Where do I report false positive for Reputation Filter

Options
Alanl
Alanl image  Freshman Member
First Comment Friend Collector Eighth Anniversary
in Security
A local restaurant made its' way on the false positive list.  The IP of the restaurant is:
198.71.232.3
https://hamachichicago.com/

I have manually allowed it for my site but for some reason their web site is coming up as a botnet under IP reputation however URL list is categorizing it correct as restaurant.

Thank you,  

Accepted Solution

  • Zyxel_Emily
    Zyxel_Emily image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    Options
    Hi @Alanl,
    We will evaluate if it is appropriate to add this IP to whitelist in the next signature version and update the status to you later.

All Replies

  • Zyxel_Emily
    Zyxel_Emily image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Answer ✓
    Options
    Hi @Alanl,
    We will evaluate if it is appropriate to add this IP to whitelist in the next signature version and update the status to you later.
  • Zyxel_Emily
    Zyxel_Emily image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    Options
    Hi @Alanl,
    We add this IP address to white list. Please update the signature version of IP Reputation to 1.0.0.20220906.0. 

  • racassel
    racassel image  Freshman Member
    First Comment
    Options
    Is there a website to report a false positive more easily, like urlvoid.com,cwatch.com,sucuri.net or just post all requests in this public forum?  I checked a few for my site, and only McAffee shows it blacklisted.
  • Zyxel_Kevin
    Zyxel_Kevin image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
    Options
    Hi @racassel, 
    I can see all sites have correct categories now. 
    Please use the link  to report the false positive and choose to the correct categories. 
    Thank you
    Kevin
  • RickyC
    RickyC image  Freshman Member
    First Comment Friend Collector Sixth Anniversary
    Options

    getting false positive reputation for supplier.io. The link previously provided links to McAffee and requires a log-in to update. I recall a different site given to me previously, some other third party company threat - something.com……Do you have an updated link for reporting categories?

  • Zyxel_Melen
    Zyxel_Melen image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @RickyC

    You don't need to login for submit a review. Please follow the below steps and you will see the success result.

    image.png image.png
    Zyxel Melen


  • RickyC
    RickyC image  Freshman Member
    First Comment Friend Collector Sixth Anniversary
    Options

    FYI, and My I, the previously here:

    Trellix - https://trustedsource.org/

  • Zyxel_USG_User
    Zyxel_USG_User image  Ally Member
    First Comment First Answer Friend Collector Second Anniversary
    Options

    Quick question. Did you check their website if it presents threats? I've encountered many SMEs and restaurants and companies who did not even know that parts of their infrastructure were hijacked and parts of botnets- and that for years.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）