• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos1 Stats

Bing.com Intrusion Attempts

Is anyone else receiving intrusion attempts being blocked by Norton when visiting https://www.bing.com ?

I am receiving intrusion attempts verified on two of my PCs.

Details:

IPS Alert Name: Web Attack: Fake TechSupport Domains 2
Attacking Comoputer: 13.107.21.200, 443
Source Address: 13.107.21.200
Traffic Description: TCP, https

IPS Alert Name: Web Attack: Fake TechSupport Domains2
Attacking Computer: 204.79.197.200, 443
Source Address: 204.79.197.200
Traffic Description: TCP, https

Win10Pro | NS | MBAM | Spybot S&D | SpywareBlaster | Acronis Ransomware Protection | KeyScrambler Prem | O&O ShutUp10 | Ghostery | MAXA Cookie Manager | HostsMan | OpenDNS | NordVPN | CCleaner | JV16 PowerTools | PerfectDisk Pro~ www.needGod.com

Replies

Kudos0

Re: Bing.com Intrusion Attempts

I've read similar report.

If you believe Norton has made mistaken detection, you may submit a dispute at https://submit.symantec.com/false_positive/.

Kudos0

Re: Bing.com Intrusion Attempts

Yep, me too! 

A little bit of knowledge is... well a little bit of knowledge.
Kudos1 Stats

Re: Bing.com Intrusion Attempts

Me too.

Alert Name  Web Attack: Fake TechSupport Domains 2

Default Action  No Action Required

Action Taken  No Action Required

Attacking Computer  c.bing.com  (204.79.197.200, 433)

Source Address  c.bing.com  (204.79.197.200)

Traffic Description  TCP, https

Kudos0

Re: Bing.com Intrusion Attempts

I began a regular scan this afternoon. When I opened Edge, I got the same message.

Kudos0

Re: Bing.com Intrusion Attempts

I'm seeing the same thing. Disabling Norton doesn't fix the problem. I'll probably just uninstall it and use Windows Defender until Norton gets this problem straightened out.

Kudos0

Re: Bing.com Intrusion Attempts

I, too, have gotten the notifications that this attempt from Bing.com had been blocked. It really surprised me, since I hadn't gotten any Norton alerts in months and months. Now have had 3 of these in the last hour. The attacking computer IP is the same as the one posted above by other users.
Kudos3 Stats

Re: Bing.com Intrusion Attempts

FWIW, I have submitted https:// www .bing.com as a false positive so hopefully it will be sorted soon.

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: Bing.com Intrusion Attempts

Me too! I have been freaking out thinking my computer was being attacked left and right because it pops up every 5 minutes. Thank goodness I am not the only one. Misery loves company.

Kudos1 Stats

Re: Bing.com Intrusion Attempts

Norton also alerts to msn.com, which has Bing-related content..

Kudos0

Re: Bing.com Intrusion Attempts

SendOfJive:

Norton also alerts to msn.com, which has Bing-related content..

Interesting.  No alert from the Aussie site.

https://www.msn.com/en-au/

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: Bing.com Intrusion Attempts

Yes it pops up a lot when I open my outlook (msn) email,

Kudos0

Re: Bing.com Intrusion Attempts

Me too -- can't access Bing or do any search from address bar (Bing is default browser).  Started tonight out of the blue 

IPS Alert Name: Web Attack: Fake TechSupport Domains2
Attacking Computer: 204.79.197.200, 443
Source Address: 204.79.197.200
Traffic Description: TCP, https

WIN10 Home 64, IE 11, both at latest levels

Kudos0

Re: Bing.com Intrusion Attempts

I get it on Bing and Yahoo.  You can still use yahoo search after you get the warning and google give no warning and works fine.  It disables Bing as a search engine.   I can still click through on the news pages for both. 

Kudos0

Re: Bing.com Intrusion Attempts

Okay, I figured that possibly what caused this problem in the first place was some sort of redirect hack (dunno) that caused Norton to block Bing due to repeated malware attempts, because my wife's computer (same Norton product and MS products) doesn't block Bing.

So I downloaded Norton RnR (Norton's Remove and Reinstall tool), ran it and reinstalled Norton, applied all Live Updates and reran Live Update until I got "Not Required" and now Bing is no longer blocked and searching from the address (Bing is my default browser) bar works again whether going directly to Bing or searching for anything using Bing from the address bar.

Hope this helps!

-Dan

Kudos1 Stats

Re: Bing.com Intrusion Attempts

Found Easier solution.

I opened Norton, then clicked, settings,Network,Intrusion and Browser Protection, Intrusion Signatures,Configure [+], Then clicked on "signature name" on the toolbar to alphabetize the names, Then found & unchecked "Web Attack: Fake TechSupport Domains 2" so it's not Active. I now have access.

Accepted Solution
Kudos2 Stats

Re: Bing.com Intrusion Attempts

Good solution, but as of 8:02 PM I got an update which solved the problem.

If you run LiveUpdate now, the problem should go away.

Kudos0

Re: Bing.com Intrusion Attempts

Thanks, just ran the update.

Kudos1 Stats

Re: Bing.com Intrusion Attempts

I ran live update and I'm fixed! :)

Kudos0

Re: Bing.com Intrusion Attempts

Thanks @arjunyg.  Confirmed here too.

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: Bing.com Intrusion Attempts

I think removing "Web Attack Fake TechSupport Domains 2" from Intrusion Signatures would leave you exposed from actual malicious sites using that malware.  Would seem much safer to not deactivate that Intrusion Signature and just run Live Update (or run Norton RnR if Live Update doesn't fix it for you). 

Kudos0

Re: Bing.com Intrusion Attempts

New updates resolved my issue.

Kudos0

Re: Bing.com Intrusion Attempts

It was not only bing.com. That was easy as I just changed my start page in Windows 10 IE. I also saw this Norton High Security Message.

attacking computer : 204.79.197.200:443 (probably SSL)

destination address: Desktop : FJNPGTO (192.168.1.177)

trarfic : TCP https

Kudos0

Re: Bing.com Intrusion Attempts

Problem solved with the Norton IPS updates.

Win10Pro | NS | MBAM | Spybot S&D | SpywareBlaster | Acronis Ransomware Protection | KeyScrambler Prem | O&O ShutUp10 | Ghostery | MAXA Cookie Manager | HostsMan | OpenDNS | NordVPN | CCleaner | JV16 PowerTools | PerfectDisk Pro~ www.needGod.com
Kudos0

Re: Bing.com Intrusion Attempts

Comment Promoted To: 

Is this the same as my problem?  It blocks me from Outlook/MSN/Hotmail?

This thread is closed from further comment. Please visit the forum to start a new thread.