Jump to content

HiP2P issues.


ursan

Recommended Posts

I use this software to monitor some livestock and daily (several times daily) I get messages that Malwarebytes is blocking a website or a trojan.

I've done a little research and found that these IP addresses are from China (big surprise)

I don't know that this application needs to be in contact with anyone, China or otherwise.  Is there a way to permanently block these requests?  I get popups many times daily and it's getting frustrating.

I have gathered logs: Examples.  It's always the same 3 to 5 IP. 113.24.58.156 is by far the most common.   I'm not particularly worried if someone looks at these feeds as there's nothing interesting going on.

I've tried several different versions of this app and they all do the same thing (eventually)  Does anyone have recommendations?
 

image.thumb.png.e43603a2e4633dd0846fa5a387c3d239.png

 

Quote

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 4/2/23
Protection Event Time: 4:39 PM
Log File: 7bcb945e-d196-11ed-b267-2cf05d8c8ace.json

-Software Information-
Version: 4.5.25.256
Components Version: 1.0.1957
Update Package Version: 1.0.67491
License: Premium

-System Information-
OS: Windows 10 (Build 19044.2728)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\HiP2P Client\P2PClient.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Compromised
Domain: 
IP Address: 113.24.58.156
Port: 10008
Type: Outbound
File: C:\Program Files (x86)\HiP2P Client\P2PClient.exe

(end)

Quote

Malwarebytes
www.malwarebytes.com

-Log Details-
Protection Event Date: 4/2/23
Protection Event Time: 2:27 PM
Log File: 087f1b54-d184-11ed-b8c7-2cf05d8c8ace.json

-Software Information-
Version: 4.5.25.256
Components Version: 1.0.1957
Update Package Version: 1.0.67485
License: Premium

-System Information-
OS: Windows 10 (Build 19044.2728)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1
, C:\Program Files (x86)\HiP2P Client\P2PClient.exe, Blocked, -1, -1, 0.0.0, , 

-Website Data-
Category: Trojan
Domain: 
IP Address: 113.118.198.165
Port: 33832
Type: Outbound
File: C:\Program Files (x86)\HiP2P Client\P2PClient.exe

(end)

 

Link to post
Share on other sites

  • Staff
2 hours ago, ursan said:

I use this software to monitor some livestock and daily (several times daily) I get messages that Malwarebytes is blocking a website or a trojan.

I've done a little research and found that these IP addresses are from China (big surprise)

I don't know that this application needs to be in contact with anyone, China or otherwise.  Is there a way to permanently block these requests?  I get popups many times daily and it's getting frustrating.

I have gathered logs: Examples.  It's always the same 3 to 5 IP. 113.24.58.156 is by far the most common.   I'm not particularly worried if someone looks at these feeds as there's nothing interesting going on.

I've tried several different versions of this app and they all do the same thing (eventually)  Does anyone have recommendations?
 

image.thumb.png.e43603a2e4633dd0846fa5a387c3d239.png

 

 

Hello, thanks for bringing this to our attention. We've reviewed the data from the IP again and have determined it no longer warrants being blocked so we've disabled the block in our database. 

Removal should be reflected in the next database update going out in a few hours or so.

Link to post
Share on other sites

  • TeMerc locked this topic
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.