Educause Security Discussion
mailing list archives
Re: Google "Unusual traffic from your computer network" notification
From: Randall C Grimshaw <rgrimsha () SYR EDU>
Date: Mon, 9 Dec 2013 15:23:45 +0000
Is there any chance that your network is running behind a NAT?
Randall Grimshaw rgrimsha () syr edu<mailto:rgrimsha () syr edu>
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of Michael J.
Kenney [m.kenney () USCIENCES EDU]
Sent: Monday, December 09, 2013 8:37 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Google "Unusual traffic from your computer network" notification
We’ve been getting these notifications pretty much on a daily basis and trying to find the problem is like finding a
needle in a haystack. https://support.google.com/websearch/answer/86640?hl=en
Anyone happen to have a short term solution that could help find the infected computer(s) such as traffic patterns that
are being sent to Google? Also a long term solution possibly an anti-malware appliance such as FireEye that could help
protect against these types of threats that our Sonicwall IPS cannot? We have a Snort server, but that is more reactive
than proactive and there are just too many.