Skip to main content
To Customer Support To Customer Support
http://imgur.com/EDgAE1Y

 

 

i am blocking them and it doesn't seem to harm WSA security. Thing is, I-Blocklist has it listed as US Gov IP, which probably means it runs over Saavis. Saavis operates all US Government website, but its private company that also does other hosting for not Government entities. Any info on this would be helpful :)

 

best i  can tell all traffic is from WSA

 

 

this is the IP of most interest to me. The others are the WSA website and I don't mind them being blocked. But, this IP is blocked when i try to "manually update WSA" the ip is 66.35.53.194:443
@ wrote:

http://imgur.com/EDgAE1Y

 

 

i am blocking them and it doesn't seem to harm WSA security. Thing is, I-Blocklist has it listed as US Gov IP, which probably means it runs over Saavis. Saavis operates all US Government website, but its private company that also does other hosting for not Government entities. Any info on this would be helpful :)

 

best i  can tell all traffic is from WSA

 

 

this is the OP of most interest to me. The others are the WSA website and I don't mind them being blocked. But, this IP is blocked when i try to "manually update WSA" the ip is 66.35.53.194:443



That is a Webroot IP. The Webroot Community Forums that you're posting this on are hosted on that IP ;)

 

-Dan
the software is dialing 66.35.53.194:443 and 66.35.53.195:50?



 

these ips are blocked when manually updating from the software. not visiting the site

 

what reason would WSA dial those from in app?
That's strange this what I get?

 

IP: 208.74.205.209

http://webinfo.reformal.ru/favicons/c/community.webroot.com.ico

Webroot Community - Webroot Community

 

ya it is weird. I asked the I-Blocklist people and they said it was BOGON, or bogus ip etc...

 

maybe my dhcp?

 

either way, blocking access to that IP doesn't seem to cause any issues with protection, but im still wondering whats going on.

 

http://en.wikipedia.org/wiki/Bogon_filtering
https://dazzlepod.com/ip/66.35.53.195/

 

according to this site its Webrrots IP/ But why is it calling from software?
Here is a list of URL masks for normal communications:

*.webrootcloudav.com

*.*.webrootcloudav.com 

*.p4.webrootcloudav.com 

*.compute.amazonaws.com

*.webroot.com 

*.webrootanywhere.com 

 

The actual IPs will vary for various reasons, so these are the firewall exclusions that some of our business customers will need to add for propper communication. The communication you are seeing is perfectly normal.

 

Thanks,

 

-Dan

 

Reply


Terms & Conditions