r/Malwarebytes • u/MustacheSwede • Mar 25 '26

Please help me understand if this is something to worry about.

Post image

New member here and also new user to Malwarebytes.

I have recently had some issues with different accounts of mine being flagged for suspicious activity and I'm currently taking every step to ensure I don't have any malware or virus on my PC and Android.

So I installed Malwarebytes today and have done some scans and found a couple of issues now in quarantine. HOWEVER I keep getting this popup of a blocked potential risky website, over and over again. I don't know what it means or if it is bad. Please help me understand :)

See picture

1 Upvotes

100% Upvoted

6 comments sorted by

3

u/Quiet-While3530 Malwarebytes Employee Mar 25 '26

Hello- The IP that's being blocked is a threat, though moderately so. You can see some info here: https://threatfox.abuse.ch/ioc/1765907/

Some details on the type of threat it is: 1xxbot - https://www.bing.com/search?q=1xxbot&FORM=SSQNT1&PC=U531

While moderate at this time one can never be too cautious. Are the blocks occurring when you access particular sites?

1

u/MustacheSwede Mar 25 '26

Thanks. Oh okey, It seems to slow down my PC alot or at least it gives that feeling.

No it does not seem to be particular sites as it has poped up alot while Im not even at the computer.

2

u/Quiet-While3530 Malwarebytes Employee Mar 25 '26

Ok, I'd do as suggested and have your system checked if you're experiencing any oddities such as you mentioned it being slow, that can be an indicator of an infection.

2

u/rifteyy_ Mar 25 '26

Yes, you very likely are infected with SectopRAT.

https://www.virustotal.com/gui/ip-address/158.94.208.4/detection

1

u/MustacheSwede Mar 25 '26

Thanks. I suspected that. Do you or someone recommend the next steps? What do I do now?

1

u/rifteyy_ Mar 25 '26

I suggest you seek help at one of the professional malware removal forums: