Report shows webpages visited, but user never went

**mfielitz** · 07-08-2010, 11:07 AM

I have a really weird problem.

The webfilter report shows a computer (192.168.0.188), accessed all kinds of random sites. No username attached ( I use the AD connector). I checked all users that use that computer, but they never went to these sites. I checked for spy-ware and viruses,but found nothing.

Sites visited: News, Social Netwoking, Sex, shopping etc.

I attached a screenshot of the report.

This is driving me nuts!

Thanks for your help!

**dmorris** · 07-08-2010, 11:09 AM

do you have the login script installed?
does it show someone as logged into that machine now in the status screen?

under the top user violators - do you see any users?

**mfielitz** · 07-08-2010, 11:28 AM

Yes it's installed. It working just fine. I can see the current Username logged in in the Status screen. I see users under violators, but these violators use a different computer, and never went to these sites.

Thanks!

**Mathiau** · 07-09-2010, 03:15 PM

sure they weren't just links tied to a site the person did go to, or perhaps the person just wont admin they went to those sites cause they werent supposed to?

**mfielitz** · 07-15-2010, 09:48 AM

Originally Posted by Mathiau

sure they weren't just links tied to a site the person did go to, or perhaps the person just wont admin they went to those sites cause they werent supposed to?

It still should have had a username on the report right? If I run the report on the specific user how uses that computer, I don't see the sites.

**dmorris** · 07-15-2010, 09:56 AM

Originally Posted by mfielitz

It still should have had a username on the report right? If I run the report on the specific user how uses that computer, I don't see the sites.

you would only see that if that user was logged in at that time.

**mfielitz** · 07-16-2010, 08:13 AM

Originally Posted by dmorris

you would only see that if that user was logged in at that time.

I guess I'm confused.Then how did these sites show up, if no user was logged in? Somehow the computer is randomly accessing sites?

**randall** · 07-19-2010, 08:03 PM

Computer accessing random site is at all possible.

Why not try checking that particular station fro some botnet/trojan infection?

**mfielitz** · 07-20-2010, 03:17 PM

Originally Posted by randall

Computer accessing random site is at all possible.

Why not try checking that particular station fro some botnet/trojan infection?

I did. workstation is clean.

**dwasserman** · 07-20-2010, 03:53 PM

Can be embebbed links in other pages or mails?

Thread: Report shows webpages visited, but user never went

LinkBack

Thread Tools

Report shows webpages visited, but user never went

Posting Permissions