Good day sir, thank you for replying, and the link is very helpful, for information sir, our firewall is not accessible in the internet, even the server, and we also have PFSENSE aside from our commercial firewall, and IPS so the topology is (COMMERCIAL FIREWALL-PFSENSE-IPS-SERVER). We have found out that there is someone creating when we have detected the specific account on our IPS doing Spam Message, and we think we have already solved it, but after a few months, the said account was back. And another subject sir, upon checking on our IPS, there is a specific time that the admin@domain is sending a Notice Info to another specific account with different domain, but upon checking, the admin account has no history of sending it, and as far as I know the admin cant send and received messages. But I cant disregard the logs. Anyways sir, thank you for your reply.
Statistics: Posted by chase.cho — Sat Feb 24, 2024 11:47 pm