Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 6 subscribers
  • Views 1633 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SophosAutoUpdate connects to strange places

Dereck

Hi

I´m running Sophos Anti-Virus for Mac Home Edition on OS X Lion.

I recently installed Little Snitch to monitor my network traffic. Right after that I noticed that SophosAutoUpdate connects to really strange addresses. Network monitors connection history shows that SophosAutoUpdate has connected to b.scorecardresearch.com and o.aolcdn.com. These addresses seem to have something to do with internet tracking, scary.

Does anyone have an idea what´s going on?

Has anyone else noticed that SophosAutoUpdate connects to these places?

Should I be worried?

Thank you in advance.

:1005531


This thread was automatically locked due to age.
Parents
  • 0

    Hi Christian

    Thank you for your answer, I appreciate it.

    I´m not very familiar with these things but I´m interested, so I´d like to ask two clarifying questions:

    - Where and how can you check to what IP addresses names resolve?

    - The IP addresses that SophosAutoUpdate connects are the same while updating although hostname is something weird (e.g.. static.ak.fbcdn.net not the usual es-web-4.sophos.com). Does this mean that Little Snitch just interprets IP-addresses hostnames wrong?

    Thank you.

    :1005535
Reply
  • 0

    Hi Christian

    Thank you for your answer, I appreciate it.

    I´m not very familiar with these things but I´m interested, so I´d like to ask two clarifying questions:

    - Where and how can you check to what IP addresses names resolve?

    - The IP addresses that SophosAutoUpdate connects are the same while updating although hostname is something weird (e.g.. static.ak.fbcdn.net not the usual es-web-4.sophos.com). Does this mean that Little Snitch just interprets IP-addresses hostnames wrong?

    Thank you.

    :1005535
Children
No Data