This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ATP C2/Generic-A Cloudflare 188.114.97.3 ?

Guten Abend,

ist hier etwas dran weshalb Sophos die IP 188.114.97.3 als Malicious einstuft oder wieder ein FalsePositive?

Unser ATP der UTM9 meldet das seit Freitag bei DNS Anfragen ...

 



This thread was automatically locked due to age.

Top Replies

  • HI all, we can confirm that this is a false positive and are working to publish updates to fix this issue. This is identified under LAB-78247. Thank you for your understanding as we actively work on this issue.

    Jump to answer
Parents
  • Die XGs sind ein wenig gesprächiger, scheint mal wieder irgendein Edge-Feature zu sein. Eventuell die automatisch angezeigten Nachrichten?
    Microsoft selbst wird ja vermutlich eher nix bei Cloudflare hosten...

    Regards,

    Kevin

    Sophos CE/CA (XG, UTM, Central Endpoint)
    Gold Partner

  • Do the following: 
    Filter in logviewer for the IP (use only the string search on the top right site). 
    Then move to the detailed view and check, which URL was opened. 

    __________________________________________________________________________________________________________________

Reply
  • Do the following: 
    Filter in logviewer for the IP (use only the string search on the top right site). 
    Then move to the detailed view and check, which URL was opened. 

    __________________________________________________________________________________________________________________

Children