SEP SBE Alerts email content

Archive
1

Hi,

I have SEP SBE antyvirus, i get alerts email from it. example ([hidden] - i just hidden contect):

A high-risk intrusion was detected on [hidden] within group [hidden] on 5/6/2019 10:21:21 AM.

IPS Alert Name
Web Attack: Fake Tech Support Website 295

Status
Blocked

Attack Signature
N/A

Targeted Application
N/A

Attacking IP
[hidden]

Targeted IP
[hidden]

Targeted Port Number
[hidden]

Targeted Host Name
[hidden]

i have question about "Attacking IP" - How norton know the attaking ip? in my alerts "attacking ip" is ip the domain controler computer in cloud.

2

You are using a Symantec product. This forum is for Norton line of products. You need to post your question in the Symantec Connect Forum.    https://www.symantec.com/connect/product/endpoint-protection