Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
1/22/2014 9:30:11 AM,High,An intrusion attempt by www.phuot.vn was blocked.,Blocked,No Action Required,Web Attack : Malvertisement Website Redirect,No Action Required,No Action Required,
"www.phuot.vn (103.28.37.44, 80)",ads.phuot.vn/openx/www/delivery/ajs.php?zoneid=4&block=1&cb=89894441185&charset=UTF-8&loc=https://www.phuot.vn/forum.php,"MOGULBOT (192.168.1.142, 3963)",103.28.37.44 (103.28.37.44),"TCP, www-http"
Network traffic from <b>ads.phuot.vn/openx/www/delivery/ajs.php?zoneid=4&block=1&cb=89894441185&charset=UTF-8&loc=https://www.phuot.vn/forum.php</b> matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE. To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.