I was alerted to an intrusion attempt. I couldn't find any information about the following website. Anyone know who this is?
Attacking Computer: 212.95.55.145, 80
Attacker URL: Removed by Symantec.
Junjun:
Posting possibly malicious urls is not permitted on the forum.
My apologies. I didn't realize that. And didn't know that a link would be automatically generated.
The same thing happened to our computer recently. Same attacking computer and everything. Any help?
Hi Junjun,
The details about the website would not be of much use. It is probably just a server hosting the attack that you were redirected to by some JavaScript inserted into either a legitimate site or an ad. Once your browser lands on the malicious site a toolkit looks for unpatched vulnerabilities in your installed software programs, such as Adobe Reader or Java, that can be used to install malware with no action on your part. Norton recognized the attack and blocked it. Beyond that, there is really not much more to know or anything further that you can do.
I too was notified by Norton of a similar attack identified as : Browser Fingerprinting 3 and traced the attacking IP to asia. I perfomred a full NIS 2012 scan, along with a Microsoft Security scan followed by a scan from Fprotect and one by Kaspersky all of which found NO software on my system. Today, I also ran a Norton Power Erase scan and found nothing as well.
I was worried mostly because this week my master email and the two other email accounts on my cable account had apparently been hijacked and was suspended by my ISP for sending spam mail.
To say that I am pleased with Nortons performance is speaking mildly.