MichaelNewman Posted February 4, 2022 ID:1500625 Share Posted February 4, 2022 Malwarebytes has recently started blocking my website claiming that it may be compromised. This has only been happening for a few weeks. I have checked the site contents and I cannot find anything untoward. My hosting company are not interested. The URL is www.newman-furiture.co.uk The IP address is 92.204.218.48 Any help that you can give me to help me understand why this is happening and how to rectify the problem will be appreciated. Thanks Mike Newman Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 4, 2022 Root Admin ID:1500627 Share Posted February 4, 2022 Hello @MichaelNewman Someone from our Web Research team will check on this. I did a very basic check and the IP for me doesn't seem to match or the name is possibly typed wrong? newman-furiture.co.uk 92.204.218.48 canonical name ip-92-204-218-48.ip.secureserver.net. aliases addresses 92.204.218.48 Link to post Share on other sites More sharing options...
Staff BjelakovicL Posted February 4, 2022 Staff ID:1500628 Share Posted February 4, 2022 Hi, The IP is blocked for recent port-scanning attacks. https://www.abuseipdb.com/check/92.204.218.48 Link to post Share on other sites More sharing options...
MichaelNewman Posted February 4, 2022 Author ID:1500630 Share Posted February 4, 2022 Thanks for the prompt response. I have forwarded your answer to 123-reg.co.uk who host my website. I hope they can do something about it. Link to post Share on other sites More sharing options...
deli Posted February 4, 2022 ID:1500650 Share Posted February 4, 2022 Welcome, My page is blocked by MalwareBytes, https://www.cb.szczecin.pl, this is false positive. Please about fix. Thanks Adriano Link to post Share on other sites More sharing options...
Staff BjelakovicL Posted February 4, 2022 Staff ID:1500653 Share Posted February 4, 2022 7 minutes ago, deli said: Welcome, My page is blocked by MalwareBytes, https://www.cb.szczecin.pl, this is false positive. Please about fix. Thanks Adriano The block will be removed. Link to post Share on other sites More sharing options...
MichaelNewman Posted February 4, 2022 Author ID:1500654 Share Posted February 4, 2022 I must have given you the wrong IP address and therefore do not know what the correct address is. I am ashamed to admit that I did not spell the URL of my own website correctly. It is www.newman-furniture.co.uk. I trust this will help to resolve the issue. Thanks Mike Newman Link to post Share on other sites More sharing options...
Staff BjelakovicL Posted February 4, 2022 Staff ID:1500655 Share Posted February 4, 2022 No problem @MichaelNewman. We figured there was a letter missing there. The domain is clean but hosted on a malicious IP. I suggest contacting your hosting provider and asking them to move the website to another server. Link to post Share on other sites More sharing options...
MichaelNewman Posted February 6, 2022 Author ID:1500953 Share Posted February 6, 2022 Great news and thank you very much. I will ask them to re-host my site. Link to post Share on other sites More sharing options...
MichaelNewman Posted February 7, 2022 Author ID:1501092 Share Posted February 7, 2022 I have once again been in touch with 123-reg and they insist that the IP address is clean. Here is the text of their response: Hi, I’ve checked with the hosting team and they’ve confirmed that the IP is valid, it hasn’t been used for spam or anything like this, so Malwarebytes shouldn’t have any reason to block it. Kind regards, Stephen, 123 reg If you still believe that this IP address is suspicious, please be more specific so we can get this problem resolved. Link to post Share on other sites More sharing options...
Porthos Posted February 7, 2022 ID:1501160 Share Posted February 7, 2022 8 hours ago, MichaelNewman said: If you still believe that this IP address is suspicious, please be more specific so we can get this problem resolved. It was used as recently as 12 hours ago. https://www.abuseipdb.com/check/92.204.218.48 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 7, 2022 Root Admin ID:1501162 Share Posted February 7, 2022 It appears you may need some updates as well. https://sitecheck.sucuri.net/results/newman-furniture.co.uk. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now