Smokin'HotRarity 182 April 14, 2012 Share April 14, 2012 Malware bytes blocked a suspiscious IP, 213.131.252.251, which seems to be a shady upload site from Germany. Don't get your hooves in a fret though - it may be a false positive. However, at the time, I had two warnings from MalwareBytes, while I had several mlpforums tabs open and one youtube tab open. No other tabs were open during the warnings and my computer does not seem to be infected. I will let you know if I ever get to the bottom of this. S.V.R. Stop. Violent. Recreation, I know it's tuff but let's all try to stop playing violent videogames, violent TV, violent thinking, and just violence in general. Put "SVR" in your signature if you support Stop Violent Recreation! Link to comment Share on other sites More sharing options...
Fear Moonscar 55 April 14, 2012 Share April 14, 2012 By any chance, were they trying to put links to a furniture store or something of the nature? i created a forum site a while back for me and a group of friends to discuss video games and i was getting "Members" posting links to a different country's furniture outlet. Needless to say, i blocked there IP's but they kept breaking through using... i want to say IP twister or other sites that morph your ip into a different one. Just letting you know of one circumstance that happened of the same type Link to comment Share on other sites More sharing options...
Doctor XFizzle 8,669 April 14, 2012 Share April 14, 2012 I feel this is an appropriate reaction 6 MLP Forums' resident timelord, sports dilettante, and purveyor of wit and humor~*Traveling Timelord Nonpareil*~ Link to comment Share on other sites More sharing options...
Shankveld 4,949 April 14, 2012 Share April 14, 2012 I think I saw something like that. While browsing the site my anti-virus software told me it was unsafe to browse the site. Did this happen to others ? ~ Link to comment Share on other sites More sharing options...
Tyger 213 April 14, 2012 Share April 14, 2012 Oh teh n0z. I'm getting my hooves in a panic! 1 Link to comment Share on other sites More sharing options...
Randomiser 115 April 14, 2012 Share April 14, 2012 My hooves! What happened to them? Are they in a pan- Oh wait, I don't have hooves. I haven't experienced this yet on this site but I'll watch out for it. "...and this great blue world of oursseems a House of Leavesmoments before the wind." OC: Dream Pop Link to comment Share on other sites More sharing options...
Aureity 3,055 April 14, 2012 Share April 14, 2012 Come to think of it, Avast DID block something ONCE, but what it blocked was a Trojan from a link somewhere on the forums, I forget where it is now... A lil' Catherine <(^.^)> Link to comment Share on other sites More sharing options...
Viscra Maelstrom 3,718 April 14, 2012 Share April 14, 2012 i've not encountered any suspicious information all the time i've been browsing the forums. but then again, i haven't browsed the forums that much as other members have done recently, so maybe there is something here? idk. Soundcloud---------Twitter---------Tumblr---------DeviantArt Link to comment Share on other sites More sharing options...
Smokin'HotRarity 182 April 15, 2012 Author Share April 15, 2012 Lol, I don't remember clicking on any furniture ads any time recent, or ever. S.V.R. Stop. Violent. Recreation, I know it's tuff but let's all try to stop playing violent videogames, violent TV, violent thinking, and just violence in general. Put "SVR" in your signature if you support Stop Violent Recreation! Link to comment Share on other sites More sharing options...
Founder Twilight Sparkle ✨ 8,527 April 15, 2012 Founder Share April 15, 2012 Malware bytes blocked a suspiscious IP, 213.131.252.251, which seems to be a shady upload site from Germany. Don't get your hooves in a fret though - it may be a false positive. However, at the time, I had two warnings from MalwareBytes, while I had several mlpforums tabs open and one youtube tab open. No other tabs were open during the warnings and my computer does not seem to be infected. I will let you know if I ever get to the bottom of this. I think I saw something like that. While browsing the site my anti-virus software told me it was unsafe to browse the site. Did this happen to others ? ~ Come to think of it, Avast DID block something ONCE, but what it blocked was a Trojan from a link somewhere on the forums, I forget where it is now... If you ever get a malware warning of any kind while browsing MLP Forums, I would like to know about it and where you saw it, ASAP. There is no known malware on the site, but if there's an exploit in IP.Board or a member links to something shady, it may set off a red flag and warrants my immediate attention. 5 Avatar credit: robinrain8 Signature credit: Kyoshi Link to comment Share on other sites More sharing options...
