Block IP Messages

[laskeeter]

I am constantly receiving messages that the following IP addresses are being blocked, and it is happening quite often: 89.149.210.111 and 94.75.253.118

I am not sure what to do about this. I did go back and look at the log for today many attempts even when I was not active on the computer and here is what I found:

00:24:24 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62808, Process: firefox.exe)

00:24:24 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62810, Process: firefox.exe)

00:24:24 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62812, Process: firefox.exe)

00:24:24 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62814, Process: firefox.exe)

00:54:20 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62990, Process: firefox.exe)

00:54:28 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62992, Process: firefox.exe)

00:54:28 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62994, Process: firefox.exe)

00:54:28 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 62996, Process: firefox.exe)

01:24:23 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63121, Process: firefox.exe)

01:24:23 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63123, Process: firefox.exe)

01:24:23 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63125, Process: firefox.exe)

01:24:23 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63127, Process: firefox.exe)

01:53:05 admin MESSAGE Scheduled update executed successfully

01:53:08 admin MESSAGE Scheduled scan executed successfully

01:54:42 admin MESSAGE IP Protection stopped

01:54:58 admin MESSAGE Database updated successfully

01:54:59 admin MESSAGE IP Protection started successfully

02:24:22 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63451, Process: firefox.exe)

02:24:22 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63453, Process: firefox.exe)

02:24:22 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63455, Process: firefox.exe)

02:24:22 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63457, Process: firefox.exe)

02:54:25 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63646, Process: firefox.exe)

02:54:25 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63648, Process: firefox.exe)

02:54:25 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63650, Process: firefox.exe)

02:54:25 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 63652, Process: firefox.exe)

04:54:21 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64300, Process: firefox.exe)

04:54:29 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64302, Process: firefox.exe)

04:54:29 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64304, Process: firefox.exe)

13:06:06 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64961, Process: firefox.exe)

13:06:07 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64962, Process: firefox.exe)

13:06:07 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 64965, Process: firefox.exe)

13:06:15 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 64967, Process: firefox.exe)

13:06:31 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 64972, Process: firefox.exe)

13:06:31 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64974, Process: firefox.exe)

13:06:47 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 64996, Process: firefox.exe)

13:06:47 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 64998, Process: firefox.exe)

13:07:03 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 65003, Process: firefox.exe)

13:07:03 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65005, Process: firefox.exe)

13:07:11 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 65009, Process: firefox.exe)

13:07:11 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65011, Process: firefox.exe)

13:07:27 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 65013, Process: firefox.exe)

13:07:28 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65015, Process: firefox.exe)

13:07:44 admin IP-BLOCK 94.75.253.118 (Type: outgoing, Port: 65027, Process: firefox.exe)

13:07:44 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65029, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65044, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65052, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65053, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65056, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65058, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65060, Process: firefox.exe)

13:09:52 admin IP-BLOCK 89.149.210.111 (Type: outgoing, Port: 65062, Process: firefox.exe)

Can someone please help me?

Thank you!!

LA-Skeeter

[laskeeter]

I take it that no one knows why this is happening. I am at a loss and really do not know what to do. If any of the support staff can assist I would appreciate it very much.

LASkeeter

[daledoc1]

Hello and welcome, Laskeeter:

Sorry, it appears that your original post may have been missed.

Outbound IP blocks when you are away from the computer highly suggests the possibility of infection.

Alas, we do not work on malware removal in this particular forum.

Instructions on how to proceed are posted in the 2nd Important Topic pinned at the top of this forum: "I Am Infected - What Do I Do Now?".

To summarize:

Free, expert assistance can be found at the malware removal-HJT forum.

Please go to this page, print out, read and follow as many instructions as you can, skipping any you are unable to complete:

http://forums.malwarebytes.org/index.php?showtopic=69723

Then please post your logs by starting a new thread here:

http://forums.malwarebytes.org/index.php?showforum=7

One of the trained experts will then assist you as soon as possible.

When you post, please be sure to select Track This Topic & choose one of the email options, so that you will be notified when someone responds; allow 24-48 hours before bumping your thread.

Alternatively, as a paying customer, you may wish to start a support ticket by contacting support at: support@malwarebytes.org, or by using one of the other support options here:

http://www.malwarebytes.org/premium-support.php

Also, please use the "Add Reply" button when replying here & at the other boards, so that it will be easier for everyone to follow the thread.

Thank you very much,

daledoc1

[Firefox]

Just to add....

this could be some addon that you may have installed to your firefox browser.... disable any addons and/or plugins and see if they stop.

Either way I would follow the instructions provided by daledoc1 above....