Site bloqué: Faux positif ?

[jc59]

Hello,

http://149.5.224.188     ?? 
Avast blocks this URL ... I thank you in advance for kindly confirm that this URL is malicious.
Have a good day

[polonus]

Better to ask us which of the 80 domains that share this one and the same IP?
Probably a general IP block because of such a situation.
A further answer to your question can be found here: https://www.virustotal.com/en/ip-address/149.5.224.188/information/
One flag:
https://www.virustotal.com/en/url/061b61e3c78561532552921287d2fb47ba0daa2f061a9a60440e9de4d3a1e74b/analysis/
This malware is detected by Avast e.o.: HTML:Iframe-BQA [Trj]
Here we see very spurious info: http://toolbar.netcraft.com/site_report?url=http%3A%2F%2F149.5.224.188
Here pages are being blocked because cross-site scripting is detected!
In that case there is PSINet, Inc. abuse.
And then here it is very clear about what kind of abuse we are talking: http://toolbar.netcraft.com/site_report?url=r62.mail.maxns.net
And again GoDaddy in the middle of the web with this abuse by -exotic.web -> ahlaejaba dot com active in slip-spam.

polonus (volunteer website security analyst and website error-hunter)

[jc59]

Hello Polonus,

Thank you for this information...
I can deduce that this is not a false positive and Avast does its job by blocking this IP ...
I've realized that Avast also blocked the website of the images of my forum hoster: www.servimg.com/?lang=fr

Is this normal ... all the websites depend on the same IP malicious ranked by Avast?

Good evening and soon to read you.

[jc59]

Hello ,

It's pretty annoying that my hosting "Servimg.com" is blocked by Avast ..
Will you change your blacklist or should I put this IP exclusion ...

Thank you in advance for your response . Have a good day

[HonzaZ]

Hi, this was a false positive and has already been removed from our blacklist. Could you try updating Avast and restarting shields/Avast?

[jc59]

Hello HonzaZ,
A big thank you for your response ... apparently everything is back to normal!
thank you to the team of Avast!
Have a good day !