My Firewalla Gold Flagged nexthop.onl?

Comments

7 comments

  • Avatar
    Firewalla

    Can you send a screenshot of this? I am not understanding "flagged" part, is it an alarm? port scan?

    0
    Comment actions Permalink
  • Avatar
    DanS

    It was an Alarm.   I blocked future nexthop.onl activity.  

    0
    Comment actions Permalink
  • Avatar
    DanS

    Additional info is ExpressVPN uses IP addresses that start with 149 so that is why I thought it might be ExpressVPN connection.   But support said they don't use the domain name.  I suppose Support person could have been wrong.  

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    If you click on "Ask FireAI" does it explain to you what's going on?

    0
    Comment actions Permalink
  • Avatar
    DanS

    Ask FireAI:

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    My suggestion is to block that domain and see if anything useful is broken. (the domain is a parked domain ... meaning, it should not be active, unless the parked IP maps to many domains, then you get a false positive. this happens too)

    I also hide the private conversation you had with your VPN

    0
    Comment actions Permalink
  • Avatar
    DanS

    No problems since blocked.   ExpressVPN must have gummed something up.  Thanks!

    0
    Comment actions Permalink

Please sign in to leave a comment.