Skip to main content
roblenoir
roblenoir
New Member
July 9, 2015
Question

Top session widget : unknown ip

  • July 9, 2015
  • 3 replies
  • 4429 views

Fortigate 60C

Firmware version : v4.0,build5918,120831 (MR2)

 

Hello. My company is equipped with a firewall / UTM Fortigate 60C. In the widget " top session ", i see unknown IP addresses that have the most sessions currently open: Protocol = TCP Source address = 91.213.175.66 or 85.236.105.30 or others unknown IP. Source port = 64890 (a dynamic port - other exemple: 648545) Destination address = "our public IP" Destination port = 443 Somebody could light me on what it means. To what corresponds this IP 91.213.175.66 or this one 85.236.105.30 ? Thank you.

    3 replies

    gschmitt
    gschmitt
    New Member
    July 10, 2015

    roblenoir wrote:

     

    To what corresponds this IP 91.213.175.66 or this one 85.236.105.30 ?

    Hit Windows Key + R > type CMD and hit enter

    Type the following "ping -a 91.213.175.66" and hit enter

    This IP resolves to srv-u66.antiddos.biz

     

    85.236.105.30 resolves to frae329.multiplay.co.uk

    roblenoir
    roblenoirAuthor
    New Member
    July 10, 2015

    Thanks for your anwer.

    I saw what this ip corresponding to but, do i have to worry about this ?

    gschmitt
    gschmitt
    New Member
    July 10, 2015

    roblenoir wrote:

    Thanks for your anwer.

    I saw what this ip corresponding to but, do i have to worry about this ?

    Probably not

     

    the dynamic source port is normal for http/https traffic

    roblenoir
    roblenoirAuthor
    New Member
    July 13, 2015

    OK, thank you.

    Terms & ConditionsAccessibility statement