I am getting an Intrusion Attempt displayed but the URL is the URL of the site that is being attacked! Also, I only get Intrusion Attempts listed when I go to the site using IE 9. FF and Chrome don't cause Norton to report anything.
BTW, I also get Intrusion Attempts from other URL's when I go to this site---about 50% of the time!
Ideas?
Are you selectively blocking JavaScript in Firefox and Chrome? That might be one reason why you don't get attacked using those browsers. IPS alerts are very rarely false positives, so if you are seeing alerts, Norton is almost certainly responding to a real threat. You haven't provided a lot of information about the specifics of the alert, such as the site and the threat being detected.
Thanks for the quick response. I have deleted the Norton details so I can't send a copy of it to you. The site is www(dot)performancemotorsportsnews(dot)com and Norton told me that it was this same URL (www(dot)performance...) that was causing the intrusion! BUT, this is not always the case. Most of the time it is other sites. Now, here is another piece of info: If I close IE and open it again and go to 'performancemotor...' I will NOT get the intrusion error. And, I won't see an intrusion error for maybe a day or two, but then I will get it again; maybe the same URL and maybe another.
???????????????
[Edit : Removed Hyperlink to conform with the Participation Guidelines and Terms of Service.]
Web attacks are often rigged not to launch again when revisited. It is one of the methods attackers use to help evade detection.