxx 63xxx 64xxx Rgs Pshemo B Edited August 1, 2017 by Dashke Link to post Share on other sites More sharing options...
Staff Dashke Posted August 1, 2017 Staff ID:1148226 Share Posted August 1, 2017 Unfortunately, the IP is blocked for spreading Cerber ransomware. Link to post Share on other sites More sharing options...
GreetingBot Posted August 29, 2017 ID:1158149 Share Posted August 29, 2017 @dashke, I'm the sysadmin for that server. Where can I get more information on when exactly and through which method the Cerber was spreading. I did a check of the server and couldn't find any trace of it. And I guess this activity got the IP on some kind of blacklist at Malwarebytes. If this is correct, how can we get it off the black list. Kind regards, Edi Link to post Share on other sites More sharing options...
Recommended Posts