MABM Blocking Malicious IP's

[carnageX]

Hi Joe! I guess I don't know what you're saying. Are you talking about the malicious IPs?

He's saying basically what I said in your first topic when you brought up the same thing: it was probably something pinging you / portscanning you via a random drive-by. Pretty much exactly what I said in your first topic when this happened.

You'll need to find out where it's actually coming from - if it's from an ad on this site or from somewhere else that you're visiting at the same time as Techist.

 

[Joe C]

Nothing is malicious, just because MBAM might be picking up a ping doesn't mean anything, although one would think your router/windows firewall would catch that stuff too. MBAM is catching everything so it looks all good for you

 

[donetao]

You'll need to find out where it's actually coming from - if it's from an ad on this site or from somewhere else that you're visiting at the same time as Techist.

Afraid that's above my pay grade. I only know I was on this site when it happened. I usually have Techist and CF both open. I switch back and forth between the forums to see the new replies being posted . They were the only sites I was visiting when MBAM blocked the IP's When I was a member on the IObit forum, MBAM blocked over 700 IP's from China. They were up set with me for bad mouthing them. They never got past MBAM. That's all I know about this guys! I don't have a clue where there coming from!
Gary!
That's all I know. I do use MBAM Anti-Exployit also. Supposed to stop drive bys!
I have no clue. Thought I would give the forum a heads up about the IP's
Gary

 

[Joe C]

A Whois IP (78.111.187.253) look up shows that ip is associated with Intertelecomm ltd.
https://who.is/whois-ip/ip-address/78.111.187.253

 

[donetao]

Hi Joe! I already know they are from the UKraine!! After looking at my MBAM logs closer, I think Skype is involved some how if that helps. I had a friend tell me he could hack me with just my Skype. He proved it and told me a whole bunch of things about my PC.
I really don't know very much more. I did have Skype open in the tray bar!!
Gary!
PS I really don't want to get my friend involved, but maybe he will reply if he sees this thread!

 

[setishock]

Your making out as if it's the forums fault you see these things in the logs. It's not coming from the forum but from bad guy spammers that hang outside the door. If you have a port open that shouldn't be, they are going to stomp you a new mud hole. But you have a working defense. So you don't get slapped.

It's not coming from the forums. It's just opportunistic spammers waiting on a victim.

 

[donetao]

Hi! I have no clue about this. I just got another blocked IP.
I'm not getting slapped. I'm simply responding to Joe and carnage.
And I'm not saying it's coming from the forums. Why are you saying that?
I'm just posting and asking for help!! When I search this IP that MBAM just blocked, It blocks me from searching for it! Hell If I knew what was going on, I wouldn't be here asking for help seti!
Gary!
95.90.237.114

 

[donetao]

Hi This is what MBAM is telling me. If I knew what was causing this, I wouldn't be here asking for answers!
https://www.malwarebytes.org/lp/ip-blocking/?ipblock=true

 

[carnageX]

See the note about Skype:
https://support.malwarebytes.org/customer/portal/articles/1835325?b_id=6400

Since you mentioned you had Skype open, may be relevant.

 

[donetao]

Hi guys! Believe me! I'm not hollering Wolf. I'm trying to find out what's going on, and I'm damn sure not accusing the forum, so please get off of that BS.
I just quit Skype in my tray after learning this from MBAM.
I'll be watching this very closely in the future.
Thanks!
https://support.malwarebytes.org/customer/portal/articles/1835328?b_id=6400