Hi, Poly Team, we received an alert that detected 1 of our Polycom device (10.11.30.11) is trying to connected to (198.23.200.241) which is consider blacklist IP. This connectivity is triggered 1 of the alarm
Details as per below.
Case Details: |
|
Alarm Name | COVID-19_Attack |
Case ID | 8286 |
Alarm Date & Time (SL Time – GMT +5.5) | 04/26/2021 8:38:41 pm |
IP Address (Origin) | 10.11.30.11 |
IP Address (Destination) | 198.23.200.241 |
Port (origin) | 22 |
Direction | Outbound |
Event Count | 1 |
System software and serial no details as per attached.
Kindly advise us on what troubleshooting that we need.
Thanks.