Jump to content

MB v3.2.2 Blocking a6nrdb6.x.incapdns.net When I Visit Malwarebytes Forum


lmacri

Recommended Posts

I just enabled the Website Protection feature in MB v3.2.2 a few days ago and now every time I browse to a new page (or refresh a page) on the Malwarebytes forum (https://forums.malwarebytes.com/) I receive a warning for an inbound block for the domain a6nrdb6.x.incapdns.net.  The IP addresses vary but are primarily:

     199.83.134.92
     192.230.81.92

Dashke's post today in the thread Is this a false positive? (incapdns.net) noted that a block for a similar domain lf5am.x.incapdns.net was a false positive.  A Google search leads me to suspect that Malwarebytes is using web hosting services from Imperva Incapsula (incapdns.net), but it seems odd that the MB's Website Protection would be blocking legitimate inbound traffic on their own user forum.  Here's the latest report:

_____________________________________________

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 8/30/17
Protection Event Time: 7:47 AM
Log File: 5273cb1c-8d81-11e7-8e47-001e6830bdd4.json
Administrator: Yes

-Software Information-
Version: 3.2.2.2018
Components Version: 1.0.188
Update Package Version: 1.0.2689
License: Premium

-System Information-
OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, , Blocked, [-1], [-1],0.0.0

-Website Data-
Domain: a6nrdb6.x.incapdns.net
IP Address: 199.83.134.92
Port: [0]
Type: Inbound
File:

(end)

----------
32-bit Vista Home Premium SP2 * NS Premium v22.10.0.85 * MB Premium v3.2.2.2018-1.0.188 * Firefox ESR v52.3.0 * Adblock Plus 2.9.1
HP Pavilion dv6835ca, Intel Core2Duo T5550 @ 1.83 GHz, 3 GB RAM, NVIDIA GeForce 8400M GS

Link to post
Share on other sites

Hi Zynthesist:

Thank you for your prompt response, but I don't understand if you mean that the block for the subdomain a6nrdb6.x.incapdns.net was a false positive and was always safe to ignore, or if an outside hacker was attempting to phish information on the Malwarebytes forum.  I recall being required to reset my login password in November 2014 after a hacker gained access to the servers hosting the Malwarebytes forum so I'm exercising an abundance of caution here.

Just FYI, I now have Update Package Version v1.0.2691 and didn't see any Web Protection blocks when I visited the forum to post this reply.
----------
32-bit Vista Home Premium SP2 * NS Premium v22.10.0.85 * MB Premium v3.2.2.2018-1.0.188 * Firefox ESR v52.3.0 * Adblock Plus 2.9.1
HP Pavilion dv6835ca, Intel Core2Duo T5550 @ 1.83 GHz, 3 GB RAM, NVIDIA GeForce 8400M GS

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.