Skip to main content
Robert_Cerny
Robert_Cerny
New Member
January 1, 2019
Question

Unusual traffic from 35.190.168.222

  • January 1, 2019
  • 1 reply
  • 2241 views

Hi folks,

we are seing an unusual amount of inbound connection from 35.190.168.222 to our FG, specifically IP address bound to our mail server, port 443. This traffic seems to be harmless, but it's amount is really weird. It seems to be connected to googleusercontent.com, which is used for analytics and other google services. Does anyone know what's going on here?

 

Thanks

 

    1 reply

    rohitchoudhary1978
    rohitchoudhary1978
    Visitor III
    January 2, 2019

    Hi,

    You may block this source ip address 35.190.168.222 or may ask email service provider [if outsourced] for the relation (It could be used to fetch some image).

    To block, configure a policy with this source ip and destination to mail server ip, service = all, action to be deny.

    If you get any issues then disable it.

     

    Thanks

    Rohit

    Terms & ConditionsAccessibility statement