Thursday, December 5, 2019

Network Logs/Weird Activity?

I have been reviewing network logs today, and I saw that I have a PC that keeps trying to send traffic to another PC on the network but is being denied for Unhanded internal traffic. Every few seconds it is attempting to send traffic to about 20 IP addresses on our internal network, starts with sending traffic to xx.x.40.1, then xx.x.40.2, xx.x.40.3 and so on. Every time it is denied, and after it hits xx.x.40.20, it stops and then tries it all over again. This PC is used in production and all it is doing is running 1 website and local label printer. Networking is not my forte, so I am a bit stuck. There aren't any other internal machines sending traffic like this.

Thank you for you help!



No comments:

Post a Comment