9[.]au[.]download[.]windowsupdate[.]com

Soc Reports 1

Hello,

We received an alarm related to this URL for insecure library loading and want to know if this is a legitimate Microsoft URL that is still in use.

Thank you!

Rita Hu -MSFT 9,626 Reputation points

2021-06-23T01:29:06.513+00:00

@Soc Reports
Thanks for your posting on Q&A.

Could you mind providing the screenshot of the alarm for reference?
Juan Sobrado - MSFT 401 Reputation points Microsoft Employee

2021-06-23T04:52:05.51+00:00

Hello @Soc Reports

In the following document you will find all the URL's related to WU and other MS services:

https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#29-windows-update

Regards,

Juan Sobrado
Rita Hu -MSFT 9,626 Reputation points

2021-06-29T02:19:58.367+00:00

@Soc Reports
Is there any updates of the case? Whether the issue has been resolved or not. Please remember to inform me if there are any updates of the case.

Thanks for your time and have a nice day :)

1 answer

E Tam 1 Reputation point

2021-10-14T19:21:09.823+00:00

I am also coming across this issue, I have a RAX120 NetGear router and both the logs and the notification show the alarm regarding attempted access to a block website, however, the domain specified is not included in any policies or rules. See message recorded in the logs below:

[email sent to: email_account Thursday, October 14, 2021 14:06:49
[site blocked: au.download.windowsupdate.com] from source 10.0.0.12, Thursday, October 14, 2021 14:06:41
Please sign in to rate this answer.

0 comments No comments
Sign in to comment