Reading LOG

[ErnestoZa]

Good morning I wanted to ask for your support to validate the information of the following log. in my opinion the origin of the virus is the server 75.8.43.67 or I am in some error No more, thanks for your support

[bmorris]

Hey,

This log would be based on the session. So the session would start with the client initiating the connection to the server. So source is the client, destination is the server.

hope this helps,

Ben