Port scan from 1.1.1.1 and 1.0.0.1

Follow

Tonydecker51301

• March 08, 2024 00:24
• Edited

Got a really interesting port scan alert today: 1.1.1.1 is scanning ports on device Home Assistant VM. And: 1.0.0.1 is scanning ports on device Home Assistant VM. What I don’t understand is why the source is showing up as 1.1.1.1 and 1.0.0.1 even though the IP of the VM is a private IP.  Or is this saying that the source is from those IPs and somehow getting into my internal network? I can’t see how that would be happening either. Anyone seen anything like this or have some insight into what might be happening?

0

• 

  Firewalla

  • March 08, 2024 00:38

  very likely the detection messed up the direction. It should be your VM accessing 1.1.1.1

  0

  Comment actions Permalink

Please sign in to leave a comment.