https://community.checkpoint.com/t5/General-Topics/CheckPoint-redirect-to-IP-address-62-0-58-94/m-p/63360#M12848 If you have DNS Malware Trap enabled, yes.<BR />See this thread for more details: <A href="https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53485/highlight/true#M1392" target="_blank">https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53485/highlight/true#M1392</A><BR /><BR />The IP address in question I believe is the default.<BR />If you look at the whois record for that IP, you can see that it's assigned to Check Point.<BR />It's a black hole (nothing answers there).<BR />If a given host was trying to reach out to something potentially malicious, they will instead reach nothing. Sun, 22 Sep 2019 16:09:33 GMT PhoneBoy 2019-09-22T16:09:33Z https://community.checkpoint.com/t5/General-Topics/CheckPoint-redirect-to-IP-address-62-0-58-94/m-p/63219#M12818 <P>Hello support,</P><P><SPAN>Please advise us, It is normal event for Check Point or suspicious event? After checkpoint prevent will redirect to IP address 62.0.58.94. What's IP address?<span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="CP.png" style="width: 704px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/2570i7A5D55197BEE4C19/image-size/large?v=v2&amp;px=999" role="button" title="CP.png" alt="CP.png" /></span></SPAN></P><P>&nbsp;</P><P><SPAN>Best Regards,</SPAN></P><P><SPAN><SPAN>Ravoth</SPAN></SPAN></P> Fri, 20 Sep 2019 04:14:09 GMT https://community.checkpoint.com/t5/General-Topics/CheckPoint-redirect-to-IP-address-62-0-58-94/m-p/63219#M12818 Ravoth 2019-09-20T04:14:09Z https://community.checkpoint.com/t5/General-Topics/CheckPoint-redirect-to-IP-address-62-0-58-94/m-p/63360#M12848 If you have DNS Malware Trap enabled, yes.<BR />See this thread for more details: <A href="https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53485/highlight/true#M1392" target="_blank">https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53485/highlight/true#M1392</A><BR /><BR />The IP address in question I believe is the default.<BR />If you look at the whois record for that IP, you can see that it's assigned to Check Point.<BR />It's a black hole (nothing answers there).<BR />If a given host was trying to reach out to something potentially malicious, they will instead reach nothing. Sun, 22 Sep 2019 16:09:33 GMT https://community.checkpoint.com/t5/General-Topics/CheckPoint-redirect-to-IP-address-62-0-58-94/m-p/63360#M12848 PhoneBoy 2019-09-22T16:09:33Z