Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
10/30/2016 8:04:26 PM,High,An intrusion attempt by 187.161.228.110 was blocked.,Blocked,No Action Required,Web Attack: CCTV-DVR Remote Code Execution,No Action Required,No Action Required,"187.161.228.110, 48249",68.32.12.219/language/Swedish${IFS}&&echo${IFS}610cker>qt&&tar${IFS}/string.js,"DESKTOP-45DEHP1 (192.168.1.148, 443)",187.161.228.110,"TCP, Port 48249"
Network traffic from <b>68.32.12.219/language/Swedish${IFS}&&echo${IFS}610cker>qt&&tar${IFS}/string.js</b> matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME4\PROGRAM FILES (X86)\SKYPE\PHONE\SKYPE.EXE.  To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.