problem solved,
a false ips positive, after a minute the http traffic stopped because of this ips signature
Microsoft Internet Explorer FTP response parsing memory corruption (MS07-016)
i've just added an exclusion and...
cpstat antimalware -f update_status
AB Update status: new
AB Update description: Gateway was updated with database version: 2302161033. Package date: Thu Feb 16 09:00:00 2023
.
AB Next update description: The next update will be run as scheduled.
AB DB version: 2302161033
AV Update status:
AV Update description:
AV Next update description:
AV DB version: