Malwarebytes on Domain Controller keeps blocking a web address

[sh73312]

I have a Domain Controller with Malwarebytes Anti Malware on it, and as of late I keep getting incoming port 123 svchost.exe blocked web site alerts.    How should I trouble shoot this?

[Rsullinger]

Hello Sh73312,

 

Do you mind getting the alert log so I can see what the block was? You can find it by collecting the logs from this directory:

C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\logs

If it is incoming on that port, it could be someone is trying to ping addresses to see if they are open. However, I want to see if what the IP address is to get a better idea as the source.