HUGOK 0 Posted September 24 Share Posted September 24 The firewall reports in the threat filter the URL Phishing justid.io to two target addresses 3.225.57.215 3.229.62.193 computer scanned the latest Eset Endoint Security did not detect anything, only WireShark actually shows connection attempts to these addresses. How to solve the problem. Quote Link to comment Share on other sites More sharing options...
Administrators Marcos 5,290 Posted September 24 Administrators Share Posted September 24 Please provide logs collected with ESET Log Collector. Quote Link to comment Share on other sites More sharing options...
HUGOK 0 Posted September 24 Author Share Posted September 24 ees_logs.zip Quote Link to comment Share on other sites More sharing options...
itman 1,755 Posted September 24 Share Posted September 24 3 hours ago, HUGOK said: two target addresses 3.225.57.215 3.229.62.193 Those IP addresses are associated with Proxy-registered route object for Amazon Data Services NoVa (ADSN-1). As far as justid.io goes, VirusTotal only shows IP address, 136.243.70.185, associated with it. Also, this domain when entered into Firefox won't resolve at all. Accessing the domain via Google search result yields; Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.