DNS Activity

Here is a question for you ladies and gents. You have tooling setup that analyzes server anomalies. The tool advises that the DNS server queried to get a website who's IP is on the AbuseIP database. How much time are you going to use investigating? This could be the result of an end point browsing a site where a picture is embedded that is stored on a site with a malicious IP or it could be signs of something worse. …

browsing cybersecurity database dns dns server end ladies point question result server tool tooling website