Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 4938 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bot/Command and Control Detected

UserUser1

Hello :)

 

My Sophos UTM 9 with advanced threat protection have detected a bot in my lan but i dont know what it is

 

 

This ip is my mail server (postfix) and i dont know this domain, he as no information in google

 

Have you an idea of what I could look at?

I said that this is not the first time that this detection occurs and always with the same domain

 

Sorry for my english..



This thread was automatically locked due to age.
Parents
  • 0

    HI UserUser1, 

    If you are unaware of the website and yet your system is communicating with the Domain "maabm.com" then you would need to scan your system with any virus removal tool eg . AV and Endpoints. You may download the free tools provided by Sophos for Malware and Virus  via the link . Furthermore , if you think the website is trustworthy then you may submit a False positive if needed . We shall review the URL and update you then. To Submit False Positive please go to this URL.

     

    Hope this would resolve you issue .

    Thanks and Regards

    Aditya Patel | Network and Security Engineer.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Reply
  • 0

    HI UserUser1, 

    If you are unaware of the website and yet your system is communicating with the Domain "maabm.com" then you would need to scan your system with any virus removal tool eg . AV and Endpoints. You may download the free tools provided by Sophos for Malware and Virus  via the link . Furthermore , if you think the website is trustworthy then you may submit a False positive if needed . We shall review the URL and update you then. To Submit False Positive please go to this URL.

     

    Hope this would resolve you issue .

    Thanks and Regards

    Aditya Patel | Network and Security Engineer.

    Regards,

    Aditya Patel
    Global Escalation Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML