Jemand scannt Ihren Computer. Ihre TCP ports: 8118, 8888, 8088, 808 und 1025 wurden von 122.227.164.96 gescannt.

Details: Intrusion: Portscan Attacker: 122.227.164.96 Risk Level: Medium At least 11 ports were probed. Attacks were repeated. Some one in China is misbehaving.

Intrusion detected and blocked. All communication with 122.227.164.96 will be blocked for 30 minutes. Intrusion: Portscan. Intruder: 122.227.164.96(12200). Risk Level: Medium. Protocol: TCP. Attacked IP: YOUR-27E1513D96(24.175.84.86). Attacked Port: 7212. Intrusion Detection is monitoring 1157 signatures. Intrusion Detection Signature File Version: 20090710.001. Intrusion Detection Engine Version: 4.1.0.61. Intrusion Detection has been enabled. Intrusion Detection is monitoring 1156 signatures. Intrusion Detection Signature File Version: 20090707.005. Intrusion Detection Engine Version: 4.1.0.61. Intrusion Detection has been enabled. Intrusion detected and blocked. All communication with 122.227.164.30 will be blocked for 30 minutes. Intrusion: Portscan. Intruder: 122.227.164.30(12200). Risk Level: Medium. Protocol: TCP. Attacked IP: YOUR-27E1513D96(24.175.84.86). Attacked Port: 11825.

Attempt to port scanning...

122.227.164.96 Risk Level: Medium At least 11 ports were probed. Attacks have been repeated for several days

7/19/2009 Details: Attempted Intrusion "Portscan" against your machine was detected and blocked. Intruder: 122.227.164.96(12200). Risk Level: Medium. Protocol: TCP. Attacked IP: xx(xx.xxx.xxx.xx). Attacked Port: 6588. Click the address to trace the attacker. 7/19/2009 Details: Intrusion detected and blocked. All communication with 122.227.164.96 will be blocked for 30 minutes. Click the address to trace the attacker. 7/18/2009 Details: Intrusion detected and blocked. All communication with 122.227.164.96 will be blocked for 30 minutes. Click the address to trace the attacker. 7/18/2009 Details: Attempted Intrusion "Portscan" against your machine was detected and blocked. Intruder: 122.227.164.96(12200). Risk Level: Medium. Protocol: TCP. Attacked IP: xx(xx.xxx.xxx.xx). Attacked Port: http-proxy-1(8088). Click the address to trace the attacker. City: Ningbo Country: China Latitude: 29.875 Longitude: 121.541900635

this IP tried several times to access my FTP Server with user \"test\"....

Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN] Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.105.163,12200 against a range of destination ports: 808 (2) 8081 (5) 6588 (7) 11825 (10) 3124 (3) 1425 (3) 1432 (1) 1433 (1) 1450 (1)

Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN] Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.105.163,12200 against a range of destination ports: 808 (2) 8081 (5) 6588 (7) 11825 (10) 3124 (3) 1425 (3) 1432 (1) 1433 (1) 1450 (1)

Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN] Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.105.163,12200 against a range of destination ports: 808 (2) 8081 (5) 6588 (7) 11825 (10) 3124 (3) 1425 (3) 1432 (1) 1433 (1) 1450 (1)

Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN] Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.105.163,12200 against a range of destination ports: 808 (2) 8081 (5) 6588 (7) 11825 (10) 3124 (3) 1425 (3) 1432 (1) 1433 (1) 1450 (1)

122-227-164-96 detected by my firewall. from China

repeated attacks, , portscanning, blocked

First when Firewall says, "Port Scanning Attack", does that mean they got in? These are the constant attackers: 122,227,164,96 (it's the newest) 61.160.216.63 61.139.105.163 67.29.139.234

First when Firewall says, \"Port Scanning Attack\", does that mean they got in? These are the constant attackers: 122,227,164,96 (it\'s the newest) 61.160.216.63 61.139.105.163 67.29.139.234 What can I do about this? Have they gotten in already? And just waiting to "happen to come in while I'm inputing sensitive info?"... Firewall eset smart...I can't even find how to block IP addresses (I have it on automatic filtering because I can't figure out the system; and don't have the time or knowledge to try). Customer service is impossible to reach or replies.

Blocked! Several times this instruder attack my computer. Somebody, please stop him! Thanks

I scanned for three days because this jerk disabled or helped to disable part of my antivirus program. Got them out, but still trying to get back in. Firewall set to no exceptions. Shut him down.

I have been having this IP address 122.227.164.96 trying to scan my ports, it has been going on for over a month. 4-6 times a day, I do not wish to keep having them attack my computer........

This "person" (if you can call them that, has been trying to hack into my FTP server. I guess some people need to get a life.

This moron has tried several times over a few months to port scan. Each has been blocked. Just another twit

Latest: "TCP Packet - Source:122.227.164.96,12200 Destination:85.177.158.208,8081 - [PORT SCAN]" Mich nervt das und es macht mich nervös. Hate it.

