2010:06:04-09:43:59 xx-*** snort[5410]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="WEB-CLIENT Portable Executable binary file transfer" group="320" srcip="94.245.71.173" dstip="192.168.1.58" proto="6" srcport="80" dstport="2109" sid="15306" class="Misc activity" priority="3" generator="1" msgid="0"
2010:06:04-09:44:20 xx-*** snort[5410]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="WEB-CLIENT Portable Executable binary file transfer" group="320" srcip="94.245.71.175" dstip="192.168.1.11" proto="6" srcport="80" dstport="2091" sid="15306" class="Misc activity" priority="3" generator="1" msgid="0"
2010:06:04-09:44:37 xx-*** snort[5410]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="WEB-CLIENT Portable Executable binary file transfer" group="320" srcip="94.245.71.175" dstip="192.168.1.3" proto="6" srcport="80" dstport="2525" sid="15306" class="Misc activity" priority="3" generator="1" msgid="0"
The same goes for download.com
Any ideas ? Any fixes ?
Pin
This thread was automatically locked due to age.
