|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
Re: Suspicious firewall logs |  |
- To: Wong Wai Kit <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
- Subject: Re: Suspicious firewall logs
- From: Ben Timby <[EMAIL PROTECTED]>
- Date: Fri, 01 Aug 2003 13:06:02 -0500
- In-reply-to: <[EMAIL PROTECTED]>
- References: <[EMAIL PROTECTED]>
Wong, what are these machine? Are they servers that could possibly be
compromised, and trying to "call home" or are these workstations where
employees may be running "unauthorized software".
Wong Wai Kit wrote:
Hi,
I had one incidents which is require for your help. My firewall keep prompting some traffiics from internal LAN IPs trying to access this group of destination IPs for "http" service
208.172.144.155
208.172.158.234
208.172.128.132
208.172.192.132
208.172.224.132
208.174.16.132
208.172.13.253
Actually, my question is why my internal LAN(few IPs) keep trying to access this group of destination IP for http service. My LAN if want to go out internet, it should go through our proxy first. It not suppose go out to external directly.
Thanks...
---------------------------------------------------------------------------
----------------------------------------------------------------------------
| |
