I'm not really sure what's going on with this, but every morning when my users arrive I get an absolute flood of the following alert emails. I cannot figure out where these might be coming from. Anyone seen this before? It looks like it must be coming from an embedded ad somewhere, or just miscategorized perhaps.
Date: Thu 28 Mar 2013 06:29:35 AM CDT
Type: Information
Source: Websense Usage Monitor
A client has exceeded a configured daily Internet usage threshold.
For more information, run investigative or presentation reports in TRITON - Web Security. See the TRITON - Web Security Help system for details.
User name: LDAP://10.101.1.52 OU=Users,OU=Users,DC=mydomain,DC=local/Joe Username User IP address: 10.122.98.198 Threshold (in visits): 20
Category: Illegal or Questionable
Action: Blocked
--Most recent request--
URL: HTTPS://64.145.84.56:443
IP address: 64.145.84.56
Port: 443