Hi
Cant find what this is: (sid=38767)
It starte yesterday, and getting 20-30 pr. day to 2-5 deferent machines(Mac) and ports and from deferent IPs.
Can anybody help?
Details about the intrusion alert:
Message........: INDICATOR-COMPROMISE potential abuse of originating page privileges by new tab
Details........: www.snort.org/search
Time...........: 2016-08-03 10:36:16
Packet dropped.: no
Priority.......: high
Classification.: Potential Corporate Privacy Violation
IP protocol....: 6 (TCP)
Source IP address: 93.184.220.239
Source port: 80 (http)
Destination IP address: 10.30.11.22
Destination port: 50166
This thread was automatically locked due to age.