Microsft update port 80, seen destination of network addresses - 208.111.176.128, 208.111.176.0 , 208.111.176.64 etc..
What is this? Is this legit? Seems like a trojan from this find. Or ms update ?? but to network addresses?? doesnt make sense..
its seen as threat flood in Palo Alto firewall. hitting packet buffer protection.
Posted Nov 12, 2024, 8:09 PM UTC
11