IP2Location Programming Contest

LiveIPMap.com allows you to lookup or report an IP abuse case. Please take note that the abuse records listed on this website was the summarized results compiled from all reporters, and it's only just for your information. We do not guarantee the correctness, reliability and completeness of the abuse data.

Live IP Map

   

IP Information

IP Address 185.17.184.11
Country country flag Germany
Region Sachsen
City Dresden
Latitude 51.05089
Longitude 13.73832
ZIP Code 01067
Time Zone UTC +02:00
ISP LeaseWeb Netherlands B.V.
Domain leaseweb.com
Proxy Type DCH
Net Speed T1
Usage Type (DCH) Data Center/Web Hosting/Transit
IDD Code 49
Area Code 0351
Elevation 114 meters
Weather Dresden (GMXX0025)
Weather Condition View Weather
Abuse Recorded 185.17.184.11

Reported on 19 Feb, 2016 10:23:20 PM

Intrusion attempt reported by Norton 360

Every 2 seconds, my Norton 360 virus protection software is warning me that this IP address is using Malicious software to attack my home PC!!!!!! The attacking computer is listed as: guardset.info and realget.info And the attacking URL is listed as: gurusafe.net/55/restore.dat Help!!!!!!!!!!


Reported on 19 Feb, 2016 10:26:58 PM

185.17.184.11 is attacking me right now

My home based (personal use) desktop PC is being constantly attacked (every 2 seconds!!!) by Malicious website. The attacking computers are listed by Norton 360 protection software as: guardset.info and realget.info The attacker URL is listed as: gurusafe.net/55/restore.dat traffic description: TCP, www-http HELP!!!!!!!!!!!!!!!!!!!!!!!


Reported on 20 Feb, 2016 12:06:04 AM

Attack by 185.17.184.11 gurusafe.net/55/restore.dat

185.17.184.11 is also reported by my Norton 360 as attacking my computer every few seconds. I do not have an answer yet. Attacked by 185.17.184.6, 80 gurusafe.net/55/restore.dat 185.17.184.11 domenjob.com Network traffic from gurusafe.net/55/restore.dat matches the signature of a known attack. The attack was resulted from DEVICEHARDDISKVOLUME2WINDOWSSYSTEM32SVCHOST.EXE Norton Power Eraser Case #261 291 54 nothing found. https://otx.alienvault.com/indicator/domain/domenjob.net/ Hostname Address First Seen Last Seen domenjob.net 185.17.184.6 Jan. 15, 2016, 6:58 am Jan. 15, 2016, 6:58 am domenjob.net 185.17.184.11 Jan. 15, 2016, 6:58 am Jan. 15, 2016, 6:58 am Ran Norton 360 Full System Scan 150 tracking cookies deleted Ran Norton Power Eraser nothing found Ran MalwareBytes nothing found Ran RogueKiller removed two HKEY HJ Desk PUM


Reported on 20 Feb, 2016 12:43:16 AM

IP address 185.17.184.11.80 is attacking my computer

Norton 360 is (so far) successfully blocking frequent and repeated attacks by 185.17.184.11 right now and since 7:24am. It mentions gurusafe and guardset.info.


Reported on 20 Feb, 2016 12:48:36 AM

185.17.184.6

I'm not getting attacked from 185.17.184.11 but mine shows .6. I am seeing the same thing as the report from Frankfurt. Today I tried to install a new Virtualbox program and an VMappliance from a company that sells networking monitoring equipment. Not sure if related but it's the only thing I changed/added today. Symantec 360 Category: Intrusion Prevention Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description 2/19/2016 4:39:45 PM,High,An intrusion attempt by gurusafe.net was blocked.,Blocked,No Action Required,"Malicious Site: Malicious Web Site, Domain, or URL (1)",No Action Required,No Action Required,"gurusafe.net (185.17.184.6, 80)",gurusafe.net/55/restore.dat,,gurusafe.net (185.17.184.6),"TCP, www-http" Network traffic from <b>gurusafe.net/55/restore.dat</b> matches the signature of a known attack. The attack was resulted from DEVICEHARDDISKVOLUME2WINDOWSSYSTEM32SVCHOST.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.


Reported on 20 Feb, 2016 12:56:30 AM

whois IP

http://185.17.184.6.ipaddress.com/ IP Lookup Result for 185.17.184.6 IP Address: 185.17.184.6 Organization: LeaseWeb Netherlands B.V. ISP: LeaseWeb Netherlands B.V. Updated: 02/14/2016 04:56 AM City: - Country: Netherlands State: - Timezone: Europe/Amsterdam Local Time: 02/20/2016 01:58 AM


Reported on 20 Feb, 2016 04:50:45 AM

Symantec Norton have been testing this for 2.5 hours on my computer

Symantec Norton have been testing this attack for 2.5 hours on my computer. So far without luck. They are researching the problem now and I trust they'll find an explanation.


