Jump to content

Welcome to MSFN Forum
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account



Photo

Malwarebytes Blocking malicious IP address!

- - - - -

  • Please log in to reply
9 replies to this topic

#1
lapetite66

lapetite66

    Junior

  • Member
  • Pip
  • 74 posts
  • Joined 06-April 11
  • OS:XP Pro x86
  • Country: Country Flag
Hi:

I was using my computer and I saw a pop-up message from Malwarebytes about it blocking me from a malicous website. I did a search and found out the IP address that was trying to connect to my computer was from the Netherlands.

The connection attempt is outgoing. So does that mean it's some on my computer calling to the bad website?

I should also mention that yes I do have utorrent on my computer at this time but haven't used it since installing it(I did a test install of my own CAB creation of Utorrent first on a virtual PC and then on my "real computer" but haven't used it).

Any assistance would be very appreciated.

Thanks,


How to remove advertisement from MSFN

#2
Tripredacus

Tripredacus

    K-Mart-ian Legend

  • Super Moderator
  • 9,923 posts
  • Joined 28-April 06
  • OS:Server 2012
  • Country: Country Flag

Donator

You can run netstat to tell you what processes are connecting where

netstat -b

MSFN RULES | GimageX HTA for PE 3-5 | lol probloms
msfn2_zpsc37c7153.jpg

#3
lapetite66

lapetite66

    Junior

  • Member
  • Pip
  • 74 posts
  • Joined 06-April 11
  • OS:XP Pro x86
  • Country: Country Flag

You can run netstat to tell you what processes are connecting where

netstat -b



Hi Tripredacus:

Thanks for replying to my message.

You said use netstat -b right? Did you mean for me to go to "START'", "RUN" and then type netstat - b into the box? If so that's what I did but I couldn't really see anything because the stuff in the command screen box disappears too fast. Is there some way to slow it down or to get a log of what was in that screen?

#4
allen2

allen2

    Not really Newbie

  • Member
  • PipPipPipPipPipPipPip
  • 1,814 posts
  • Joined 13-January 06
Launch it from a dos prompt (start/run/cmd.exe [enter]). If you want to monitor in realtime your open ports, you can try something like this:
netstat -b 5
Or if you prefer something with a gui, you could try tcpview.

#5
lapetite66

lapetite66

    Junior

  • Member
  • Pip
  • 74 posts
  • Joined 06-April 11
  • OS:XP Pro x86
  • Country: Country Flag

Launch it from a dos prompt (start/run/cmd.exe [enter]). If you want to monitor in realtime your open ports, you can try something like this:

netstat -b 5
Or if you prefer something with a gui, you could try tcpview.


Allen2:

Thanks for the info. :)

#6
jaclaz

jaclaz

    The Finder

  • Developer
  • 14,593 posts
  • Joined 23-July 04
  • OS:none specified
  • Country: Country Flag
For the record, and to be picky :ph34r: , cmd.exe is NOT a "dos prompt".
It is the Windows command interpreter or windows Command console.

jaclaz

#7
allen2

allen2

    Not really Newbie

  • Member
  • PipPipPipPipPipPipPip
  • 1,814 posts
  • Joined 13-January 06
Just for the record, it seems that other people are also wrong.

#8
madmanbean

madmanbean
  • Member
  • 1 posts
  • Joined 12-January 12
  • OS:none specified
  • Country: Country Flag
Am having the same problem.. ip address is 77.247.177.32

having run netstat I e believe it is skype doing this!

Have al got running all kinds of apple stuff

Anyone else had this ip address? If it continues then I will stop using malware bytes as it is popping up every minute or so! pc scanned for viruses and is totally clean

#9
submix8c

submix8c

    Inconceivable!

  • Patrons
  • 4,338 posts
  • Joined 14-September 05
  • OS:none specified
  • Country: Country Flag

Am having the same problem.. ip address is 77.247.177.32

having run netstat I e believe it is skype doing this!

Have al got running all kinds of apple stuff

Anyone else had this ip address? If it continues then I will stop using malware bytes as it is popping up every minute or so! pc scanned for viruses and is totally clean

Read first post. Also, check out ArinDOTnet - you can enter an IP address and it will tell you who "owns" the IP range. Yes, that IP is in the Netherlands (again, see first post).

Someday the tyrants will be unthroned... Jason "Jay" Chasteen; RIP, bro!

Posted Image


#10
Yzöwl

Yzöwl

    Wise Owl

  • Super Moderator
  • 4,546 posts
  • Joined 13-October 04
  • OS:Windows 7 x64
  • Country: Country Flag

Donator

Am having the same problem.. ip address is 77.247.177.32


Here's the data on the IP Address




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users