Web Attack: Malicious Explicit Kit Website 4
Thread Starter
Super Moderator
Joined: Jul 2011
Posts: 1,545
Likes: 1
From: Houston TX. USA
Web Attack: Malicious Explicit Kit Website 4
I hope you guys don't mind me persuing allerting you to notifications about alarms by my Norton360...
Information related to it is...
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
2012-08-16 10:40:18,High,An intrusion attempt by www.lobbyfaces.pro was blocked.,Blocked,No Action Required,Web Attack: Malicious Exploit Kit Website 4,No Action Required,No Action Required,"www.lobbyfaces.pro (93.170.107.242, 80)",www.lobbyfaces.pro/search,(*)93.170.107.242 (93.170.107.242),"TCP, www-http"
Network traffic from <b>www.lobbyfaces.pro/search</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.
(*) My address removed for security purposes.
Information related to it is...
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
2012-08-16 10:40:18,High,An intrusion attempt by www.lobbyfaces.pro was blocked.,Blocked,No Action Required,Web Attack: Malicious Exploit Kit Website 4,No Action Required,No Action Required,"www.lobbyfaces.pro (93.170.107.242, 80)",www.lobbyfaces.pro/search,(*)93.170.107.242 (93.170.107.242),"TCP, www-http"
Network traffic from <b>www.lobbyfaces.pro/search</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.
(*) My address removed for security purposes.
Thread
Thread Starter
Forum
Replies
Last Post