Reported on 20 Feb, 2016 11:43:49 AM

185.17.184.11, 80

Norton 360 has so far blocked 11 attacks commenced by the second by 185.17.184.11 from 12:33:54 to 12:33:06 o'clock (+1 GMT).


Reported on 20 Feb, 2016 04:49:32 PM

gurusafe attack

Been bouncing off my Norton every time I log on past three days... Hope they can shut it down


Reported on 20 Feb, 2016 09:46:08 PM

the ip adress i have is 185.17.184.6,80

attacks 8 to 15 times when i turn on computer norton 360 has so far blocked all attempts


Reported on 20 Feb, 2016 11:30:25 PM

Guardset or Gurusafe intrusion attack

Norton did a 6 hour remote session on my computer testing this intrusion attack. I won't give their final advice as it did not work. So this morning I have logged another request for their help and they will call me back. They Symantec Norton are definitely taking this seriously. But I notice above that it is only Norton that is detecting the attack. Why not other antivirus programs? Also Norton pinged the attack web site 185.17.184.11 and it came back as unknown.


Reported on 21 Feb, 2016 04:40:37 PM

gurusafe.net/55/restore.dat virus

Is attacking my computer every minute. How can I stop this? Norton is blocking, but I would like to be more proactive and get it to stop attacking. Can this be done???


Reported on 22 Feb, 2016 06:45:42 AM

Same story gurusafe.net/55/restore.dat

This same site has been attacking me constantly, its annoying, but cannot get through. The site is most probably hacked,and will be resolved soon, seeing as there is a street address.


Reported on 22 Feb, 2016 08:24:19 AM

Norton reports 185.17,184.6, 80

Persistent attacks, every minute or so, blocked by Norton. Can someone hurry up and sort this out please?


Reported on 22 Feb, 2016 09:59:00 AM

gurusafe.net

Every few seconds gurusafe - attacks my computer. Norton stops all the time but after a while the attacks stop. Does this mean I now have a virus ? Re-start the computer and the attacks start again. It starts attacking as soon as I re-boot. Even though I have not started my web browser.


Reported on 22 Feb, 2016 05:29:51 PM

hacking attempt by 185.17.184.11,80

annoying and repeated attack attempts, apparently blocked by Norton, every day, every time using computer gurusafe.net is name attached to ip address also gurusafe.net/55/restore.dat can't find any part of these on computer itself ? automated repeated attack attempts


Reported on 22 Feb, 2016 05:31:26 PM

repeated hacking attempts

repeated attempts by 185.17.184.11,80 apparentkly located in Frankfurt/m, germany


Reported on 23 Feb, 2016 01:18:06 PM

Gurusafe.net

Is anyone running a VPN client? I read on another forum that VPN clients are triggering the alert.


Reported on 24 Feb, 2016 08:58:48 AM

Hacking attempt 185.17.184.11

Malwarebytes is blocking transactions with this IP address. I get four or five notices in a few minutes then silence for the rest of the day. This has been happening for three days (since I installed Malwarebytes. I have Kaspersky AV installed which doesn't catch this. I was infected at the weekend with malware that only Malwarebytes removed: Trojan.DNSChanger.DNSRst (whatever that is). Everyday Kasperksy removes a Trojan. Continuing investigations.


Reported on 01 Mar, 2016 03:06:30 PM

185.17.184.11 is hitting my PC with Trojan.zlog.Q every 5 seconds

Norton remoted in to my PC and fixed it in 3-4 hours. they have had to do this 3 times now over the past 6 weeks. the blocking seems to be working now after they cleaned out the last infection (maybe the updated Norton is working better). when it get in is makes it impossible to browse the wed or jump via links, you get all sorts of popups for "cleaning up your virus"


Reported on 05 Mar, 2016 02:24:51 PM

185.17.184.11

185.17.184.11,80 Network traffic from customsky.net/77/projectd.dat matches the signature of a know attack. The attack was resulted from DEVICEHARDDISKVOLUME2WINDOWSSYSTEMSVCHOST.EXE Attacker URL: customsky.net/77/projectd.dat Traffic Description TCP www-http Norton Security blocked the intrusion attempt


Reported on 05 Mar, 2016 02:25:58 PM

185.17.184.11

Any solution for this attack???


Reported on 06 Mar, 2016 11:40:36 AM

IP Attack My PC home & business net work.

IP 185.17.184.11 is attempting to attack my pc/net every few min's and seconds, but being blocked by Norton 360. however info norton given me differs from what others has received. Attacking Computer: domejob.net IP 185.17.184.11 Attacking URL: customsky.net/77/projected.dat trying to attack my harddrive volume4windowssystem32svchost.exe These attacks started at 10:59:42 & are still ongoing. Norton is still looking into this attack.


