rayjay
Well-known member
I'm wondering why every time I go to RF, Norton pops up saying it has blocked an "intrusion".
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
7/28/2013 6:37:13 PM,High,An intrusion attempt by Reef Frontiers - Welcome to Reef Frontiers was blocked.,Blocked,No Action Required,Web Attack : Malvertisement Website Redirect,No Action Required,No Action Required,"www.reeffrontiers.com (199.193.244.200, 80)","www.reeffrontiers.com/adserver/www/delivery/ajs.php?zoneid=1&cb=58310259854&charset=ISO-8859-1&loc=http://www.reeffrontiers.com/forums/","OWNER-PC (192.168.1.100, 49679)",199.193.244.200 (199.193.244.200),"TCP, www-http"
Network traffic from <b>www.reeffrontiers.com/adserver/www/delivery/ajs.php?zoneid=1&cb=58310259854&charset=ISO-8859-1&loc=http://www.reeffrontiers.com/forums/</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
7/28/2013 6:37:13 PM,High,An intrusion attempt by Reef Frontiers - Welcome to Reef Frontiers was blocked.,Blocked,No Action Required,Web Attack : Malvertisement Website Redirect,No Action Required,No Action Required,"www.reeffrontiers.com (199.193.244.200, 80)","www.reeffrontiers.com/adserver/www/delivery/ajs.php?zoneid=1&cb=58310259854&charset=ISO-8859-1&loc=http://www.reeffrontiers.com/forums/","OWNER-PC (192.168.1.100, 49679)",199.193.244.200 (199.193.244.200),"TCP, www-http"
Network traffic from <b>www.reeffrontiers.com/adserver/www/delivery/ajs.php?zoneid=1&cb=58310259854&charset=ISO-8859-1&loc=http://www.reeffrontiers.com/forums/</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\GOOGLE\CHROME\APPLICATION\CHROME.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.