Top session widget : unknown ip

[roblenoir]

Fortigate 60C

Firmware version : v4.0,build5918,120831 (MR2)

Hello. My company is equipped with a firewall / UTM Fortigate 60C. In the widget " top session ", i see unknown IP addresses that have the most sessions currently open: Protocol = TCP Source address = 91.213.175.66 or 85.236.105.30 or others unknown IP. Source port = 64890 (a dynamic port - other exemple: 648545) Destination address = "our public IP" Destination port = 443 Somebody could light me on what it means. To what corresponds this IP 91.213.175.66 or this one 85.236.105.30 ? Thank you.

[gschmitt]

roblenoir wrote:

To what corresponds this IP 91.213.175.66 or this one 85.236.105.30 ?

Hit Windows Key + R > type CMD and hit enter

Type the following "ping -a 91.213.175.66" and hit enter

This IP resolves to srv-u66.antiddos.biz

85.236.105.30 resolves to frae329.multiplay.co.uk

[roblenoir]

Thanks for your anwer.

I saw what this ip corresponding to but, do i have to worry about this ?

[gschmitt]

roblenoir wrote:

Thanks for your anwer.

I saw what this ip corresponding to but, do i have to worry about this ?

Probably not

the dynamic source port is normal for http/https traffic

[roblenoir]

OK, thank you.