Some one else see this in the ATM Log?
10.19.1.3 is a Monitoring Server pinging 8.8.8.8 for Internet Referenc.
This thread was automatically locked due to age.
Source IP;"Dest. IP";Threat;Origin;"First Seen";"Src. Hosts";Events
10.128.0.5;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 21:56:15";1;6
10.128.0.6;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 21:56:15";1;6
172.16.128.5;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 22:06:13";1;3
172.16.128.4;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 21:57:31";1;1
Source IP;"Dest. IP";Threat;Origin;"First Seen";"Src. Hosts";Events
10.128.0.5;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 21:56:15";1;6
10.128.0.6;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 21:56:15";1;6
172.16.128.5;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 22:06:13";1;3
172.16.128.4;8.8.8.8;C2/Generic-A;Iptables;"2015-04-30 21:57:31";1;1