Is anyone else seeing ATP alerts for the IP 192.229.211.108? It looks like it's a Digicert server, so I'm hoping it's a false alarm.
Steve
I've verified that we've been using the same URLs for a year and the same IP since Feb 27. If we're malwared, it's pretty established.
Digging into the actual log file - all the ATP alerts include the IP you referenced. 192.229.211.108