Still getting malicious attacks from the site...

[Surfnut]

Malwarebytes doesn't give me a log for the attack just yet but I am getting regular attacks that are being blocked. Wish I could be more helpful: Just wanted you to be aware we have an issue again. If I can get a log dug up I'll post it immediately.

 

[Surfnut]

Found the log I needed...Posting the portion that's relevant

2012/03/04 20:16:00 -0800 GLOUGIE-PC glougie MESSAGE Database already up-to-date
2012/03/04 20:19:58 -0800 GLOUGIE-PC glougie IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 49328, Process: firefox.exe)
2012/03/04 20:19:58 -0800 GLOUGIE-PC glougie IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 49329, Process: firefox.exe)
2012/03/04 20:20:46 -0800 GLOUGIE-PC glougie IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 49333, Process: firefox.exe)
2012/03/04 20:20:46 -0800 GLOUGIE-PC glougie IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 49334, Process: firefox.exe)
2012/03/04 20:21:00 -0800 GLOUGIE-PC glougie MESSAGE Executing scheduled update: Realtime
2012/03/04 20:21:00 -0800 GLOUGIE-PC glougie MESSAGE Database already up-to-date
2012/03/04 20:21:03 -0800 GLOUGIE-PC glougie IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 49341, Process: firefox.exe)
2012/03/04 20:21:03 -0800 GLOUGIE-PC glougie IP-BLOCK 95.215.0.171 (Type: outgoing, Port: 49342, Process: firefox.exe)
2012/03/04 20:26:00 -0800 GLOUGIE-PC glougie MESSAGE Executing scheduled update: Realtime
2012/03/04 20:26:00 -0800 GLOUGIE-PC glougie MESSAGE Database already up-to-date

 

[anjl97]

I get the same thing if I use the forums link on the left, but not the one at the top.

 

[DaveK]

While I can not speak for RS, I have noticed that the web site does make some requests outside the RS domain.

If you want to prevent that, you can install Adblock Plus on Firefox and use it to block these items. Other useful extensions are NoScript and Request Policy. I use all three extension and the do keep a lot of garbage off the system.

I suspect that your seeing a false positive rather than a true attack. If your program permits it, you could make an exception for RS.