silkphoenix

Blocking Outgoing IP Address

78 posts in this topic

Hello,

This morning, Malwarebytes block an outgoing IP addresses several times (15), it all occurred within an hour period. Since then, no such action has appeared further. Here's one of the log information:

2013/04/16 07:44:20 -0500 IP-BLOCK 50.97.214.162 (Type: outgoing)

The IP address belongs to a company called SoftLayer. I contact them and they have no idea why their IP address would appear in my PC and asked me to send the log information to their abuse department, which I did. So far, I haven't heard anything from them yet.

Does anyone know why this IP address appeared in my PC and was blocked as "outgoing"?

Any suggestions/comments are much appreciated.

Thank you.

post-137940-0-38462500-1366126019.jpg

Share this post


Link to post
Share on other sites

Having the same problem. Happened yesterday and this morning. Malwarebytes, thanks for stopping this if it is malicious, However, I have not had this happen with Firefox in the past.

2013/04/16 09:09:11 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49498, Process: firefox.exe)

2013/04/16 09:09:11 -0700 FALCONSLI7 JPs IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49497, Process: firefox.exe)

This does not seem to be affecting the browser nor internet access, but Google search of the IP indicates it is a legitamate IP, and one entry in the Google search stated they had made contact with the company and that company said it did not know why the poster's computere had the IP address on it.

Malwarebytes, give us a hand here. Is this a false positive or do I/we need to dig a little deeper on our PC's to resolve this.

Norton and MB do not show any 'baddies' on my PC.

Thanks.

Share this post


Link to post
Share on other sites

Getting the same warning. Installed Malwarebytes in an attempt to eradicate "Conduit" from my PC. Malwarebytes and HitMan Pro showing no malware.

Share this post


Link to post
Share on other sites

HEADS UP Silkphoenix and Jcfigi, this is an update with a solution. If you don't have it already, download and install CCleaner

http://www.piriform.com/ccleaner/

Run cleaner with default settings; it will clean out your internet cache etc. etc.

You may also want to run its registry cleaner, but be sure to back up the registry before cleaning; I have never had a problem after

cleaning but better safe then sorry. I analysed my registry (using CCleaner) and it didn't find anything related to this IP, then I cleaned it.

When it is all done, reboot.

I just did this and the problem is gone: 50.97. etc.etc does NOT show up anymore.

Don't know where I got it, probably from a search sometime this weekend. It does not show up in scans by MB nor Norton (Full system scans).

Please post if this solves your problem.

Good Luck.

Share this post


Link to post
Share on other sites

So glad I'm not the only one having this problem!

I have Malwarebytes installed on several computers and they've all been popping up these IP Blocks since yesterday. Malwarebytes logs show multiple blocks, all through different ports.

Computers with Malwarebytes + Avira Anti-Virus shows:

IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49248, Process: chrome.exe)

IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 49440, Process: chrome.exe)

IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49727, Process: chrome.exe)

~Basically shows from whatever browser being used (Chrome, Firefox, or Opera)

Computers with Malwarebytes + Avast Anti-Virus shows:

IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 52203, Process: avastsvc.exe)

IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 53363, Process: avastsvc.exe)

IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 53836, Process: avastsvc.exe)

IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 51471, Process: avastsvc.exe)

~Any browser shows Avast since it scans all traffic

Even my work netbook is getting them to. Drove me crazy thinking my home network had something... Yesterday I fully scanned my main computer in Safemode with Malwarebytes + Avast and came up clean. Also spent all night using Avast to Boot Scan, also nothing. Tried DNS Flushes in CMD, CCleaner, and even tried Malwarebytes Anti-Rootkit program, nothing as well.

IP Block Popup can be reproduced practically 90% of the time at http://gamefaqs.com; which never happened before yesterday - I'm pretty sure it's some of the flash ads hosted on SoftLayer since even Yahoo Mail gets the IP Block popups when certain ads show.

Share this post


Link to post
Share on other sites

NoStall -- Thank you for your suggestion. I run CCleaner at night daily and also run my anti-virus and/or anti-malwares softwares overnight daily. This problem just came up this morning when I started my Firefox, but I doubt it has anything to do with that since I use Firefox every day.

