Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Ravoth
Participant

CheckPoint redirect to IP address 62.0.58.94

Hello support,

Please advise us, It is normal event for Check Point or suspicious event? After checkpoint prevent will redirect to IP address 62.0.58.94. What's IP address?CP.png

 

Best Regards,

Ravoth

Ravoth
0 Kudos
1 Reply
PhoneBoy
Admin
Admin

If you have DNS Malware Trap enabled, yes.
See this thread for more details: https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53...

The IP address in question I believe is the default.
If you look at the whois record for that IP, you can see that it's assigned to Check Point.
It's a black hole (nothing answers there).
If a given host was trying to reach out to something potentially malicious, they will instead reach nothing.
(1)

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events