external IPs are showing in cybersecurity threat assessment report as 'source ip'

[RanjanMohanty]

i have suspicious activity on my fortigate firewall, i can see external IPs as source IPs on my firewall. Want to know what is going on here.

[Debbie_FTNT]

Hey Ranjan,

you would need to check the actual underlying logs to get an idea of why the security assessment report shows public IPs as sources.

- check your traffic logs while filtering for one of the public IPs as source IP

- check security logs (AV/webfilter/IPS/whatever you apply) while filtering for one of the public IPs as source IP
That should give you at least a rough idea where the report is getting its information from.

You can then dig further into the log messages to see if it is anything to be concerned about, or you can contact Fortinet Technical Support for some assistance.