X
Tap here to go to the mobile version of the site.

Support Forum

Unknown Address Logged When Starting Firefox

Posted

Every time I start Firefox (61.0.1), the firewall shows the browser is connecting to 151.101.196.201. Is this normal? Thanks.

Every time I start Firefox (61.0.1), the firewall shows the browser is connecting to 151.101.196.201. Is this normal? Thanks.

Chosen solution

The about:networking page shows this data for accessing the EFF website, so it looks that this IP is legitimate and there is nothing to worry.

You can verify this by opening the manin site in Firefox tab and check the remote address.

about:networking#dns ->

www.eff.org	ipv4	false	151.101.0.201
				151.101.64.201
				151.101.128.201
 				151.101.192.201
Read this answer in context 0

Additional System Details

Application

  • User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:61.0) Gecko/20100101 Firefox/61.0

More Information

WestEnd
  • Top 25 Contributor
60 solutions 5379 answers

Helpful Reply

That isn't a FF issue sounds more like malware.

That isn't a FF issue sounds more like malware.

Question owner

Thanks, WestEnd, for your reply. I'm not thinking the issue is malware, as I have a good quality (as in a pay-version) malware-checker. I also just installed a fresh version of the OS, but it didn't make any difference.

I did, though, neglect to mention that I'm also running the following add-ons: Decentraleyes, HTTPS Everywhere, Privacy Badger and uBlock Origin.

Thanks, WestEnd, for your reply. I'm not thinking the issue is malware, as I have a good quality (as in a pay-version) malware-checker. I also just installed a fresh version of the OS, but it didn't make any difference. I did, though, neglect to mention that I'm also running the following add-ons: Decentraleyes, HTTPS Everywhere, Privacy Badger and uBlock Origin.
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157955 answers

Helpful Reply

An IP lookup shows this: Fastly (SKYCA-3)

An IP lookup shows this: Fastly (SKYCA-3)
Shadow110 1072 solutions 14836 answers

Hi, something is connecting to the owner of the IP Address that belongs to : https://whois.arin.net/rest/net/NET-151-101-0-0-1/pft?s=151.101.196.201 Fastly Network Operations which has this policy for Peers : https://www.fastly.com/peering so yes it is Malware I would think as Peers mean sharing, so could be bitcoin miner. Or is it your service provider ?

It maybe the Decentraleyes, I would suggest disable it and see if traffic continues. Maybe switch if this works on a Mac, which it does : https://addons.mozilla.org/firefox/addon/malwarebytes/

Give your self a scan with the full version : https://www.malwarebytes.com/mac/ If need help :

Please let us know if this solved your issue or if need further assistance.

Hi, something is connecting to the owner of the IP Address that belongs to : https://whois.arin.net/rest/net/NET-151-101-0-0-1/pft?s=151.101.196.201 Fastly Network Operations which has this policy for Peers : https://www.fastly.com/peering so yes it is Malware I would think as Peers mean sharing, so could be bitcoin miner. Or is it your service provider ? It maybe the Decentraleyes, I would suggest disable it and see if traffic continues. Maybe switch if this works on a Mac, which it does : https://addons.mozilla.org/firefox/addon/malwarebytes/ Give your self a scan with the full version : https://www.malwarebytes.com/mac/ If need help : *https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/ Please let us know if this solved your issue or if need further assistance.

Question owner

Hello WestEnd,

You got me thinking; and so I just ran Firefox through its paces for quite a few cycles, and checked my firewall along the way. You were definitely on the right track, because that IP address is connected to the add-on, Privacy Badger. Thanks for the idea, WestEnd!

Hello WestEnd, You got me thinking; and so I just ran Firefox through its paces for quite a few cycles, and checked my firewall along the way. You were definitely on the right track, because that IP address is connected to the add-on, Privacy Badger. Thanks for the idea, WestEnd!

Question owner

Hi Pkshadow,

I posted my last reply just as your reply appeared. So, firstly, thanks for your additional thoughts!

I did spot the Fastly trail, but didn't know what to make of it. Also, as I'd mentioned in my last post, I ran Firefox through multiple start/quit cycles – six-times with Privacy Badger active, and six-times with it disabled. And every time the add-on is disabled, that IP address doesn't appear; but, every time that add-on is active, the IP address appears.

I wonder if anyone else who uses Privacy Badger is seeing that same IP address, or one close to it?

I'll also email EFF, since they're the developer of the add-on, and see what they have to say.

Also, I do use Intego's VirusBarrier; and it gives my drive a clean bill of health; but, do you think I still need to run Malwarebytes?

Thanks again, Pkshadow!

Hi Pkshadow, I posted my last reply just as your reply appeared. So, firstly, thanks for your additional thoughts! I did spot the Fastly trail, but didn't know what to make of it. Also, as I'd mentioned in my last post, I ran Firefox through multiple start/quit cycles – six-times with Privacy Badger active, and six-times with it disabled. And every time the add-on is disabled, that IP address doesn't appear; but, every time that add-on is active, the IP address appears. I wonder if anyone else who uses Privacy Badger is seeing that same IP address, or one close to it? I'll also email EFF, since they're the developer of the add-on, and see what they have to say. Also, I do use Intego's VirusBarrier; and it gives my drive a clean bill of health; but, do you think I still need to run Malwarebytes? Thanks again, Pkshadow!

Question owner

Thanks, cor-el; yes, I'm seeing the same thing. I think that by me going directly to EFF will resolve the matter for good. I'll re-post their response here.

Thanks, cor-el; yes, I'm seeing the same thing. I think that by me going directly to EFF will resolve the matter for good. I'll re-post their response here.
Shadow110 1072 solutions 14836 answers

Hi, great found out what it was.

Look at the permissions you gave up to use Privacy Badger https://addons.mozilla.org/firefox/addon/privacy-badger17/

Hi, great found out what it was. Look at the permissions you gave up to use Privacy Badger https://addons.mozilla.org/firefox/addon/privacy-badger17/
jscher2000
  • Top 10 Contributor
8695 solutions 71074 answers

As a footnote, this article lists various connections Firefox makes automatically at startup and during operation, if you ever need to rule these out: How to stop Firefox from making automatic connections.

As a footnote, this article lists various connections Firefox makes automatically at startup and during operation, if you ever need to rule these out: [[How to stop Firefox from making automatic connections]].
cor-el
  • Top 10 Contributor
  • Moderator
17479 solutions 157955 answers

Chosen Solution

The about:networking page shows this data for accessing the EFF website, so it looks that this IP is legitimate and there is nothing to worry.

You can verify this by opening the manin site in Firefox tab and check the remote address.

about:networking#dns ->

www.eff.org	ipv4	false	151.101.0.201
				151.101.64.201
				151.101.128.201
 				151.101.192.201
The about:networking page shows this data for accessing the EFF website, so it looks that this IP is legitimate and there is nothing to worry. *https://www.eff.org/ 151.101.0.201:443 You can verify this by opening the manin site in Firefox tab and check the remote address. about:networking#dns -> www.eff.org ipv4 false 151.101.0.201 151.101.64.201 151.101.128.201 151.101.192.201

Question owner

Thanks, cor-el, for the great info!

Thanks, cor-el, for the great info!

Question owner

I heard back from EFF, the developer of Privacy Badger, and they confirmed that the IP addresses which appear at startup are all connected to Privacy Badger. Thanks, all, for your responses.

I heard back from EFF, the developer of Privacy Badger, and they confirmed that the IP addresses which appear at startup are all connected to Privacy Badger. Thanks, all, for your responses.