Reported on 06 Mar, 2016 05:44:18 PM

185.17.184.11 and 185.17.184.6

tracert on 185.17.184.6 ran through 212.119.24.242 around 09:30 Pacific www.ipgeek.net reports: IP: 212.119.24.242 Decimal: 3564574962 ISP: NTT America Organization: Akamai Time zone: Europe/London IP local Time: 03/06/2016, 17:39:53 tracert to 185.17.184.11 ran through 83.231.213.182: IP: 83.231.213.182 Decimal: 1407702454 ISP: NTT America Organization: NTT Europe Web Hosting - Paris Time zone: Europe/Berlin IP local Time: 03/06/2016, 18:43:08


Reported on 06 Mar, 2016 08:20:25 PM

185.17.184.11.80

This ip address from the Netherlands is sending some type of Trojan virus to my computer. Anyone know how to hack into any of the military satellites with lasers? Here is the Longitude: 4.90 and the latitude is 52.366700 according to the internet :)


Reported on 06 Mar, 2016 09:59:27 PM

Repeat hacking attempts by 185.17.184.11

Malwarebytes program has been caught several attempts within the last hour. Details of the notification are 'Malicious Website Protection, Domain, 185.17.184.11, blogmiller.info, outbound...' In addition to blogmiller.info it has listed dynamaven.info, and dynachief.com all using the same ip.


Reported on 12 Mar, 2016 11:10:04 PM

IP address 185.17.184.11 is attacking my computer

IP address 185.17.184.11 is attacking my computer but Norton 360 and Malwarebytes have blocked the attempts. still I cant get rid of it to stop


Reported on 15 Mar, 2016 11:51:34 PM

Hi Jacked Browser

Program takes over your internet and among that it causes your HDD to R/W excessively repeatedly


Reported on 18 Mar, 2016 01:32:39 AM

Norton reports IP 185.17,184.6, 80

Persistent attacks, every minute or so, blocked by Norton. Can someone hurry up and sort this out please? Thank you.


Reported on 21 Mar, 2016 07:10:34 AM

INTRUSION

Norton virus protection software is warning me that this IP address is using Malicious software to attack my home PC ADWARE.DNSUnlocker Risk HIGH


Reported on 26 Mar, 2016 11:29:29 PM

Same IP address attacking my computer since late night.

Norton has blocked it at least 4 times now. All from IP 185.17.184.11


Reported on 14 May, 2016 08:28:55 PM

185.17.184.11

This IP address is attacking my computer every few minutes, usually when I am logged into a chatroom. I notice the attacks stop when I log out of this chatroom. Don't know if that helps, I just know I'm glad I have Norton.


Reported on 27 Jun, 2016 05:18:14 PM

185.17.184.11, 80 attacks

Intrusion attempts every few seconds. Blocked by Norton 360. Can this be stopped?


Reported on 29 Jun, 2016 12:05:22 AM

360

http://www.tcpiputils.com/browse/ip-address/185.17.184.6 Same problems after I install 360.


Reported on 29 Jun, 2016 12:07:58 AM

360

http://www.tcpiputils.com/browse/ip-address/185.17.184.6 Same problems after I install 360.


Reported on 29 Jun, 2016 12:08:17 AM

360

http://www.tcpiputils.com/browse/ip-address/185.17.184.6 Same problems after I install 360.


Reported on 30 Jun, 2016 09:31:18 PM

dnsunlocker

Norton virus protection software is warning me that this IP address is using Malicious software to attack my home PC ADWARE.DNSUnlocker Risk HIGH this is on a brand new machine out of the box


Reported on 14 Sep, 2016 10:30:39 AM

INTRUSION ATTEMPT

Adware.DNSUnlocker Activity 2 Traffic description : TCP, www-http


Reported on 15 Oct, 2016 11:18:48 PM

intrusion attempt

Adware.DNSUnlocker Activity 2 Traffic description : TCP, www-http


Reported on 31 Jan, 2017 11:13:38 AM

System Infected: Adware.DNSUnlocker Activity 2

Norton Security block a attack system. Can't did'nt stop it.


Reported on 15 Mar, 2017 04:31:08 AM

Intrusion attempt and attempted reg key modification

System Infected: Adware.DNSUnlocker Activity 2 and an infected windows host file.


Reported on 04 May, 2017 10:07:31 AM

cookies

unremovable .... 163.172.229.229:8080 canot enter this shit to shut im down


Reported on 19 Sep, 2017 06:01:30 PM

apple i phone

i received an email stating that this ip address accessed my iphone account on sunday


This site uses the IP2Location geolocation data which is available for download at https://www.ip2location.com. If you would like to check if the given IP address is an proxy, you may use this tool IP Proxy Detection for lookup.

Recent Lookup IP Addresses

Notes

LiveIPMap is a platform open for everyone to report an IP abuse case or to request the release of a falsified abuse case. Anyone is free to lookup for an abuse case. Abuse data listed on this website is real-time updated.

You can click on the Not An Abuse button to dispute an abuse report. Our QA team will review your reason for the delisting. However, the delisting process may take up days or weeks depending on our load..

IP2Location IP Geolocation
IP2Location Programming Contest