Important Notice: We're experiencing email notification issues. If you've posted a question in the community forums recently, please check your profile manually for responses while we're working to fix this.

On Monday the 3rd of March, around 5pm UTC (9am PT) users may experience a brief period of downtime while one of our underlying services is under maintenance.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

198.7.61.117, Firefox.exe.

more options

I recently installed Malwarebytes Anti-malware software. Whenever I access Firefox, I get the message that Malewarebytes blocked access to a potentially malicious website identified as 198.6.61.117 Firefox.exe. What is this and is it harmful. I do not notice any change to the way Firefox performs.

I recently installed Malwarebytes Anti-malware software. Whenever I access Firefox, I get the message that Malewarebytes blocked access to a potentially malicious website identified as 198.6.61.117 Firefox.exe. What is this and is it harmful. I do not notice any change to the way Firefox performs.

All Replies (2)

more options

maby turn you add-on off at the firefox menu

more options

Well, that's a very different story between those two IP addresses.

198.6.61.117 is part of a range assigned to Symantec Corporation, publisher of Norton security products. Unlikely to be dangerous. http://whois.arin.net/rest/net/NET-198-6-32-0-1/pft

198.7.61.117 is part of a range assigned to Leaseweb US, which could be hosting a wide range of companies/software. http://whois.arin.net/rest/net/NET-198-7-56-0-1/pft

The latter seems to host px.pluginhandler.info, which is implicated in adware that may ride along with free software. KEEP IT BLOCKED.

Then check out this past thread for more information on the struggle it may be to root it out if you notice adware or malware symptoms: i want to get rid of this thing (http://px.pluginhandler.info/x1) it appears obligatory on every site i log on.