[Snort-users] Oh no! Snort tells me I visited a compromised website!

Teo En Ming teo.en.ming at ...11827...
Mon Apr 14 16:49:09 EDT 2014


Snort tells me I visited a compromised website on my Windows computer!
Norton Internet Security 2014 didn't warn me about the compromised website!

Here are the snort alerts:

04/15-03:19:25.460308  [**] [1:24884:2] MALWARE-OTHER Compromised website
response - leads to Exploit Kit [**] [Classification: Misc activity]
[Priority: 3] {TCP} 204.12.217.19:80 -> 192.168.1.2:24740
04/15-03:19:25.460308  [**] [1:24883:2] MALWARE-OTHER Compromised website
response - leads to Exploit Kit [**] [Classification: Misc activity]
[Priority: 3] {TCP} 204.12.217.19:80 -> 192.168.1.2:24740
04/15-03:19:25.565111  [**] [1:24899:3] MALWARE-OTHER Compromised Website
response - leads to Exploit Kit [**] [Classification: Misc activity]
[Priority: 3] {TCP} 204.12.217.19:80 -> 192.168.1.2:24740

What should I do?

Regards,

Teo En Ming
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140415/16f7015b/attachment.html>


More information about the Snort-users mailing list