About dmcalbosa88

dmcalbosa88 · 02-15-2012

Hi, today I've been noticing that a new signature 41846/1 started matching on differents IPs belonging to Adobe Systems Inc. or ThePlanet.com Internet Services, Inc.Here I post some event detected by the IPS:SeverityDateTimeSig. NameSig. IDAttacker ...

dmcalbosa88 · 02-17-2012

Yes. I've noticed it.Problem is now solved, with the signature retired.thanks

dmcalbosa88 · 02-15-2012

Thanks, Jason, for you post.In my case, there are some pick hours in which this signatures fires, so I think I'll monitor it a couple hours more, and if it keeps on firing I'll just have to disable it.

dmcalbosa88 · 02-15-2012

You're right, we have the same (or similar) issue.I haven't disabled it yet, because the signature is just dropping the packets (because of the configuration we have).Anyway, I do want to know if this is a false positive or not..In case it keeps mat...

dmcalbosa88 · 02-15-2012

Yes, I've noticed a lot of matches of that siganture.The difference in my case is that Attacker IP always is our web proxy, and targets are in most cases Adobe's sites or sites belonging to ThePlanet.com Internet Services, Inc.

Member Since	‎02-15-2012 06:08 AM
Date Last Visited	‎08-18-2017 03:56 AM
Posts	5

User Statistics

User Activity

Signature 41846/1 matches on Adobe Site

Signature 41846/1 matches on Adobe Site

Signature 41846/1 matches on Adobe Site

Signature 41846/1 matches on Adobe Site

Anyone having issues with Signature 41846/1?