This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Botnet command and control traffic detected

Hi Sophos team,

Just today I've noticed something in my Sophos UTM 9 Control Panel.

I see this message.

Upon clicking on this message it takes me to the "Advanced Protection Statistics" Page. Please see the screenshots below.

The IP address seen in the screenshot above 192.168.1.10 is my Active Directory, DNS, DHCP Server.

Does it mean that my system is compromised, or is it something that Sophos has detected and stopped the intrusion?

Can you please help me in resolving this?

This thread was automatically locked due to age.

Parents

Reply

Children

No Data