Discussions ATP Triggering on DNS requests for 104.18.20.226

Community Chat requires membership for participation - click to join

Thread Info

State Verified Answer
Locked Locked
Replies 3 replies
Subscribers 21 subscribers
Views 2263 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ATP Triggering on DNS requests for 104.18.20.226

D_Valinske over 3 years ago

Date: 05/06/2021

Product: SG UTM

Firmware: 9.705-3

We are having large volumes of ATP hits on DNS requests for 104.18.20.226 with a destination IP of 198.41.223.131. Is this another false positive?

Thanks,

D.

This thread was automatically locked due to age.

Top Replies

emmosophos over 3 years ago +3 verified

Hello there, Thank you for reaching out. This was identified for Labs as a False Positive, they have whitelisted the IP. Regards,

Parents

+1 emmosophos over 3 years ago

Hello there,

Thank you for reaching out.

This was identified for Labs as a False Positive, they have whitelisted the IP.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +3 Vote Down

Cancel

Reply

+1 emmosophos over 3 years ago

Hello there,

Thank you for reaching out.

This was identified for Labs as a False Positive, they have whitelisted the IP.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up +3 Vote Down

Cancel

Children

0 D_Valinske over 3 years ago in reply to emmosophos

Thanks for the update Emmanuel.
Cancel
Vote Up 0 Vote Down

Cancel