Incoming Traffic from Palo Alto IP Address

[MatthiasBehn]

I have a customer who asked about traffic which he saw on his Firewall.

I looked in firewall logs from several others customers and find the same IP address. It is always a HTTP oder HTTPS connection.

The traffic is coming from the 70.42.131.170. According to several internet sources this IP address belongs to PaloAlto Networks

https://whatismyipaddress.com/ip/70.42.131.170

Because neither the PaloAlto Website or Google could gave me an answer on this and this not really worth a support case, i thought to place this question here.  I think this might be a web crawler or something like this?!

I hope someone can clearfy this

Regards.

[Remo]

Hi @Rags

Matrix! What TAC was trying to say was that they changed the matrix 😉

I would treat this IP as every other external IP. But if there is again something strange coming from there in the future, you directly know where to go/ask.

And: thank you for sharing this information here.