Ed Wright

iTrader: (1)

This morning, six times, I got a message that my anti-virus software "successfully blocked access to a potentially malicious website. Type: outgoing ", three different ip addresses:
193.105.134.63, also 94.242.233.162, last one was 66.45.56.109

Anybody have an idea where these are? First two times I was on here, next three I was on another, last time ( last number I listed) I wasn't on one at all. I have a wireless router, I pulled my wireless router (?) off the back of my PC. It's my work machine. Using my phone right now. I just ran malware bytes last night, before all this. Running another spyware app right now.

If anybody has a clue what's going on, or could offer some advice, I would really appreciate it.

Thanks!!

Ed Wright

iTrader: (1)

I just discovered I can type in an IP address, and find out who owns it, where it is located, and if it had had abuse complaints. Whoda thunk? :-)
First one is in Sweden, second in Istanbul, Turkey, third one is in Tempe, AZ.
Don't recognize the names. What to do.....,,

EagleMark

Someone got past your router and is now spreading your IP around to test with.

Ed Wright

iTrader: (1)

Some people just need to die.

Ed Wright

iTrader: (1)

Malware Bytes blocked an IP address belonging to SunGaurd Availability Services in Pheonix AZ. It's an "it services" company.
Wonder what the hell is going on?
Yesterday I started unplugging my USB modem when not online. Got hit while checking email and looking at this sight and another. I was just answering email when they happened.
I would suggest anybody without security software installed give some thought to getting some. They are getting past my router to do this.

Hope this helps somebody.

joecar

Ed,

go here and run the tests to see if your router has open "doors":

https://www.grc.com/x/ne.dll?rh1dkyd2

run each of the tests under the blue bar labelled "ShieldsUP!! Services"

joecar

Go here and click on ShieldsUp (in green): https://www.grc.com/default.htm

and then click Proceed.

NicD

iTrader: (7)

If there are outbound connections being made that means you have some sort of malware on your machine that is initiating the connection. This more than likely means nothing got past the router as generally you have to open ports or forward on a typical router to even allow that to happen. AND unless the router is actually a firewall of some sorts with IPS that is always updated it's not going to prevent anything from happening.

The other thing to consider is what type of applications are installed on your computer. Some of them phone home for licensing, some of them talk to central servers, etc and that might not be malicious at all.