The other day I was on an iffy website. I noticed the Norton “Intrusion prevented” go off a few times but still stayed on the site for a few minutes thinking Norton is protecting me. I wish I hadn’t done that.
When I checked the logs later apparently there was a buildup of like 30-50 intrusions prevented within the five minutes or so I was on the site. It displayed the same IP address and attacker website for each intrusion except one which listed a different URL than the "Display Format" (Not pictured). Since then I’ve had nothing suspicious like that in the logs. But is it possible with this flood of attacks something may have gotten through or whatever that isn’t being detected? A few days later there were a couple more intrusions prevented from a near identical IP, minus one digit, and a bit of a different domain (2nd pic below). This could be because I accidentally landed on a similar or the same site.
Besides this there is nothing suspicious in the logs, or recurring. Just from when I was on the bad sites.
But.. Last night when doing a Google search I received the “Suspicious traffic” captcha. It was definitely Google.com and not a fake. I had just installed the Norton safe web extension so I’m really hoping there was a glitch there rather than something related to this. Norton, Malware Bytes and SuperAntiSpyware scans come up clean. I've never run a VPN. I’m really stressing about this so any insights much appreciated.