Skip to main content
roblenoir
New Member
July 9, 2015
Question

Top session widget : unknown ip

  • July 9, 2015
  • 4 replies
  • 4448 views

Fortigate 60C

Firmware version : v4.0,build5918,120831 (MR2)

 

Hello. My company is equipped with a firewall / UTM Fortigate 60C. In the widget " top session ", i see unknown IP addresses that have the most sessions currently open: Protocol = TCP Source address = 91.213.175.66 or 85.236.105.30 or others unknown IP. Source port = 64890 (a dynamic port - other exemple: 648545) Destination address = "our public IP" Destination port = 443 Somebody could light me on what it means. To what corresponds this IP 91.213.175.66 or this one 85.236.105.30 ? Thank you.

    4 replies

    gschmitt
    New Member
    July 10, 2015

    roblenoir wrote:

     

    To what corresponds this IP 91.213.175.66 or this one 85.236.105.30 ?

    Hit Windows Key + R > type CMD and hit enter

    Type the following "ping -a 91.213.175.66" and hit enter

    This IP resolves to srv-u66.antiddos.biz

     

    85.236.105.30 resolves to frae329.multiplay.co.uk

    roblenoir
    roblenoirAuthor
    New Member
    July 10, 2015

    Thanks for your anwer.

    I saw what this ip corresponding to but, do i have to worry about this ?

    gschmitt
    New Member
    July 10, 2015

    roblenoir wrote:

    Thanks for your anwer.

    I saw what this ip corresponding to but, do i have to worry about this ?

    Probably not

     

    the dynamic source port is normal for http/https traffic

    roblenoir
    roblenoirAuthor
    New Member
    July 13, 2015

    OK, thank you.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT