Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Aitor_Carazo
Contributor

Formbook Anti-Bot Protection

Hi Checkmates,

 

Since this morning (2020/08/04) at 6:00 GMT  the protection Formbook started to detect/prevent/Trap masively the DNS records msftncsi.com.edgesuite.net, www.msftncsi.com.edgesuite.net and pagead2.googlesyndication.com

I have checked on different Firewalls and the behaibour is the same.

 

Is there any problem with this protection?

 

       -  Formbook.TC.izdlc - msftncsi.com.edgesuite.net

       -  Formbook.TC.ixxwh - pagead2.googlesyndication.com

 

Regards

6 Replies
Bolse
Explorer

Hi,

The same on my side. Lots of logs with Formbook.TC.ixxwh and pagead2.googlesyndication.com .

0 Kudos
NOAHSARK
Explorer

I have problem about Formbook.TC.ixxwh since yesterday. 

0 Kudos
hhainzelmayer
Explorer

Dear Aitor,

Same with us in Antibot.

2020-08-04 09:22:37 t:0x27f8 [f:\ckp\src\ep_antibot\e81_40\src\epabbotchecker\threatcloudbotchecker.cpp(545)] AntiBot.BotChecker.ThreatCloudBotChecker [INFO] ThreatCloudBotChecker::MatchPattern: URL 'http://pagead2.googlesyndication.com:443' is a Bot, name: Formbook.TC.ixxwh

Best regards,

Hans

0 Kudos
PhoneBoy
Admin
Admin

A TAC case is suggested if you haven’t opened one already.

0 Kudos
Tom_42
Explorer

Hi,

We had the same issue, but it disappeared after a signature update of the anti-bot db. I guess both domains were included by error in one update.

Regards

 

0 Kudos
gywenger
Explorer

Hi,

what frequency did you set your device to update the anti-bot & anti-virus?

after getting this false positive, I set mine to every 2 hours.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events