Ai Protection Security Alert

[TheLyppardMan]

I received a couple of e-mails this morning (UK time) about my daughter's laptop (see partial screenshot from one of them), which I had just switched on for a few minutes to disable the SSL/TLS protocol filtering option because of the AB-Solution/Pixelserv certificates problem. I wonder what could have caused this? I haven't received any more alerts about it during the 12 hours or so that have elapsed. Any ideas what might have caused this to happen?

 

[agilani]

those e-mailed logs don't say a heck of alot. if you are running on the 384 code base try going into aiprotection network protection and look at the three tabs

http://192.168.1.1/AiProtection_MaliciousSitesBlocking.asp
http://192.168.1.1/AiProtection_IntrusionPreventionSystem.asp
http://192.168.1.1/AiProtection_InfectedDevicePreventBlock.asp

they should provide more insight than just the generic e-mail that gets sent out. I've disabled the e-mails as they are of almost no value.

 

[TheLyppardMan]

Oh yes, I see what you mean - I hadn't discovered that yet. Here's a couple of screenshots.

 

[agilani]

Looks like she is hitting unsavory sites that are trying to do cross site scripting with your router. If it happens again repeatedly, you need to look into it. Either the sites she is going to or the machine itself. Otherwise it may be her clicking on some random link.