Kat Paton Posted October 27, 2010 ID:334658 Share Posted October 27, 2010 Several times a day this IP is blocked (208.73.210.29) when I am not using the internet. How can I discover what application on my computer is attempting to connect to this site? The following messages are often posted to the log. Is it normal for IP Protection to stop? 07:43:57 KP IP-BLOCK 208.73.210.2907:46:33 KP MESSAGE IP Protection stopped07:46:33 KP MESSAGE IP Protection started successfullyThanksKat Link to post Share on other sites More sharing options...
DaChew Posted October 27, 2010 ID:334691 Share Posted October 27, 2010 http://www.mywot.com/en/scorecard/208.73.210.29It looks pretty maliscous to meI would reccomend letting one of the malware experts take a closer look.http://forums.malwarebytes.org/index.php?showtopic=9573 Link to post Share on other sites More sharing options...
jld-dave Posted January 22, 2011 ID:377698 Share Posted January 22, 2011 I am getting the same IP. Whats even more strange is that I had to block this at our firewall because if anyone mistypes a URL on the internet or runs a ping for something NOT part of our domain - this IP address is what comes up.Anyone have any ideas or suggestions..? Link to post Share on other sites More sharing options...
corecharge Posted January 25, 2011 ID:379070 Share Posted January 25, 2011 Every minute or so I am getting the "IP Block 208.73.210.29" pop up. I've run a full scan and it has not found anything. Any ideas? Link to post Share on other sites More sharing options...
euggg Posted January 25, 2011 ID:379157 Share Posted January 25, 2011 I started getting the same blocked IP like every minute recently. The strange thing is that the program, which is trying to connect is either svchost.exe or the System process - I caught this using SysInternals ProcMon, image attached.So either this IP was accessed by the system before, but Malwarebytes added it to the database recently, so it started popping up, or I got some malware on both of my computers (it started simultaneously).Does anybody know where Malwarebytes keep the blocked IPs and how to check when this IP was added? Link to post Share on other sites More sharing options...
skobotinc1 Posted January 26, 2011 ID:379847 Share Posted January 26, 2011 Any word on this? Getting this alert every other minute, and my OS has slowed down tremendously since I downloaded malwarebytes, yesterday. Kind of alarmed. Link to post Share on other sites More sharing options...
okeepahokee Posted January 26, 2011 ID:379857 Share Posted January 26, 2011 I am getting the same repeated messages from Malwarebytes also. Is there a fix for this? If there is, how do I get it?Thamks Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 27, 2011 Root Admin ID:380050 Share Posted January 27, 2011 Hello , and welcome to Malwarebytes,These do not appear to be false positives. Please follow the advice below if you continue to get these sites being blocked when you're not visiting said sites.Someone will work with you one on one to assist you in the listed forum below as they get time.Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. One of the expert helpers there will give you one-on-one assistance when one becomes available.After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org Link to post Share on other sites More sharing options...
Recommended Posts