I would suggest those who have this problem send their Malwarebytes log report or simply a message to SoftLayer, so they know the severity of this problem. I chatted with them via their website this morning and they said one or some of their clients might be using their IP address illegally. Here's their email address:

abuse@softlayer.com

Share this post


Link to post
Share on other sites

HEADS UP Silkphoenix and Jcfigi, this is an update with a solution. If you don't have it already, download and install CCleaner

http://www.piriform.com/ccleaner/

Run cleaner with default settings; it will clean out your internet cache etc. etc.

You may also want to run its registry cleaner, but be sure to back up the registry before cleaning; I have never had a problem after

cleaning but better safe then sorry. I analysed my registry (using CCleaner) and it didn't find anything related to this IP, then I cleaned it.

When it is all done, reboot.

I just did this and the problem is gone: 50.97. etc.etc does NOT show up anymore.

Don't know where I got it, probably from a search sometime this weekend. It does not show up in scans by MB nor Norton (Full system scans).

Please post if this solves your problem.

Good Luck.

Thanks NoStall. Will give it a try and report back.

Share this post


Link to post
Share on other sites

Hello, all three of you posting in this topic: :)

Welcome. :)

Until an MBAM staffer stops by, here's a bit of basic info about MBAM's IP blocking module:

IP blocks can mean a number of things (MBAM is >>doing its job<< of blocking bad websites/bad content on websites; an expected occurrence when running Skype and certain P2P software; rarely, a False Positive; or, a sign of possible infection, either with realtively harmless adware or with more serious malware).

If you would like expert help with checking your system & removing adware or any other possible malware on your computers, please follow the recommendations in this pinned topic: Available Assistance For Possibly Infected Computers.

A qualified expert will guide you through additional scans and cleanup tools, in order to disinfect your systems.

That would be safer for each of you, as the provision of malware removal advice (even with popular tools, such as CCleaner) here in the General forum by regular members is not recommended. :(

Thanks very much,

daledoc1

PS Even though problems might sound "the same", each computer is unique. So, too, is the process to find and remove malware. So, rather than posting in another OP's topic, it's generally preferred that each person start his/her own, separate thread. That way each person can get individual help, minimizing confusion for everyone.

Share this post


Link to post
Share on other sites

I started receiving the same message with the same IP address registered to Softlayer in Dallas Texas. I have sent them a message to the email address someone else posted above (abuse@softlayer.com)

However, within the past couple of hours, the activity has increased. I've had blockages from IP address 23.59.191.33 which is registered to Akamai Technologies in Boston and now several more IP addresses registered to Softlayer- 50.97.218.220 and 50.23.124.152.

I too have run multiple cleaners and virus scans and all comes back clear. Does anyone know what is going on? Will Malwarebytes investigate and post a response. Thanks all.

Share this post


Link to post
Share on other sites

I think if we all send emails to SoftLayer, they will take us seriously. So please, to all who have the same problem, send the email to: abuse@softlayer.com and let them know. Otherwise, they wont' take any action.

As for myself, I haven't seen any blockage so far since this morning.

Thank you.

Share this post


Link to post
Share on other sites

Thank you, Ron. I love your profile pix as I used to have a Beagle myself, he died a month ago at the age of 16.

Share this post


Link to post
Share on other sites

Sorry to hear that. I really like the Beagle look. I have a Yellow Lab myself and a Terrier mix.

We're a bit busy right now so hopefully someone can break away and get to this but it may not be till later tonight.

Share this post


Link to post
Share on other sites

I'm also having the same problem with:

IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 49722, Process: Internet Explorer)

Malwarebytes blocks the outgoing traffic but a full scan just run finds nothing. I'd really appreciate tech support coming up with a fix to this problem. I don't know if it's a false positive or a real malware attack item. Thanks.

Sorry if this message is a repeat.

Share this post


Link to post
Share on other sites

I'm also having the same problem with:

IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 51173, Process: Internet Explorer)

Malwarebytes blocks the outgoing traffic but a full scan just run finds nothing. I'd really appreciate tech support coming up with a fix to this problem. I don't know if it's a false positive or a real malware attack item. Thanks

Share this post


Link to post
Share on other sites

I have that also, Softlayer from Dallas and Loyalton, California

Share this post


Link to post
Share on other sites

So I'm not sure if this would be a permanent fix but I just installed AdBlock onto my browser and I haven't had an issue yet. I noticed the problem was showing up when ever ads were loading on websites. Anyone else have input on this?

