Formbook Anti-Bot Protection

[Aitor_Carazo]

Hi Checkmates,

Since this morning (2020/08/04) at 6:00 GMT  the protection Formbook started to detect/prevent/Trap masively the DNS records msftncsi.com.edgesuite.net, www.msftncsi.com.edgesuite.net and pagead2.googlesyndication.com

I have checked on different Firewalls and the behaibour is the same.

Is there any problem with this protection?

       -  Formbook.TC.izdlc - msftncsi.com.edgesuite.net

       -  Formbook.TC.ixxwh - pagead2.googlesyndication.com

Regards

[Bolse]

Hi,

The same on my side. Lots of logs with Formbook.TC.ixxwh and pagead2.googlesyndication.com .

[NOAHSARK]

I have problem about Formbook.TC.ixxwh since yesterday. 

[hhainzelmayer]

Dear Aitor,

Same with us in Antibot.

2020-08-04 09:22:37 t:0x27f8 [f:\ckp\src\ep_antibot\e81_40\src\epabbotchecker\threatcloudbotchecker.cpp(545)] AntiBot.BotChecker.ThreatCloudBotChecker [INFO] ThreatCloudBotChecker::MatchPattern: URL 'http://pagead2.googlesyndication.com:443' is a Bot, name: Formbook.TC.ixxwh

Best regards,

Hans

[PhoneBoy]

A TAC case is suggested if you haven’t opened one already.

[Tom_42]

Hi,

We had the same issue, but it disappeared after a signature update of the anti-bot db. I guess both domains were included by error in one update.

Regards

[gywenger]

Hi,

what frequency did you set your device to update the anti-bot & anti-virus?

after getting this false positive, I set mine to every 2 hours.