Greetings All,

I have a question about the Advanced Threat Analytics.  I see in my Alerts a lot of "Malicious Source(s) detected" and yet the IP addresses seem to be benign.  Case in point is I see the below alert a lot but it looks like a false positive.  How is this score derived and is there a way to find out why this IP has such a bad reputation score?

filterlog : Malicious Source(s) detected : 192.241.198.139 Log Message : 8,,,1000104533,mvneta2,match,block,in,4,0x0,,247,54321,0,none,6,tcp,40,192.241.198.139,192.168.1.250,40872,443,0,S,3116141112,,65535,,

GEO INfo: