They are reported as
https tidserv request
and essentially this description appears:
"Network traffic from 194.28.112.6 matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME1\WINDOWS\SYSTEM32\SVCHOST.EXE. To stop being notified for this type of traffic, in the Actions panel, click Stop Notifying Me."
just as I am posting this another block came in with everything the same except the second one was identified from 91.212.226.5, 443
An intrusion attempt by n16fa53.com was blocked
https Tidserv Request 2
and a third from
194.28.112.6, 443
01n02n4cx00.cc
Even though Norton says it is being blocked, I want to remove this completely
Please help!