FireGen for NetScreen Log Analysis Report

Altair Technologies - "sample" firewall log analysis for the period
Thu May 20 00:00:00 2004 to Thu May 20 23:59:59 2004

Firewall IPFirewall NameSectionsFirst messageLast message
192.168.5.28  bastion  Summary Message types Message Details Protocols Traffic Denials VPN,IDS,Management 05/20/04 00:00:49 05/20/04 17:57:34

-
Research links: - Go to top
TCP/IP Protocol
Whois
Latest NetScreen logs analysis recommendations
Altair Technologies NetScreen discussion forum
Send your comments or suggestions to the FireGen developers!
 
Glossary
Analysis performance
-
Keywords: - Go to top
Keywords to include
Keywords to exclude
Not configured
-
Analyzed logs: - Go to top
Analyzed log(s) Log size (kb) Log entries Log type
C:\Program Files\FireGenNs\\Sample\syslog-2004-05-20.log 1,154.46 3,257 WinSyslog
-
Summary for the 192.168.5.28 firewall. : - Go to top
Level Severity Description Total
1 Alert Immediate action needed 0
2 Critical Critical condition 1
3 Error Error condition 0
4 Warning Warning condition 0
5 Notification Normal but significant condition 3,256
6 Information Informational message only 0
7 Debugging Appears during debugging only 0
    Total 3,257
-
Message types distribution for the 192.168.5.28 firewall. : - Go to top
No Code Total Example
1 critical-00023 1 VIP server 192.168.5.25 cannot be contacted. (2004-05-20 hh:mm:ss)
2 notification-00257 3,255 start_time="2004-05-20 hh:mm:ss" duration=4 policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=727 rcvd=702 src=192.168.5.70 dst=216.203.49.198 src_port=4491 dst_port=80 src-xlated ip=209.161.200.238 port=2788
3 notification-00533 1 VIP server 192.168.5.25 is now alive. (2004-05-20 hh:mm:ss)
-
Message details for the 192.168.5.28 firewall: - Go to top
-
Severity level 1 (Alert) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
No messages with severity level 1 were recorded.

-
Severity level 2 (Critical) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
1 05/20/04 11:24:12 05/20/04 11:24:12 2-00023 VIP server 192.168.5.25 cannot be contacted. (2004-05-20 hh:mm:ss) 1

-
Severity level 3 (Error) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
No messages with severity level 3 were recorded.

-
Severity level 4 (Warning) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
No messages with severity level 4 were recorded.

