Showing results for 
Search instead for 
Did you mean: 
Level 7

internet-wide health checks


I seen a triggered correlation rule on my SIEM, when I further do an investigation, it seems that some company overseas is conducting a internet-wide health check. Are this  a valid thing to do?. The IP that I get when I check it in a blacklist checking site, I've got a hit 9/95 status, meaning there is 9 engine out of 95 that says the IP is blacklisted.

0 Kudos