6 ms·
Why is MalwareBytes giving a warning for this site?
by MagicPropmaker 7y ago
Why is MalwareBytes giving a warning for this site?
- phoe-krk 7y agoMalwareBytes is wrong. seclists is a website containing security mailing lists, and CVE mails are a very common sight there.
- smpetrey 7y agoBecause MalwareBytes is scareware?
- MagicPropmaker 7y agoI'd still like to know why MalwareBytes is warning me about this page. If you can't answer that, why mock someone?
- pushpop 7y agoEdit: you’ve hacked your comment after I replied so much that this post no long bares any context to the question it was originally responding to....
- MagicPropmaker 7y agoAnd it's not true that MalwareBytes is "scareware". I'm sure the person saying that is simply some 12-year-old who wants to show the Windows user that he runs Linux and is a "l33t h4x0r" or something and knows better than my (commercial) security software. MalwareBytes is actually reporting that something on that page is trying to make an outbound connection to port 50685 on ip address 45.33.49.119. I don't know what to make of this, but it smells fishy. It's very odd that this program will make a claim if there isn't something going on. I'm not going to risk visiting that page.
- pushpop 7y agoI don’t run nor have ever run MalwareBytes so I couldn’t comment on what’s being reported there but the site itself is one of the few of few I’d trust normally. So either the site has been hacked or MalwareBytes is reporting a false positive. Are you connecting over HTTP or HTTPS? If the latter, have you checked who issued the SSL certificate?
- apearson 7y ago45.33.49.119 is the same IP this website is hosted on. I'm not sure on port 50685 but when I load the page there are no connections on port 50685.
- merb 7y agowell basically > 49k ports are private/dynamic. which means that if you open a website at 80/443 it will open a port on your computer above 49k, so nothing malicious.