-
Severity level 5 (Notification) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
1 05/20/04 00:00:49 05/20/04 17:56:30 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=udp/port:1718 proto=17 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.12 dst=224.0.1.41 src_port=pppp dst_port=1718 src-xlated ip=209.161.200.238 port=pppp 826
2 05/20/04 15:26:29 05/20/04 17:27:07 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=216.198.223.175 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 239
3 05/20/04 11:39:07 05/20/04 17:57:32 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=dns proto=17 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=198.77.116.8 src_port=pppp dst_port=53 src-xlated ip=209.161.200.238 port=pppp 112
4 05/20/04 11:34:19 05/20/04 11:46:02 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=199.246.67.210 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 89
5 05/20/04 12:17:37 05/20/04 12:28:56 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=212.58.240.140 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 71
6 05/20/04 11:51:33 05/20/04 12:15:37 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=206.107.131.10 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 67
7 05/20/04 11:51:31 05/20/04 12:15:37 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=66.150.87.2 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 62
8 05/20/04 11:20:40 05/20/04 17:57:32 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=64.191.159.133 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 60
9 05/20/04 16:53:30 05/20/04 17:19:28 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=64.135.99.58 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 57
10 05/20/04 16:53:28 05/20/04 17:19:08 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=66.232.154.29 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 44
11 05/20/04 14:58:47 05/20/04 14:58:55 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=65.77.217.68 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 43
12 05/20/04 11:34:21 05/20/04 11:46:02 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=199.246.67.114 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 40
13 05/20/04 17:32:06 05/20/04 17:33:58 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=212.58.240.133 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 39
14 05/20/04 15:57:14 05/20/04 15:57:21 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=66.203.65.79 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 34
15 05/20/04 11:27:22 05/20/04 17:20:27 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=64.233.167.104 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 26
16 05/20/04 16:53:32 05/20/04 17:20:29 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=207.61.132.40 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 24
17 05/20/04 11:50:16 05/20/04 17:57:32 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=64.191.159.120 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 22
18 05/20/04 11:56:31 05/20/04 12:15:09 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=216.34.209.13 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 21
19 05/20/04 16:53:34 05/20/04 17:19:28 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=209.225.33.13 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 21
20 05/20/04 11:50:14 05/20/04 17:26:55 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=69.28.154.22 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 21
21 05/20/04 12:17:37 05/20/04 17:34:14 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=62.189.244.254 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 21
22 05/20/04 16:51:50 05/20/04 17:19:35 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=216.73.86.110 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 19
23 05/20/04 12:45:16 05/20/04 14:03:57 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=202.87.41.115 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 19
24 05/20/04 11:34:21 05/20/04 17:19:34 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=65.59.207.13 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 18
25 05/20/04 11:34:39 05/20/04 11:46:24 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=199.246.67.250 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 18
26 05/20/04 17:39:34 05/20/04 17:47:09 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=80.245.41.10 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 18
27 05/20/04 13:20:55 05/20/04 17:56:30 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=64.233.167.99 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 16
28 05/20/04 17:39:54 05/20/04 17:47:27 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=217.24.84.2 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 15
29 05/20/04 14:02:43 05/20/04 17:56:30 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=207.61.132.35 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 15
30 05/20/04 11:24:12 05/20/04 11:24:14 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=1 service=http proto=6 src zone=Untrust dst zone=Trust action=Permit sent=bbbb rcvd=bbbb src=24.217.193.47 dst=209.161.200.238 src_port=pppp dst_port=80 src-xlated ip=24.217.193.47 port=pppp 15
31 05/20/04 11:47:44 05/20/04 17:55:46 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=199.239.136.200 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 14
32 05/20/04 12:29:34 05/20/04 16:27:15 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=216.58.170.30 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 14
33 05/20/04 01:04:44 05/20/04 17:23:29 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=320001 service=tcp/port:5000 proto=6 src zone=Null dst zone=self action=Deny sent=bbbb rcvd=bbbb src=209.161.236.174 dst=209.161.200.238 scr_port=nnnn dst_port=5000 11
34 05/20/04 11:51:55 05/20/04 12:15:53 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=64.41.127.150 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 11
35 05/20/04 11:26:06 05/20/04 17:53:08 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=205.189.214.250 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 11
36 05/20/04 16:56:02 05/20/04 17:19:27 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=209.133.111.19 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 11
37 05/20/04 12:45:54 05/20/04 13:13:41 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=63.99.224.66 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 11
38 05/20/04 11:52:39 05/20/04 13:23:44 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=216.239.41.96 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 11
39 05/20/04 11:34:21 05/20/04 11:46:00 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=199.246.67.251 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 10
40 05/20/04 17:06:43 05/20/04 17:18:42 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=65.206.60.206 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 10
41 05/20/04 12:17:37 05/20/04 12:28:54 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=212.58.240.145 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 10
42 05/20/04 11:52:09 05/20/04 12:16:11 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=66.118.182.94 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 10
43 05/20/04 11:34:23 05/20/04 11:46:04 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=206.65.183.140 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 10
44 05/20/04 11:56:33 05/20/04 12:15:09 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=66.226.5.172 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 9
45 05/20/04 10:15:57 05/20/04 10:16:06 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=320001 service=tcp/port:445 proto=6 src zone=Null dst zone=self action=Deny sent=bbbb rcvd=bbbb src=209.161.240.77 dst=209.161.200.238 scr_port=nnnn dst_port=445 9
46 05/20/04 12:03:38 05/20/04 12:05:34 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=209.17.95.114 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 9
47 05/20/04 16:37:18 05/20/04 16:37:30 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=65.54.246.253 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 9
48 05/20/04 17:39:34 05/20/04 17:47:07 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=193.149.121.11 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 9
49 05/20/04 12:03:24 05/20/04 12:05:49 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=320001 service=tcp/port:2885 proto=6 src zone=Null dst zone=self action=Deny sent=bbbb rcvd=bbbb src=63.236.98.32 dst=209.161.200.238 scr_port=nnnn dst_port=2885 9
50 05/20/04 12:03:40 05/20/04 12:06:22 5-00257 start_time="2004-05-20 hh:mm:ss" duration=dddd policy_id=0 service=http proto=6 src zone=Trust dst zone=Untrust action=Permit sent=bbbb rcvd=bbbb src=192.168.5.70 dst=63.68.55.124 src_port=pppp dst_port=80 src-xlated ip=209.161.200.238 port=pppp 8
There were more messages to be reported but the listing is limited to 50!!!

-
Severity level 6 (Information) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
No messages with severity level 6 were recorded.

-
Severity level 7 (Debugging) details for the 192.168.5.28 firewall. : - Go to top
No First Message Last Message Code Message Count
No messages with severity level 7 were recorded.

