IP is trying to make connection to malicious domain .But issue is that that ip by which connection is going is my wan link Interface.
It mean all internal machine are getting access to internet by this and lot of my machine in my network not updated and dont have antivirus.
May be there is devices that are infected by the malware or be part of botnet.
How to stop it
do i need to make firewall rule , or should block website (apie.resonsecurity.com) that showing in logs .
or need to changes in web filtering
plz help
This thread was automatically locked due to age.