Smokin'HotRarity 182 April 15, 2012 Author Share April 15, 2012 (edited) I am using MalwareBytes, and it said IP blocked 213.131.252.251 two times. Both times I had several mlpforums tabs open and one youtube tab open, no other tabs were open. There is the possibility that there is some file on my computer trying to link to 213.131.252.251 but I am not sure of that. Afterwards I googled 213.131.252.251. The information I got was that it was a shady upload site with a Spanish name located somewhere in Germany. Also it associated with a certain kind of worm, so I went on Microsoft.com to see if I had the worm and checked all the symptoms. I don't think have the worm so I'm not sure what is the culprit. Edited April 15, 2012 by glitterlicious S.V.R. Stop. Violent. Recreation, I know it's tuff but let's all try to stop playing violent videogames, violent TV, violent thinking, and just violence in general. Put "SVR" in your signature if you support Stop Violent Recreation! Link to comment Share on other sites More sharing options...
Founder Twilight Sparkle ✨ 8,527 April 15, 2012 Founder Share April 15, 2012 I am using MalwareBytes, and it said IP blocked 213.131.252.251 two times. Both times I had several mlpforums tabs open and one youtube tab open, no other tabs were open. There is the possibility that there is some file on my computer trying to link to 213.131.252.251 but I am not sure of that. Afterwards I googled 213.131.252.251. The information I got was that it was a shady upload site with a Spanish name located somewhere in Germany. Also it associated with a certain kind of worm, so I went on Microsoft.com to see if I had the worm and checked all the symptoms. I don't think have the worm so I'm not sure what is the culprit. Exactly which pages on MLP Forums did you have open? "Several mlpforums tabs" isn't very helpful, as there are tens of thousands of pages on the site. 1 Avatar credit: robinrain8 Signature credit: Kyoshi Link to comment Share on other sites More sharing options...
Randomiser 115 April 15, 2012 Share April 15, 2012 It has happened to me on a different forum before. I noticed it was always the same ip on the same page; it was the result of someone posting an image from an upload site MalwareBytes considers untrustworthy. I found this thread on the MWB forum. It looks like the site in question allows users to create their own pages, but doesn't seem to prevent them from hosting malicious content. Nothing is infected, someone probably just tried to link an image or something there. Like Feld0 said if you can remember what thread you were on we could check for a link there. 1 "...and this great blue world of oursseems a House of Leavesmoments before the wind." OC: Dream Pop Link to comment Share on other sites More sharing options...
Founder Twilight Sparkle ✨ 8,527 April 15, 2012 Founder Share April 15, 2012 It has happened to me on a different forum before. I noticed it was always the same ip on the same page; it was the result of someone posting an image from an upload site MalwareBytes considers untrustworthy. I found this thread on the MWB forum. It looks like the site in question allows users to create their own pages, but doesn't seem to prevent them from hosting malicious content. Nothing is infected, someone probably just tried to link an image or something there. Like Feld0 said if you can remember what thread you were on we could check for a link there. Exactly. Randomiser explained the problem very well. If someone links to or posts an image from a site or server with some kind of malware on it, Google and various security software may flag MLP Forums for it. Having users see a "there is malware on mlpforums.com" message is never a good thing, so that's why I want to know exactly which pages trigger the warnings so I can investigate and remove whatever is causing them. Avatar credit: robinrain8 Signature credit: Kyoshi Link to comment Share on other sites More sharing options...
Smokin'HotRarity 182 April 15, 2012 Author Share April 15, 2012 That makes sense, unfortunately I totally forgot what pages were open at the time... S.V.R. Stop. Violent. Recreation, I know it's tuff but let's all try to stop playing violent videogames, violent TV, violent thinking, and just violence in general. Put "SVR" in your signature if you support Stop Violent Recreation! Link to comment Share on other sites More sharing options...
Arylett Charnoa 4,919 April 19, 2012 Share April 19, 2012 I found a page where I got a Google Chrome warning message about a malware website. Here it is. Aether Velvet is the name of the OC in my avatar. Drawn by me. Deviantart Link to comment Share on other sites More sharing options...
Founder Twilight Sparkle ✨ 8,527 April 19, 2012 Founder Share April 19, 2012 I found a page where I got a Google Chrome warning message about a malware website. Here it is. Thanks, Ary. I fixed that one. Avatar credit: robinrain8 Signature credit: Kyoshi Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Join the herd!Sign in
Already have an account? Sign in here.
Sign In Now