MSFN Forum: Malwarebytes Blocking malicious IP address! - MSFN Forum

Jump to content


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Malwarebytes Blocking malicious IP address! Rate Topic: -----

#1 User is offline   lapetite66 

  • Junior
  • Pip
  • Group: Members
  • Posts: 74
  • Joined: 06-April 11
  • OS:XP Pro x86
  • Country: Country Flag

Posted 02 October 2011 - 12:22 PM

Hi:

I was using my computer and I saw a pop-up message from Malwarebytes about it blocking me from a malicous website. I did a search and found out the IP address that was trying to connect to my computer was from the Netherlands.

The connection attempt is outgoing. So does that mean it's some on my computer calling to the bad website?

I should also mention that yes I do have utorrent on my computer at this time but haven't used it since installing it(I did a test install of my own CAB creation of Utorrent first on a virtual PC and then on my "real computer" but haven't used it).

Any assistance would be very appreciated.

Thanks,


#2 User is offline   Tripredacus 

  • K-Mart-ian Legend
  • Group: Super Moderator
  • Posts: 8,665
  • Joined: 28-April 06
  • OS:Server 2012
  • Country: Country Flag

Posted 03 October 2011 - 09:06 AM

You can run netstat to tell you what processes are connecting where

netstat -b


#3 User is offline   lapetite66 

  • Junior
  • Pip
  • Group: Members
  • Posts: 74
  • Joined: 06-April 11
  • OS:XP Pro x86
  • Country: Country Flag

Posted 03 October 2011 - 10:50 AM

View PostTripredacus, on 03 October 2011 - 09:06 AM, said:

You can run netstat to tell you what processes are connecting where

netstat -b




Hi Tripredacus:

Thanks for replying to my message.

You said use netstat -b right? Did you mean for me to go to "START'", "RUN" and then type netstat - b into the box? If so that's what I did but I couldn't really see anything because the stuff in the command screen box disappears too fast. Is there some way to slow it down or to get a log of what was in that screen?

#4 User is offline   allen2 

  • Not really Newbie
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1,732
  • Joined: 13-January 06

Posted 03 October 2011 - 01:21 PM

Launch it from a dos prompt (start/run/cmd.exe [enter]). If you want to monitor in realtime your open ports, you can try something like this:
netstat -b 5

Or if you prefer something with a gui, you could try tcpview.

#5 User is offline   lapetite66 

  • Junior
  • Pip
  • Group: Members
  • Posts: 74
  • Joined: 06-April 11
  • OS:XP Pro x86
  • Country: Country Flag

Posted 03 October 2011 - 06:19 PM

View Postallen2, on 03 October 2011 - 01:21 PM, said:

Launch it from a dos prompt (start/run/cmd.exe [enter]). If you want to monitor in realtime your open ports, you can try something like this:
netstat -b 5

Or if you prefer something with a gui, you could try tcpview.


Allen2:

Thanks for the info. :)

#6 User is offline   jaclaz 

  • The Finder
  • Group: Developers
  • Posts: 11,409
  • Joined: 23-July 04
  • OS:none specified
  • Country: Country Flag

Posted 04 October 2011 - 01:06 AM

For the record, and to be picky :ph34r: , cmd.exe is NOT a "dos prompt".
It is the Windows command interpreter or windows Command console.

jaclaz

#7 User is offline   allen2 

  • Not really Newbie
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1,732
  • Joined: 13-January 06

Posted 04 October 2011 - 01:39 AM

Just for the record, it seems that other people are also wrong.

#8 User is offline   madmanbean 

  • Group: Members
  • Posts: 1
  • Joined: 12-January 12
  • OS:none specified
  • Country: Country Flag

Posted 12 January 2012 - 08:54 AM

Am having the same problem.. ip address is 77.247.177.32

having run netstat I e believe it is skype doing this!

Have al got running all kinds of apple stuff

Anyone else had this ip address? If it continues then I will stop using malware bytes as it is popping up every minute or so! pc scanned for viruses and is totally clean

#9 User is offline   submix8c 

  • Inconceivable!
  • Group: Patrons
  • Posts: 3,241
  • Joined: 14-September 05
  • OS:none specified
  • Country: Country Flag

Posted 12 January 2012 - 09:20 AM

View Postmadmanbean, on 12 January 2012 - 08:54 AM, said:

Am having the same problem.. ip address is 77.247.177.32

having run netstat I e believe it is skype doing this!

Have al got running all kinds of apple stuff

Anyone else had this ip address? If it continues then I will stop using malware bytes as it is popping up every minute or so! pc scanned for viruses and is totally clean
Read first post. Also, check out ArinDOTnet - you can enter an IP address and it will tell you who "owns" the IP range. Yes, that IP is in the Netherlands (again, see first post).

#10 User is offline   Yzöwl 

  • Wise Owl
  • Group: Super Moderator
  • Posts: 4,363
  • Joined: 13-October 04
  • OS:Windows 7 x64

Posted 13 January 2012 - 12:00 PM

View Postmadmanbean, on 12 January 2012 - 08:54 AM, said:

Am having the same problem.. ip address is 77.247.177.32


Here's the data on the IP Address

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

2 User(s) are reading this topic
0 members, 2 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2013 msfn.org
Privacy Policy