CheckPoint redirect to IP address 62.0.58.94

[Ravoth]

Hello support,

Please advise us, It is normal event for Check Point or suspicious event? After checkpoint prevent will redirect to IP address 62.0.58.94. What's IP address?

Best Regards,

Ravoth

[PhoneBoy]

If you have DNS Malware Trap enabled, yes.
See this thread for more details: https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53...

The IP address in question I believe is the default.
If you look at the whois record for that IP, you can see that it's assigned to Check Point.
It's a black hole (nothing answers there).
If a given host was trying to reach out to something potentially malicious, they will instead reach nothing.