Is this IP adresss in use in your network.

IS this ip using FTP? This is a known false positive if you download many small files. As each file will open a new connection with an increasing post number. Just as a portscan would look like

regards
Gert