Port scan

Hi,

I got an alert for a port scan and im a little bit concerned.

Quoted: " the firewall has blocked a port scan from remote host 204.79.197.200 on ports 64848, 64849, 64844, 64851, 64855"

Example of attacked port:

443 -> 64848 (tcp) (https)

However when looking up the ip address it says that it belongs to Microsoft and bing. But other places were calling it a proxy server that hackers could use.

I'm concerned about this as I ran a netstat cmd on the computer and found that the ip address is connected to a port on my computer.

Port 60884 -> 204.79.197.200:443 = established

A similar ip address being:

Port 49364 -> 204.79.197.222:444 = established

Overall I'm concerned and confused as I only have limited knowledge about all of this. I'm worried that I have have been hacked.

Leave a Comment

Rich Text Editor. To edit a paragraph's style, hit tab to get to the paragraph menu. From there you will be able to pick one style. Nothing defaults to paragraph. An inline formatting menu will show up when you select text. Hit tab to get into that menu. Some elements, such as rich link embeds, images, loading indicators, and error messages may get inserted into the editor. You may navigate to these using the arrow keys inside of the editor and delete them with the delete or backspace key.