Weird Outgoing connections during metadata search

bigpallooka · 04-22-2022, 11:16 AM

Malwarebytes occasionally alerts 'RISKWARE' when I'm searching for metadata for titles I no longer remember the source of. Are these a risk, and how do they occur?

Quote:

Malwarebytes
-Website Data-
Category: RiskWare
Domain: storage0.dms.mpinteractiv.ro
IP Address: 93.113.11.219
Port: 443
Type: Outbound
File: E:\Calibre Portable\Calibre\calibre-parallel.exe

dotRO being Romania seems suspicious.

kovidgoyal · 04-22-2022, 11:30 AM

None of calibre's builtin metadata plugins connect to that domain. there are some fetch news recipes that do connect to that domain to download covers. But that has nothing to do with metadata download.

bigpallooka · 04-22-2022, 11:46 AM

I don't use the Fetch News and have no recipes loaded, so why would it attempt a connection? Is it something that just happens in the background regardless? Is it anything to worry about?

kovidgoyal · 04-22-2022, 12:23 PM

No recipes only run if you run them.

davidfor · 04-22-2022, 11:30 PM

The hostname looks like it might be part of some sort of hosting service. As such, there could be multiple hostnames pointing to that IP address. And it could be one of multiple addresses behind the hostname. And with a name like that it could be where the covers are being stored for one of the sites being used. If that is the case, the hostname may not be in the plugin, but, returned as part of the search.

You probably need to run a metadata download for each of the sources you use to see which is the one that is using the site.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Weird characters in comment metadata	ehead	Library Management	2	01-10-2022 10:20 PM
Weird behaviour of the search and replace history	jiembe	Editor	9	11-23-2020 07:32 AM
Weird initial metadata	enenalan	Library Management	11	08-12-2011 03:49 AM
Blocking Kindle Outgoing Data	MissileTech	Amazon Kindle	3	12-01-2010 08:46 AM
Outgoing PMs	pendragginp	Feedback	3	05-25-2010 08:09 AM

04-22-2022, 11:30 AM	#2
kovidgoyal creator of calibre Posts: 45,347 Karma: 27182818 Join Date: Oct 2006 Location: Mumbai, India Device: Various	None of calibre's builtin metadata plugins connect to that domain. there are some fetch news recipes that do connect to that domain to download covers. But that has nothing to do with metadata download.

04-22-2022, 11:46 AM	#3
bigpallooka Connoisseur Posts: 86 Karma: 24 Join Date: Aug 2009 Device: Kobo/Tablet PC/Desktop/Laptop	I don't use the Fetch News and have no recipes loaded, so why would it attempt a connection? Is it something that just happens in the background regardless? Is it anything to worry about?

04-22-2022, 12:23 PM	#4
kovidgoyal creator of calibre Posts: 45,347 Karma: 27182818 Join Date: Oct 2006 Location: Mumbai, India Device: Various	No recipes only run if you run them.

04-22-2022, 11:30 PM	#5
davidfor Grand Sorcerer Posts: 24,905 Karma: 47303824 Join Date: Jul 2011 Location: Sydney, Australia Device: Kobo:Touch,Glo, AuraH2O, GloHD,AuraONE, ClaraHD, Libra H2O; tolinoepos	The hostname looks like it might be part of some sort of hosting service. As such, there could be multiple hostnames pointing to that IP address. And it could be one of multiple addresses behind the hostname. And with a name like that it could be where the covers are being stored for one of the sites being used. If that is the case, the hostname may not be in the plugin, but, returned as part of the search. You probably need to run a metadata download for each of the sources you use to see which is the one that is using the site.

Advert

Advert