Visitor
•
2 Messages
Firewall Detected Port Scans Originating from Comcast IP 69.138.89.145
Our Firewall detected multiple instances of tcp and updated Port Scans originating from a Comcast IP 69.138.89.145 near/after midnight. Why would Comcast be running a multiple port scans on our network, after hours? Firewall notifications are listed below.
12/04/2018 23:52:58 - 83 - Security Services - Alert - 46.161.27.8, 65534, X1 - 69.138.89.145, 4060, X1 - tcp - TCP scanned port list, 4059, 4052, 4057, 4054, 4058, 4056, 4055, 4050, 4053, 4060 - Probable port scan detected
12/04/2018 23:52:57 - 82 - Security Services - Alert - 46.161.27.8, 65534, X1 - 69.138.89.145, 4056, X1 - tcp - TCP scanned port list, 4059, 4052, 4057, 4054, 4058 - Possible port scan detected
12/05/2018 01:01:06 - 82 - Security Services - Alert - 212.129.62.98, 5061, X1 - 69.138.89.145, 1074, X1 - udp - UDP scanned port list, 5160, 1070, 1071, 1072, 1073 - Possible port scan detected.
12/05/2018 01:01:06 - 83 - Security Services - Alert - 212.129.62.98, 5061, X1 - 69.138.89.145, 2060, X1 - udp - UDP scanned port list, 5160, 1070, 1071, 1072, 1073, 1074, 2727, 5059, 8888, 2060 - Probable port scam detected.
12/05/2018 05:39:07 - 82 - Security Services - Alert - 151.101.65.140, 443, X1 - 69.138.89.145, 59110, X1 - tcp - TCP scanned port list, 48063, 7910, 64398, 16871, 45823 - Possible port scan detected
user_Claude
Official Employee
•
56 Messages
6 years ago
Thank you for reaching out to us regarding this issue. Sorry to learn you are having an issue from this address. We don't control that IP address, we are not able to provide any additional information at this time regarding its usage.
0
0