yarl

False Positive on URL (?)

4 posts in this topic

Hi MB,

Could you double check that www.ice2012.org is a dangerous site and should be blocked? MB is blocking it but the conference organizers have a different opinion.

Thanks!

E

Share this post


Link to post
Share on other sites

That domain resolves to 110.45.146.30, which we don't actually block.

Share this post


Link to post
Share on other sites

Would you mind checking again? It does resolve to 110.45.146.30 but the log below shows what MB does:

Thanks for your help!

2012/04/30 07:32:00 -0700 PW52 eb MESSAGE Executing scheduled scan: Quick Scan | Daily | Silent | -remove | -terminate | -reboot | -log

2012/04/30 07:32:00 -0700 PW52 eb MESSAGE Scheduled scan executed successfully

2012/04/30 08:16:31 -0700 PW52 eb IP-BLOCK 173.192.183.195 (Type: outgoing, Port: 53585, Process: firefox.exe)

2012/04/30 08:16:31 -0700 PW52 eb IP-BLOCK 173.192.183.195 (Type: outgoing, Port: 53592, Process: firefox.exe)

2012/04/30 08:16:39 -0700 PW52 eb IP-BLOCK 173.192.183.195 (Type: outgoing, Port: 53606, Process: firefox.exe)

2012/04/30 09:38:37 -0700 PW52 eb IP-BLOCK 173.192.183.196 (Type: outgoing, Port: 56483, Process: firefox.exe)

2012/04/30 09:38:37 -0700 PW52 eb IP-BLOCK 173.192.183.196 (Type: outgoing, Port: 56489, Process: firefox.exe)

Share this post


Link to post
Share on other sites

Can you e-mail me a Fiddler (www.fiddlertool.com) and Wireshark (www.wireshark.org) capture please?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.