Why did a UDP port scan get through THG3000 hub?

[tonygibbs16]

Hello,

I have another router with a firewall connected to a THG3000 Vodafone hub.

My additional firewall detected a UDP port scan attack from an IP address on the Internet.

The THG3000 hub says that the firewall is turned on.

How was this UDP port scan able to get in?

Kind regards Tony 

[Ripshod]

What ip was it? Vodafone and their agents can get straight through the thg3000 firewall. 

[tonygibbs16]

Hello,

Nslookup decodes the source IP address as an Instagram server on the Facebook content delivery network fbcdn

Kind regards Tony 

[Ripshod]

---

@tonygibbs16 wrote:

Hello,

Nslookup decodes the source IP address as an Instagram server on the Facebook content delivery network fbcdn

Kind regards Tony 

---

But what's the IP?

[tonygibbs16]

Hello @Ripshod 

It is in the screenshot I posted, but the source IP address was recorded as 157.240.195.63

Kind regards Tony 

[Cynric]

@tonygibbs16  The image is not yet visible. It hasn't been reviewed by an admin.

[tonygibbs16]

Thanks @Cynric 😃

I had not thought about that.

Kind regards Tony 

[Cynric]

@tonygibbs16 That IP appears to belong to Facebook according to https://www.abuseipdb.com/check/157.240.195.63 

[tonygibbs16]

Hello @Ripshod 

Apologies if my reply sounded rude. I had not realised that the screenshot was not visible yet.

Kind regards Tony 

[Cynric]

@tonygibbs16 Also, do you have UPnP on? You could try the shields-up test at this website https://www.grc.com/default.htm to see if you have any holes. What port number got through?