Who rated this post - Check Point CheckMates

Share your Cyber Security Insights
On-Stage at CPX 2025

Learn More

Simplifying Zero Trust Security
with Infinity Identity!

Watch Now

CheckMates Toolbox Contest 2024
Make Your Submission for a Chance to WIN up to $300 Gift Card!

LEARN MORE!

CheckMates Go:
What's New in R82

LISTEN NOW

If you have DNS Malware Trap enabled, yes.
See this thread for more details: https://community.checkpoint.com/t5/IPS-Anti-Virus-Anti-Bot-Anti/DNS-Malware-trap-DNS-servers/m-p/53...

The IP address in question I believe is the default.
If you look at the whois record for that IP, you can see that it's assigned to Check Point.
It's a black hole (nothing answers there).
If a given host was trying to reach out to something potentially malicious, they will instead reach nothing.

Who rated this post

Employee

Rating date: