Microsoft Threat Intelligence Analytics Alerts

jakem2046 I haven't seen this alert, however as the IP is part of a CDN network, it is highly unlikely that you would be able to correlate it as true positive IoC. Checking:

• Microsoft Defender Threat Intelligence (approx. 1.000 resolutions the last 14 days)
• Reverse IP lookup for 69.16.175.42 - SecurityTrails (over 10.000 resolutions in Security Trails history)

As it is highly unlikely that one would block CloudFlare for example, I would look into the DNS requests made to make sure no suspicious domain was requested and dismiss the alerts as false positive.

If I have answered your question, please mark your post as Solved

If you like my response, please consider giving it a like