Share this post


Link to post
Share on other sites

Relieved to read that I am not the only one that has been having this problem. It started last night, and is happening on both computers that have Malwarebytes Pro installed on. When I am on ebay, (I have been a seller for 14 years and spend hours everyday on the site, and this has never happened before) and go to one of my listings or any listing, I keep getting a Malwarebytes bubble notification indicating that it has successfully blocked access to a potential malicious website. Type: outgoing. Process: iexplore.exe. The IP addresses have been 50.97.214.162 and 50.97.218.220, and maybe another one that I didn't write down. I performed a System Restore and used CCleaner to clean out all cookies, etc., but to no avail. I ran a scan with Malwarebytes and Webroot but neither picked up anything.

Needless to say, I would appreciate any help to resolve this issue. Is it possible that ebay is using some banner ads that are causing this problem? Or, are there issues with Softlayer, who appears to be associated with these IP addresses? Or, is this a false positive?

UPDATE: I may have resolved the issue of Malwarebytes notifications on ebay. I went to my account and "Site Preferences" and under advertising preferences, I opted out of participating in ebay's Adchoice program that uses your information to show you relevant ads on ebay and other sites. I'm guessing that some of those ads are generated from Softlayer servers. In any event, after making the change, I have not (so far) received any Malwarebytes notifications. Keeping my fingers crossed.

Share this post


Link to post
Share on other sites

Hi All,

I’m new here, but having the same issues with very similar IPs. I’ve been running MB Pro since last year with good results.

50.97.214.162

50.97.218.220

50.23.124.152

I’ve run MB scan plus the MB rootkit tool. I’ve also used TDSSKiller. All show that things are clean.

Like other mentioned, the issue seems to be with certain websites serving ads. In my case, mostly news sites like the local newspaper website.

Thanks

Share this post


Link to post
Share on other sites

I just finished building a client's computer - clean install from disc of Windows 7, then installed Malwarebytes Pro and went straight to the website I stated in my previous post (see above) and the IP Block happened again.

I'm fairly certain that flash ads are indeed causing it. The "Outgoing" part makes us think our computers are infected. Shouldn't it be saying "Incoming" though or something? I don't know too tired from work + troubleshooting...

Anyhow, been reading that Malwarebytes had a HUGE mishap yesterday that seriously messed up peoples' computers... maybe this could be some by product of the faulty virus definition released, since this also started yesterday too?

Share this post


Link to post
Share on other sites

We're working to resolve the issue with Softlayer, but at the time I do not believe that this is a false positive.

Please keep in mind we have a great relationship with Softlayer- if you check the IP address of this forum itself you'll notice it's hosted on their network. They are typically very quick with responding to these types of things, so it'll be resolved soon.

Share this post


Link to post
Share on other sites

Grad i found this.. and only found it by oogling the ip's.

This has been driving me nuts the past few days.. mostly get it on news websites or ebay etc..

Have heaps of logs to show.. avp.exe that would be kaspersky?

2013/04/17 18:57:10 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54345, Process: avp.exe)

2013/04/17 18:57:18 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54380, Process: avp.exe)

2013/04/17 18:57:18 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54382, Process: avp.exe)

2013/04/17 18:57:18 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54426, Process: avp.exe)

2013/04/17 18:57:18 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54428, Process: avp.exe)

2013/04/17 18:57:26 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54443, Process: avp.exe)

2013/04/17 18:57:26 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 54445, Process: avp.exe)

2013/04/17 19:01:42 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55276, Process: avp.exe)

2013/04/17 19:02:06 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55390, Process: avp.exe)

2013/04/17 19:02:06 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55392, Process: avp.exe)

2013/04/17 19:02:14 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55459, Process: avp.exe)

2013/04/17 19:02:30 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55525, Process: avp.exe)

2013/04/17 19:02:30 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55529, Process: avp.exe)

2013/04/17 19:02:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55555, Process: avp.exe)

2013/04/17 19:02:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55559, Process: avp.exe)

2013/04/17 19:03:10 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55836, Process: avp.exe)

2013/04/17 19:03:10 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 55840, Process: avp.exe)

2013/04/17 19:06:54 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56358, Process: avp.exe)

