Correction ...not port, there is no port180951
Does Sophos UTM use anything from
amzn.dmgr:E***************************x:9kc*********:180951
I find this when I do a scan of my network and I find an unused 10.10.25.7 that it uses on my network I can get ping back from it. I assume it is from Amazon Cloud...but is it Sophos based or is it malicious?
I also find 10.10.25.7 in my logs dropped source hosts dropped 179 packets in IDS pie chart area. Then in top attackers it is #1 with 122 packets at 55%
.