We're starting to see a major uptick in Blocked web site traffic to a specific set of IPs. Many of our systems are seeing the same thing.
Blocked web site Type: outgoing, Port: 55724, Process: iexplore.exe 8.34.112.224
Blocked web site Type: outgoing, Port: 55723, Process: iexplore.exe 8.34.112.224
Blocked web site Type: outgoing, Port: 55725, Process: iexplore.exe 8.34.112.225
Blocked web site Type: outgoing, Port: 55726, Process: iexplore.exe 8.34.112.225
Blocked web site Type: outgoing, Port: 55727, Process: iexplore.exe 8.34.112.224
We've scanned our clients and can't see what's causing the repeated attempts. Does anyone have any ideas, suggestions on how to find what's originating the connection attempts?