-
Protocol statistics for the 192.168.5.28 firewall: - Go to top
-
Web traffic (HTTP/HTTPS) - Top 50 internal users (outbound connections) for the 192.168.5.28 firewall: - Go to top
No Source IP Source Host Destination IP Destination Host Connections Comments
1 192.168.5.70 appserver1.altairtech.net 216.198.223.175   239  
2 192.168.5.70 appserver1.altairtech.net 199.246.67.210 theglobeandmail.com 89  
3 192.168.5.70 appserver1.altairtech.net 212.58.240.140 www40.thny.bbc.co.uk 71  
4 192.168.5.70 appserver1.altairtech.net 206.107.131.10   67  
5 192.168.5.70 appserver1.altairtech.net 66.150.87.2   62  
6 192.168.5.70 appserver1.altairtech.net 64.191.159.133 s.abetterinternet.com 60  
7 192.168.5.70 appserver1.altairtech.net 64.135.99.58 www.maxweblinks.com 57  
8 192.168.5.70 appserver1.altairtech.net 66.232.154.29   44  
9 192.168.5.70 appserver1.altairtech.net 65.77.217.68   43  
10 192.168.5.70 appserver1.altairtech.net 199.246.67.114 theglobeandmail.com 40  
11 192.168.5.70 appserver1.altairtech.net 212.58.240.133 www33.thny.bbc.co.uk 39  
12 192.168.5.70 appserver1.altairtech.net 66.203.65.79 host-79-65-203-66.axsne.net 34  
13 192.168.5.70 appserver1.altairtech.net 64.233.167.104   26  
14 192.168.5.70 appserver1.altairtech.net 207.61.132.40   24  
15 192.168.5.70 appserver1.altairtech.net 64.191.159.120 xads.hostpool.net 22  
16 192.168.5.70 appserver1.altairtech.net 209.225.33.13 fornewsCollect.247realmedia.com 21  
17 192.168.5.70 appserver1.altairtech.net 62.189.244.254   21  
18 192.168.5.70 appserver1.altairtech.net 216.34.209.13   21  
19 192.168.5.70 appserver1.altairtech.net 69.28.154.22   21  
20 192.168.5.70 appserver1.altairtech.net 216.73.86.110 ad.us.doubleclick.net 19  
21 192.168.5.70 appserver1.altairtech.net 202.87.41.115   19  
22 192.168.5.70 appserver1.altairtech.net 80.245.41.10 prof.estat.com 18  
23 192.168.5.70 appserver1.altairtech.net 65.59.207.13 eqchmdvip1.doubleclick.net 18  
24 192.168.5.70 appserver1.altairtech.net 199.246.67.250 theglobeandmail.com 18  
25 192.168.5.70 appserver1.altairtech.net 64.233.167.99   16  
26 192.168.5.70 appserver1.altairtech.net 217.24.84.2 alan.rezo.net 15  
27 192.168.5.70 appserver1.altairtech.net 207.61.132.35   15  
28 192.168.5.70 appserver1.altairtech.net 216.58.170.30   14  
29 192.168.5.70 appserver1.altairtech.net 199.239.136.200   14  
30 192.168.5.70 appserver1.altairtech.net 216.239.41.96   11  
31 192.168.5.70 appserver1.altairtech.net 209.133.111.19 209.133.111.19.available.above.net 11  
32 192.168.5.70 appserver1.altairtech.net 63.99.224.66   11  
33 192.168.5.70 appserver1.altairtech.net 64.41.127.150 lma445.siteprotect.com 11  
34 192.168.5.70 appserver1.altairtech.net 205.189.214.250 www.eventid.net 11  
35 192.168.5.70 appserver1.altairtech.net 206.65.183.140   10  
36 192.168.5.70 appserver1.altairtech.net 199.246.67.251 theglobeandmail.com 10  
37 192.168.5.70 appserver1.altairtech.net 212.58.240.145 www45.thny.bbc.co.uk 10  
38 192.168.5.70 appserver1.altairtech.net 65.206.60.206 vpd1.ttn.xpc-mii.net 10  
39 192.168.5.70 appserver1.altairtech.net 66.118.182.94 unknown.sagonet.com 10  
40 192.168.5.70 appserver1.altairtech.net 65.54.246.253 bay2-dav.bay2.hotmail.com 9  
41 192.168.5.70 appserver1.altairtech.net 66.226.5.172 gorillanation.com 9  
42 192.168.5.70 appserver1.altairtech.net 209.17.95.114 worldnetdaily.com 9  
43 192.168.5.70 appserver1.altairtech.net 193.149.121.11 pubs.lemonde.fr 9  
44 192.168.5.70 appserver1.altairtech.net 63.68.55.124 i.gms1.net 8  
45 192.168.5.70 appserver1.altairtech.net 199.181.77.89   8  
46 192.168.5.70 appserver1.altairtech.net 64.236.40.55   8  
47 192.168.5.70 appserver1.altairtech.net 64.15.251.199   8  
48 192.168.5.70 appserver1.altairtech.net 69.28.158.22   8  
49 192.168.5.70 appserver1.altairtech.net 65.216.72.114 vrp1.ord.xpc-mii.net 8  
50 192.168.5.70 appserver1.altairtech.net 198.65.119.21   7  
-
Web traffic (HTTP/HTTPS) - Top 50 visited sites for the 192.168.5.28 firewall: - Go to top
<
No Web site HTTPS Count
1 216.198.223.175   239
2 theglobeandmail.com   161
3 www40.thny.bbc.co.uk   71
4 206.107.131.10   67
5 66.150.87.2