Forefront Edge Security TechCenter > Forefront Edge Security Forums > Forefront Edge Security - Monitoring, Logging, Reporting > Random IP Addresses in ISA Server 06 logs - other than vpn private IP's and host IP's
Ask a questionAsk a question
 

AnswerRandom IP Addresses in ISA Server 06 logs - other than vpn private IP's and host IP's

  • Thursday, August 13, 2009 6:19 PMlauramdsm Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    ISA Server 2006
    Users connect through VPN and get assigned a 10.10.10.x IP address.

    Looking through the logs, under "C_IP" (IP of requesting client) I see some IP addresses of the host (for updates and such, makes sense) and some private IP addresses of clients connecting through the VPN (10.10.10.x) but then I also see some random IP addresses. WHAT ARE THESE??

    A whois does not give me much information at all... It shows they are are using HTTP to access websites... and they are being provided the service by my host IP address.

    No one else should be connecting other than the host connections and the vpn users with the private IPs, so where are these coming from????

    THANKS.

Answers

All Replies