Jump to content

Malwarebytes blocking outbound connection to random IP's on 137 Port


Recommended Posts

So I have had some worrying detection's on my Malwarebytes since a day ago. The first was yesterday an outbound connection being blocked on IP 23.229.9.170 on port 137. At first googling this ip I found that it was the same as an arma 3 server(video game I play) so I thought maybe the server browser had glitched out and detected it or something. But I've since had 3 different ip blocks on port 137(103.82.145.110 31.146.129.226 112.17.88.160) today. No file is listed in the block report, so I don't know what was attempting to connect. Possibly related is I have been having internet connectivity issues, or rather my whole household has where we would disconnect from the internet occasionally. I didn't think it was anything malicious but now after switching to a new ISP and router today, those 3 different ip's were blocked, 2 of them after switching to the new router. So, is it possible my PC is infected and it has been affecting my home network for everyone else? When the internet was affected on my network I didn't see any suspicious network usage in resource manager.

 

Malwarebytes didn't have any detection's during multiple full scans I've done. I assume an outbound connection means something on my pc is attempting to connect to these suspicious IP addresses right? As far as I know I haven't visited any shady websites lately or installed any suspicious programs. Apart from the aforementioned internet problems and the blocked IP's, I haven't noticed anything out of place on my PC. I will attach my log files and hopefully someone can help me resolve this. Doing another full malwarebytes scan currently will post it when it is done, although I suspect it will come up with nothing like the others. Since the last block of an ip 4 hours ago I have seen nothing.

Addition.txt FRST.txt blocked IP.txt

Link to post
Share on other sites

My latest scan also came up with nothing. Still no new blocks coming up, I guess I'll have to wait and see if it happens again but considering I hadn't been visiting any new websites when those blocks came in I am worried something hidden is infecting my computer. I don't know if this is what I am supposed to be posting for a threat scan report.

scan.txt

Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

===

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Please post the Fixlog.txt.

I think you should be good.

fixlist.txt

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.