With airVPN start-up, Malwarebytes blocks 91.217.90.54

Discussion in 'privacy problems' started by caspian, Apr 24, 2016.

  1. caspian

    caspian Registered Member

    Joined:
    Jun 17, 2007
    Posts:
    2,301
    Location:
    Oz
    Every time I start airVPN, Malwarebytes pops up and says that it is blocking a malicious web page with the IP of 91.217.90.54. Does anyone have any idea what this could be? Looks like it's in the Ukraine.
     
  2. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,024
    Maybe DNS server?

    Best ask AirVPN support.
     
  3. ParaNodes

    ParaNodes Registered Member

    Joined:
    Jul 15, 2003
    Posts:
    69
    Hi,

    This is common with mbam pro and airvpn, it's because airvpn uses cheap hosting and these cheap hosters also frequently have nasties hosted on there domains, so mbam blocks the whole domain.
    Nothing wrong with airvpn at that ip. Add exclusion if you like. Air will fail-over to another ip if you leave it blocked, so it will still connect.
    This has been discussed at air forums many times, and air is not happy that mbam isn't more selective.

    HTH
     
  4. caspian

    caspian Registered Member

    Joined:
    Jun 17, 2007
    Posts:
    2,301
    Location:
    Oz
    What seemed strange to me is that MBAM blocks this IP as soon as I click on airVPN. Before I activate the network lock or connect to a server.
     
  5. caspian

    caspian Registered Member

    Joined:
    Jun 17, 2007
    Posts:
    2,301
    Location:
    Oz
    This happens before I connect to a server. And it doesn't interfere with my ability to connect to an air server. It just seems odd. It is an outbound connection to the Ukrain before I connect.
     
  6. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    6,024
    Maybe it's getter server usage statistics?
     
  7. ParaNodes

    ParaNodes Registered Member

    Joined:
    Jul 15, 2003
    Posts:
    69
    Yes, it's the initial connection that airvpn client (Eddie) uses to authenticate login, fetches updated server lists, etc. and has nothing to do with the actual vpn connection.
    These mbam blockages come and go, there's a bunch of these initial ip's for redundancy/ fail-over.Even the airvpn website and forum have been blocked at various times .
     
Loading...