Text only | Text with Images

OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: dirtyfreebooter on October 03, 2025, 03:33:35 PM

Title: Zenarmor blocking Telegram as Malware/Virus
Post by: dirtyfreebooter on October 03, 2025, 03:33:35 PM
blocking ip 149.154.175.55. its blocking all telegram.

(https://i.imgur.com/ES4yfVZ.png)
Title: Re: Zenarmor blocking Telegram as Malware/Virus
Post by: klaxzygen on October 05, 2025, 09:08:55 PM
Indeed, I've got the same, these 3 ips
Code Select
149.154.167.41
149.154.167.51
149.154.167.50on ports 443 and 5222
so far all above IPs are blacklisted only on PlonkatronixBL
Title: Re: Zenarmor blocking Telegram as Malware/Virus
Post by: klaxzygen on October 05, 2025, 09:43:04 PM
response from zenarmor:
2 of them are existing in a list of virustotal as well. We will check the "149.154.167.50" again if it still has a malicious traffic then can change its category. 
Code Select
https://www.virustotal.com/gui/ip-address/149.154.167.41
https://www.virustotal.com/gui/ip-address/149.154.167.51
Title: Re: Zenarmor blocking Telegram as Malware/Virus
Post by: sy on October 08, 2025, 01:19:35 PM
Hi,

It seems that there are malicious activities from this IP as well.

https://www.abuseipdb.com/check/149.154.167.50
Text only | Text with Images