2013/04/17 19:06:54 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56362, Process: avp.exe)

2013/04/17 19:07:02 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56391, Process: avp.exe)

2013/04/17 19:07:02 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56393, Process: avp.exe)

2013/04/17 19:07:02 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56419, Process: avp.exe)

2013/04/17 19:07:02 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56421, Process: avp.exe)

2013/04/17 19:07:02 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56447, Process: avp.exe)

2013/04/17 19:07:02 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 56455, Process: avp.exe)

2013/04/17 19:10:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57082, Process: avp.exe)

2013/04/17 19:10:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57086, Process: avp.exe)

2013/04/17 19:10:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57151, Process: avp.exe)

2013/04/17 19:11:02 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57298, Process: avp.exe)

2013/04/17 19:11:02 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57300, Process: avp.exe)

2013/04/17 19:11:10 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57348, Process: avp.exe)

2013/04/17 19:16:30 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57787, Process: avp.exe)

2013/04/17 19:16:30 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57790, Process: avp.exe)

2013/04/17 19:17:02 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 57896, Process: avp.exe)

2013/04/17 19:17:02 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 57898, Process: avp.exe)

2013/04/17 19:17:10 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 57930, Process: avp.exe)

2013/04/17 19:17:10 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 57932, Process: avp.exe)

2013/04/17 19:17:26 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 57985, Process: avp.exe)

2013/04/17 19:17:26 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 57989, Process: avp.exe)

2013/04/17 19:17:26 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58000, Process: avp.exe)

2013/04/17 19:17:26 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58002, Process: avp.exe)

2013/04/17 19:17:34 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58034, Process: avp.exe)

2013/04/17 19:17:34 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58036, Process: avp.exe)

2013/04/17 19:17:42 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58061, Process: avp.exe)

2013/04/17 19:17:42 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58063, Process: avp.exe)

2013/04/17 19:18:30 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58116, Process: avp.exe)

2013/04/17 19:18:30 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58118, Process: avp.exe)

2013/04/17 19:18:38 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58147, Process: avp.exe)

2013/04/17 19:18:38 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58150, Process: avp.exe)

2013/04/17 19:18:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58208, Process: avp.exe)

2013/04/17 19:18:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58211, Process: avp.exe)

2013/04/17 19:19:02 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58262, Process: avp.exe)

2013/04/17 19:19:02 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58264, Process: avp.exe)

2013/04/17 19:19:10 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58311, Process: avp.exe)

2013/04/17 19:19:34 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58402, Process: avp.exe)

2013/04/17 19:19:34 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58404, Process: avp.exe)

2013/04/17 19:19:50 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58614, Process: avp.exe)

2013/04/17 19:20:30 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58976, Process: avp.exe)

2013/04/17 19:20:30 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 58978, Process: avp.exe)

2013/04/17 19:20:38 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 59067, Process: avp.exe)

2013/04/17 19:20:38 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 59216, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61048, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61052, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61066, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61068, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61089, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61093, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61142, Process: avp.exe)

2013/04/17 19:30:46 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61146, Process: avp.exe)

2013/04/17 19:31:02 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61281, Process: avp.exe)

2013/04/17 19:31:10 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61283, Process: avp.exe)

2013/04/17 19:31:18 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61306, Process: avp.exe)

2013/04/17 19:31:18 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61308, Process: avp.exe)

2013/04/17 19:31:26 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61355, Process: avp.exe)

2013/04/17 19:31:26 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 61359, Process: avp.exe)

2013/04/17 19:38:30 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 61712, Process: avp.exe)

2013/04/17 19:38:30 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 61716, Process: avp.exe)

2013/04/17 19:38:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 61758, Process: avp.exe)

2013/04/17 19:38:38 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 61762, Process: avp.exe)

2013/04/17 19:40:06 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 62162, Process: avp.exe)

2013/04/17 19:40:06 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 62166, Process: avp.exe)

2013/04/17 19:40:22 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 62279, Process: avp.exe)

2013/04/17 19:40:22 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 62283, Process: avp.exe)

2013/04/17 19:46:22 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 62576, Process: avp.exe)

2013/04/17 19:46:22 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 62579, Process: avp.exe)

2013/04/17 19:46:22 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 62586, Process: avp.exe)

