Jump to content

Recommended Posts

All morning we've been getting alerts. Quick scan, Flash scan and full scan have found no threats

Database version v2018.01.03.06

1/3/2018 9:35:15 AM      Blocked web site              Type: outgoing, Port: 61115, Process: avp.exe              50.19.237.142
1/3/2018 9:26:44 AM      Blocked web site              Type: outgoing, Port: 64935, Process: avp.exe              50.19.237.142
1/3/2018 9:26:44 AM      Blocked web site              Type: outgoing, Port: 64935, Process: avp.exe              50.19.237.142
1/3/2018 7:52:01 AM      Blocked web site              Type: outgoing, Port: 60871, Process: avp.exe              50.19.237.142
1/3/2018 8:04:26 AM      Blocked web site              Type: outgoing, Port: 57552, Process: avp.exe              50.19.237.142
1/3/2018 8:05:25 AM      Blocked web site              Type: outgoing, Port: 54253, Process: avp.exe              50.19.237.142
1/3/2018 8:05:25 AM      Blocked web site              Type: outgoing, Port: 54257, Process: avp.exe              50.19.237.142
1/3/2018 8:16:44 AM      Blocked web site              Type: outgoing, Port: 61728, Process: avp.exe              50.19.237.142
1/3/2018 8:24:28 AM      Blocked web site              Type: outgoing, Port: 64029, Process: avp.exe              50.19.237.142
1/3/2018 8:24:28 AM      Blocked web site              Type: outgoing, Port: 64030, Process: avp.exe              50.19.237.142
1/3/2018 8:24:28 AM      Blocked web site              Type: outgoing, Port: 64037, Process: avp.exe              50.19.237.142
1/3/2018 8:24:28 AM      Blocked web site              Type: outgoing, Port: 64038, Process: avp.exe              50.19.237.142
1/3/2018 8:42:31 AM      Blocked web site              Type: outgoing, Port: 64238, Process: avp.exe              50.19.237.142
1/3/2018 8:43:26 AM      Blocked web site              Type: outgoing, Port: 55798, Process: avp.exe              50.19.237.142
1/3/2018 8:43:26 AM      Blocked web site              Type: outgoing, Port: 55799, Process: avp.exe              50.19.237.142
1/3/2018 9:05:08 AM      Blocked web site              Type: outgoing, Port: 64506, Process: avp.exe              50.19.237.142
1/3/2018 9:05:08 AM      Blocked web site              Type: outgoing, Port: 64507, Process: avp.exe              50.19.237.142


IP:    50.19.237.142
DNS name:    ec2-50-19-237-142.compute-1.amazonaws.com
ASN:    AS14618 Amazon.com, Inc.
ISP:    -
Country:    United States
Region    Americas / Northern America
Latitude:    39° 2.886 N
Longitude:    -77° 28.368 W
Index:     20149

Link to post
Share on other sites

We too have been seeing this IP address getting blocked at an unusually high rate today by MBAM. Processes involved are iexplorer.exe and firefox.exe (browsers) but more importantly to me, we are also seeing the swi_fc.exe process involved (Sophos Web filtering process).

MBAM Support, can you please elaborate?

1/3/2018 10:22:22 AM    [computer name omitted]  [Internal IP omitted]       Type: outgoing, Port: 53938, Process: swi_fc.exe              Blocked web site               50.19.237.142

Link to post
Share on other sites

Same here. All morning of 01/03/2018:

1/3/2018 11:27:28 AM           MYPCNAMES         10.0.0.78         Blocked web site         Type: outgoing, Port: 60170, Process: chrome.exe   50.19.237.142

Processes include iexplore, firefox, chrome depending on default browser.

Link to post
Share on other sites
  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.