My UTM gave me an interesting result in the weekly executive report. Normally, the list of TOP 10 CLIENTS are always internal clients with IP addresses assigned by my DHCP. However, this week, it showed an external IP address too which I'm struggling to trace in the logs.
| 6 | 5.xxx.xxx.162 | 5-xxx-xxx-162.cust-5.exponential-e.net | 1 053 468 | 933.9 MB | 3.88 % |
I've tried searching all the log files over the past 30 days to identify what this connectivity represented but I cannot seem to find any reference to it. How is the UTM calculating this, what log source is it using and how can I trace it to understand what devices on my network were communicating with this external IP address?
Any help would be appreciated.
This thread was automatically locked due to age.