2013/04/17 19:49:10 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 63730, Process: avp.exe)

2013/04/17 19:49:10 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 63736, Process: avp.exe)

2013/04/17 19:49:58 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 64044, Process: avp.exe)

2013/04/17 19:49:58 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 64046, Process: avp.exe)

2013/04/17 19:50:06 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 64265, Process: avp.exe)

2013/04/17 19:50:06 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 64267, Process: avp.exe)

2013/04/17 19:50:55 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 64565, Process: avp.exe)

2013/04/17 19:50:55 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 64567, Process: avp.exe)

2013/04/17 19:51:27 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 64709, Process: avp.exe)

2013/04/17 19:51:27 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 64711, Process: avp.exe)

2013/04/17 19:56:31 +1000 ROGM4 Strat IP-BLOCK 50.97.218.220 (Type: outgoing, Port: 64917, Process: avp.exe)

2013/04/17 19:56:31 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 64919, Process: avp.exe)

2013/04/17 19:56:47 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65066, Process: avp.exe)

2013/04/17 19:56:47 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65068, Process: avp.exe)

2013/04/17 19:56:55 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65098, Process: avp.exe)

2013/04/17 19:56:55 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65102, Process: avp.exe)

2013/04/17 19:57:11 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65178, Process: avp.exe)

2013/04/17 19:57:11 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65180, Process: avp.exe)

2013/04/17 19:57:11 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65238, Process: avp.exe)

2013/04/17 19:57:11 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65240, Process: avp.exe)

2013/04/17 19:57:19 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65267, Process: avp.exe)

2013/04/17 19:57:19 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 65269, Process: avp.exe)

2013/04/17 20:08:23 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 50005, Process: avp.exe)

2013/04/17 20:08:23 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 50017, Process: avp.exe)

2013/04/17 20:40:07 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50820, Process: avp.exe)

2013/04/17 20:40:07 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50829, Process: avp.exe)

2013/04/17 20:40:31 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50963, Process: avp.exe)

2013/04/17 20:40:31 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 50965, Process: avp.exe)

2013/04/17 20:47:27 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 51452, Process: avp.exe)

2013/04/17 20:47:43 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 51987, Process: avp.exe)

2013/04/17 20:47:43 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 51989, Process: avp.exe)

2013/04/17 21:08:31 +1000 ROGM4 Strat IP-BLOCK 50.23.124.152 (Type: outgoing, Port: 55350, Process: avp.exe)

2013/04/17 21:32:39 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57819, Process: avp.exe)

2013/04/17 21:32:39 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57821, Process: avp.exe)

2013/04/17 21:32:47 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57846, Process: avp.exe)

2013/04/17 21:32:47 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57852, Process: avp.exe)

2013/04/17 21:33:03 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57880, Process: avp.exe)

2013/04/17 21:33:03 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 57882, Process: avp.exe)

2013/04/17 21:39:35 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 58797, Process: avp.exe)

2013/04/17 21:39:35 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 58799, Process: avp.exe)

2013/04/17 21:49:59 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59447, Process: avp.exe)

2013/04/17 21:49:59 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59450, Process: avp.exe)

2013/04/17 21:51:43 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59716, Process: avp.exe)

2013/04/17 21:51:43 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59720, Process: avp.exe)

2013/04/17 21:51:43 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59789, Process: avp.exe)

2013/04/17 21:51:43 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59791, Process: avp.exe)

2013/04/17 21:51:51 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59829, Process: avp.exe)

2013/04/17 21:51:51 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59831, Process: avp.exe)

2013/04/17 21:52:23 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59893, Process: avp.exe)

2013/04/17 21:52:23 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59895, Process: avp.exe)

2013/04/17 21:52:47 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59916, Process: avp.exe)

2013/04/17 21:52:47 +1000 ROGM4 Strat IP-BLOCK 50.97.214.162 (Type: outgoing, Port: 59918, Process: avp.exe)

Share this post


Link to post
Share on other sites

Same issue as others here, for several days getting IP block messages for

50.97.214.162

50.97.218.220

50.23.124.152

So what is causing this? A bad ad server?

Or a trojan or other malware?

None of my detection tools can find anything.

Share this post


Link to post
Share on other sites

i also think its a bad ad server.. was thinking this yesterday.

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.