+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: Successfully Blocked Access To A Potentially Malicious Website (/showthread.php?tid=5763053)
Successfully Blocked Access To A Potentially Malicious Website - Bluffer - Dec 4, 2017
So I keep getting this every 5 or so minutes. Am I infected?
https://prnt.sc/hj8o4r
RE: Successfully Blocked Access To A Potentially Malicious Website - AsSaSs@iN - Dec 5, 2017
The IP appears to belong to SoftLayer Technologies.
RE: Successfully Blocked Access To A Potentially Malicious Website - Meterpreter - Dec 5, 2017
(Dec 5, 2017 04:48 AM)AsSaSs@iN Wrote: The IP appears to belong to SoftLayer Technologies.
This ^
So if you are infected they are operating off a dedicated server
RE: Successfully Blocked Access To A Potentially Malicious Website - EPLS - Dec 5, 2017
(Dec 5, 2017 04:48 AM)AsSaSs@iN Wrote: The IP appears to belong to SoftLayer Technologies.
(Dec 5, 2017 05:00 AM)Meterpreter Wrote: This ^
So if you are infected they are operating off a dedicated server
Would it be safe to assume that this was Malware Bytes protecting from web traffic, or could it be from an already installed application trying to connect to his/an outside network?
RE: Successfully Blocked Access To A Potentially Malicious Website - AsSaSs@iN - Dec 5, 2017
(Dec 5, 2017 05:06 AM)EPLS Wrote: Would it be safe to assume that this was Malware Bytes protecting from web traffic, or could it be from an already installed application trying to connect to his/an outside network?
Could be either... I'm not sure what he was doing at the time it happened/what software is running.
RE: Successfully Blocked Access To A Potentially Malicious Website - Nyx - Dec 5, 2017
People have reported it before.
https://www.abuseipdb.com/check/173.244.200.123
https://www.tcpiputils.com/browse/ip-address/173.244.200.123
The IP you provided is being hosted by https://www.midphase.com which is then linked with:
https://www.westhost.com
https://www.uk2group.com