My computer keeps trying to access an ip address on the internet (185.53.178.7) which my router keeps blocking as unsafe.
I have checked on McAfee website checker, which says it is a high level risk. Known for malicious and dangerous content.
How can I find out which program or app is trying to do it?
Thank you
Andrew
Macbook Pro 15, Mac OS X (10.7), null
It is literally impossible for a request to come from your MacBook Pro without Little Snitch flagging it, so either it's something you previously gave permission to or you need to reinstall Little Snitch.
You may also want to uninstall Tunnelblick unless you need it for some reason (for the most part, Apple's VPN client is sufficient unless you need something special,) and make sure you have the most recent version of DuetDisplay installed.
do a google search for 185.53.178.7
You will find entries.
R
Already have. Been using little snitch for years now. Never encountered any issues before. I tried typing in the IP address in the search of little snitch, nothing comes up.
I recently updated my Synology RT2600ac router firmware. This has updated safety features and blocks known malicious websites and ip addresses, hence I get the IP address that is being blocked. I did a Whois and it is registered to a company called Team Internet AG in Germany. Supposedly some advertiseing company. Curious why they have something on my computer that keeps trying to connect to them.
From what I have been able to find this is a common IP address used for various ransomware schemes, though that doesn't mean the site wasn't compromised at some point and is now clean.
Are you sure there are no other devices on your network, say a neighbor that guessed your WiFi password or something you forgot that uses the Internet like a TV or streaming box?
My router log shows the connection request coming from my MacBook Pro, wether I am on Wifi or LAN, the router will log the MAC addresses of my network interface.
I would say that someone guessing my wifi password is impossible, as I do not even remember it, it is a random set and I save it in 1password to keep it secure.
Hi William, thank you for the advice, I am a little unsure about downloading the software. I was wondering though, do you think it is possible that a cookie in safari could be trying to connect to that IP address? as a sort of tracker?
Thank you
CleanMyMac...I do not use it for malware detection etc.. I use it every now and then to uninstall programs and clean up caches, and get rid of language files and some other stuff. I find the uninstall feature to really help with getting rid of a lot of the left behind folders and junk.
I heard bad stores about CleanMyMac deleting files that macos uses to improve performance. In the early days of macos 10.0 to 10.4, macos didn't always run unix level scripts to clean the system. Macos has run such scripts since around 10.5 or 10.6.
R
I've read that little snitch is not perfect.
R
Is Parallels running? What is the software over there accessing on your network?
I only use parallels for the odd occasion that I come across some special software that only works on windows. Most of the time it is not running.
Perhaps you can do it and tell me what you think. my google search results all come up with it being ransomware etc..
I haven't read the reports before. I had to create an account to see the data. It seems of questionable worth.
https://exchange.xforce.ibmcloud.com/ip/185.53.178.7
Find out which app or program is trying to access an unsafe internet IP address.
