Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Hasselt on July 01, 2020, 03:38:35 PM

Title: Avast Web Shield False-positive for VPNs/Proxies
Post by: Hasselt on July 01, 2020, 03:38:35 PM: Hi ALL,

After some updates in Avast Web Shield, it started firing alerts on a proxy and public VPN IPs (Botnet:Blacklist).

I believe it's an error. False-positive IP example: 5.188.168.46

Friends, to whom I had previously recommended Avast now facing the same problem.

Could it be fixed?

(https://i.postimg.cc/G3WDbGs4/Avast-Capture.png)
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: Pondus on July 01, 2020, 03:54:21 PM: IP is Blacklisted by Spamhaus / Barracuda / HoneyDB / Mailspike

https://www.virustotal.com/gui/ip-address/5.188.168.46/detection

Paste IP here and check https://www.ipvoid.com/ip-blacklist-check/
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: Hasselt on July 01, 2020, 04:59:20 PM: Thanks for your prompt reply! :)

The main issue is that Avast erroneously thinks it's a botnet's command and control server.

Of course, shared IPs have not perfect reputation, the IP belongs to VPN service, but it's not a C&C server. It's a safe IP.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: drickler on July 01, 2020, 07:16:16 PM: I am experiencing this issue too.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: Patrick681 on July 01, 2020, 08:46:46 PM: These notifications started for me, out of the blue, within the last couple days.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: Asyn on July 02, 2020, 02:26:27 PM: Update to the latest version (20.5.2415): https://forum.avast.com/index.php?topic=235204.0
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: drickler on July 02, 2020, 08:35:37 PM: Looks this has been solved with the update, the notifications have stopped for me.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: convar on July 02, 2020, 08:36:54 PM: Update: this I didn't want that here.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: DavidR on July 02, 2020, 10:54:08 PM: Quote from: convar on July 02, 2020, 08:36:54 PM
Update: this I didn't want that here.

I'm not entirely sure what it is that you are asking/saying ?

Why wouldn't you/anyone want to update when it fixes a problem ?
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: Hasselt on July 03, 2020, 12:00:33 AM: :D Looks like it was fixed with the latest update. Now, Seed4.Me VPN app works as it should be, no Botnet:Blacklist alerts appear so far.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: Asyn on July 03, 2020, 05:35:35 AM: Thanks for the feedback.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: convar on July 03, 2020, 02:56:55 PM: Quote from: DavidR on July 02, 2020, 10:54:08 PM
I'm not entirely sure what it is that you are asking/saying ?
That what I originally wrote here, was not meant for in this topic, and the post cannot be deleted.
Title: Re: Avast Web Shield False-positive for VPNs/Proxies
Post by: DavidR on July 03, 2020, 08:34:56 PM: Quote from: convar on July 03, 2020, 02:56:55 PM
Quote from: DavidR on July 02, 2020, 10:54:08 PM
I'm not entirely sure what it is that you are asking/saying ?
That what I originally wrote here, was not meant for in this topic, and the post cannot be deleted.

OK.

Whilst you can't delete the post, moderators can (if there haven't been any subsequent activity related to it). But when you edited yout post you could also have replaced the text with deleted- incorrect topic, etc.