topic Re: IP not found in Computers in Endpoint Security

IP not found in Computers

kostasthedelegate — Fri, 15 May 2020 10:05:31 GMT

Hello,

I have a problem with spam mails.

I have identified the malware (tofsee). I search it in amp console and it shows some files.

When I search one of them in the section Network Activity -> TCP/IP Streams I see an IP address as a source.

What is this IP? because it is not of my network

When I search for the Internal IP on the computers I do not see any results

Any hints?

Thanks and regards,

Konstantinos

Re: IP not found in Computers

balaji.bandi — Fri, 15 May 2020 12:07:27 GMT

Can you post the Logs to look and see what you were referring.

Re: IP not found in Computers

kostasthedelegate — Mon, 18 May 2020 04:52:33 GMT

Hello,

To which logs are you referring?

Konstantinos

Re: IP not found in Computers

balaji.bandi — Mon, 18 May 2020 21:21:49 GMT

"Network Activity -> TCP/IP Streams I see an IP address as a source. " - do you have this TCP Stream ?

Re: IP not found in Computers

kostasthedelegate — Tue, 19 May 2020 06:11:27 GMT

Hello,

As I understand the Network Activity -> TCP/IP Streams I see are not relevant to my own network, but they are general.
So I do not think they help much.
I will try a different approach to find the cause of the problem.

Regards,
Konstantinos