Recently we had our ePO server report that VSE Blocked ip address trying to access ports 6669,6667,6668 and 6666. VSE blocked such attempts under the IRC communication rule. I have looked and done a trace to the IP addresses and they are from Russia, Japan, China, etc..
Now i am curious as to why they are popping up on only a few systems in our office. We have multiple users but only 4 have alerts regarding this rule. I would think that if it was a bot net or a scan, it pop up on all systems through the address range. Anyone have ideas or have experienced this before?