austhome Posted June 30, 2021 ID:1466423 Share Posted June 30, 2021 Hi there Malwarebytes Premium is blocking the IP address 52.53.192.135 which through Googling I have found out belongs to Amazon. Why would Malwarebytes be blocking Amazon? Can I add 52.53.192.135 to exclusions? It pops up when I am going to non-Amazon sites. If I type into the browser 52.53.192.135 I get the Website blocked due to malware warning. If I type www.amazon.com the webpage opens up correctly. From Phillip Link to post Share on other sites More sharing options...
Porthos Posted June 30, 2021 ID:1466427 Share Posted June 30, 2021 Could be malware or even a false positive. Virus total says that IP is 404 https://www.virustotal.com/gui/url/d9f90337b88d1e58bbc0f242af0868f361c3972bba20acf25bb0e6fea0f8c29e/detection For now I will move your post to the FP section for evaluation. Link to post Share on other sites More sharing options...
austhome Posted June 30, 2021 Author ID:1466430 Share Posted June 30, 2021 mbst-grab-results.zip Link to post Share on other sites More sharing options...
thisisu Posted June 30, 2021 ID:1466433 Share Posted June 30, 2021 Hello, Yes you can add it to exclusions. I'm not seeing that IP listed in our database so I can't unblock it. I'm still reviewing your logs trying to figure out what's going on. Thanks you for reporting Link to post Share on other sites More sharing options...
thisisu Posted June 30, 2021 ID:1466435 Share Posted June 30, 2021 28 minutes ago, austhome said: mbst-grab-results.zip 2.22 MB · 0 downloads Thank you. what I think might be happening is that some of the products you have installed are pulling data from a domain which we have blocked We are blocking the domain drivethelife[.]com as a PUP, and it resolves to that Amazon IP (52.53.192.135). Now, why it shows an IP block instead of the domain block is indeed strange and I'll report it to someone that can look further into it as I don't think that should be happening. Another potential problem is that you have many security products installed, and maybe they are conflicting with each other? An article you may find useful: https://blog.emsisoft.com/en/29265/do-not-run-multiple-antivirus/ Hope this helps Link to post Share on other sites More sharing options...
Porthos Posted June 30, 2021 ID:1466441 Share Posted June 30, 2021 @austhome I suggest you do the following, Please follow the instructions in this topic then create a new topic in our malware removal area by clicking here and a malware removal specialist will guide you in checking and cleaning your system of any threats. They will be able to help you to determine whether your system is truly clean or not. Link to post Share on other sites More sharing options...
zortag Posted October 27, 2021 ID:1485793 Share Posted October 27, 2021 I'm having the exact same problem. Same IP address and port. And that same annoying website blocked message keeps popping up. What do I do? Does this really have to be dealt with on a case by case basis? Link to post Share on other sites More sharing options...
Porthos Posted October 27, 2021 ID:1485795 Share Posted October 27, 2021 (edited) 5 minutes ago, zortag said: What do I do? Does this really have to be dealt with on a case by case basis? Yes all cases are case by case to keep from getting confusing. Please keep all posts in your malware removal topic. Edited October 27, 2021 by Porthos Link to post Share on other sites More sharing options...
Recommended Posts