• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

what is od-in-fXX.google.com?

Hey everybody, where I work we have a sonicwall firewall that I monitor on a daily basis. I'm a little stumped as to what this one web address is and why it is trying to scan the firewall's ports.

THe address is "od-in-fXX.google.com" (where the x's are the number changes, but are consistant), and it appears to be using 2 -30MBs of bandwidth regularly. It also is trying to scan these ports "7256, 7257, 7272, 7274, 7110"

It appears to be a google page of some sort, but when i put the url in firefox, it takes me to google.com. I have a hard time believing anyone could amass so much bandwidth just keyword searching. Gmail.com is blocked, but google has other services as well. Does anyone know what the site could be? or how to pick apart the url for some meaning?

Any help would be appreciated!


 
7256 - unassigned
7257 - unassigned
7272 - WatchMe Monitoring
7274 - OMA Roaming Location SEC
7110 - unassigned

I posted a similar question in the past with not much luck. Google load balances between hundreds of thousands of servers...kind of hard to pinpoint what service is coming from what server.

maybe google maps or video?
 
Looking some more into it, it aprears to be accessed from one particular department. Also we are blocking google video. Chances of anyone in this department telling me what page this actually is, is slim. Would abuse@google.com be able to tell me? I don't want to write an email and have it sent to an automated account.
 
Back
Top