Sophos Firewall

Discussions Help investigating ATP

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 2 replies
Subscribers 27 subscribers
Views 4278 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help investigating ATP

l0rdraiden over 7 years ago

Can someone guide me on how to find the root cause of these ATP?

192.168.1.200 is a server with DuckDNS, plex, among other things

the 101 IP is my personal computer.

I can't find any information about this URL on google. What could I do?

I'm using Quad 9 DNS. 9.9.9.9

Thanks in advance

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 7 years ago

Hi,

try changing DNS providers, looks bit like your DNS is compromised.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 7 years ago

Hi,

try changing DNS providers, looks bit like your DNS is compromised.

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 l0rdraiden over 7 years ago in reply to rfcat_vk

I'm using Quad9 https://www.quad9.net/ I doubt they have a problem like this.

I think it's either a FP or it's related with this docker container I'm running

hub.docker.com/.../
Cancel
Vote Up 0 Vote Down

Cancel