FSecure internet security on my PC reports being attacked and describes it as "Inbound Malware Probe" and a service Malware - My doom in.It says it blocked it, I hope so.

Security software blocked repeated intrusion attempts from this IP address!

A minimum of 6 attacks per day, usually twice that. The scans start on random ports, but progress sequentially once initiated. I'm going to my ISP and see if they can block him at their level instead of me doing it.

Norton is catching this guy trying to portscan my pc. IP address 122.227.164.96 is in Ningbo, China.

Port scanning detected from 122.227.164.96 reported by network and dropped.

Details: Attempted Intrusion "Portscan" against your machine was detected and blocked. Intruder: 122.227.164.96(12200). Risk Level: Medium. Protocol: TCP. Please dont be a douche and try this again....I get this crap all the time from this locations....and Frankly I dont have time to waste on the comp for this. Please use your comp knowledge to better use and get a F****** degree or be productive.

Details: Attempted Intrusion "Portscan" against your machine was detected and blocked. Intruder: 122.227.164.96(12200). Risk Level: Medium. Protocol: TCP. Please dont be a douche and try this again....I get this crap all the time from this locations....and Frankly I dont have time to waste on the comp for this. Please use your comp knowledge to better use and get a F****** degree or be productive.

Port scanned 122.227.164.96 TCP(2301) TCP(8000) TCP(3128) TCP(8080) TCP(9000) TCP(8085)

Port scanned 122.227.164.96 TCP(2301) TCP(8000) TCP(3128) TCP(8080) TCP(9000) TCP(8085)

08/08/2009 22:59:41.304 - Probable Port Scan - Source:122.227.164.96, 12200, WAN - Destination:86.4.134.54, 8081, LAN -

"Somebody is scanning your computer. Your computer\'s TCP ports: 8088, 808, 11825, and 6588 have been scanned from 122.227.164.96.." happens repeatedly. i have no problems so dont believe hes got in. any idea what its trying to do?

122.227.164.96 CHINA NEEDS TO BE STOPPED NOW!!!!

Dumbass trying to get in from ports 9090, 8085, 9000, 3128, 8000, 2301, 7212, 8118, 8888, 6051, 808, 1025, 8081, 6588, 11825, 1080.

This marks the fourth attempt this month this Chinese Computer attempted to infiltrate my Security Systems. I am not the Pentagon But will begin Targeting of Orbital Ballistic Warhead to your location should you decide to continue targeting my facility. Capt. John

122.227.164.96 - their RDP port is open! Someone should hack their admin account and shut them down!

26 ports scanned

VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!

VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!

VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!

VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!

Jemand scannt Ihren Computer. Ihre TCP ports: wurden von 122.227.164.96 gescannt.

Same as everyone else. Port scanning several times a day from this IP. Caught it in my router log.

Can't something be done about this Chinese scumbag?

Numerous attempts to scan our server. Please block this stupid Chinese.

Script kiddie with a port scanner and a cracker trying to get card numbers. Daily port scanning. Managed to crack a couple VNC connections. Will also appear under the network 114.237.0.0. Kept me on my feet, as I had forgotten to properly firewall the new static IPs. Blacklisted your entire country at the firewall, you dumb son of a bitch. Keep pretending you're from Germany typing in the wrong IP, see how that works out for ya. ;) Everyone else, a few links to help keep the sleepless Eastern Hemisphere human sewage tanks out of your networks: http://www.blockacountry.com/htaccess.php Get IP lists by country. If you don't need to get to Chinese websites, might as well block 'em. Russia and Nigeria are also hotbeds for hackers. http://ubuntu-unleashed.com/2008/04/block-bad-ip-ranges-with-iplist-in-ubuntu-linux.html Ubuntu utility for Linux users to block entire ranges. http://www.eukhost.com/forums/f15/how-block-ips-using-windows-3638/ A method for Windows users to block ranges, though more time consuming. Also, it says server, but this will work on any XP Pro machine as well.

I also have had these SOB's bust through my firewall in the past several weeks and had outlook express destroyed, completely lost all my email. I am most certain it's these same SOB's that continue dai;y if not sveral times a day to get into my machine and I too am FED UP> Stop the bastards now or I will take action.

[16:00:55] Accepted Connection: 122.227.164.96 [16:00:55] GET http://proxyjudge1.proxyfire.net/fastenv HTTP/1.1 [16:00:55] Host: proxyjudge1.proxyfire.net [16:00:55] User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) [16:00:55] Accept: */* [16:00:56] Accept-Language: zh-cn [16:00:56] Connection: Keep-Alive

122.227.164.96 hat meine ports gescannt. ich mag das nicht. ist aber nicht der einzige chinese der das versucht.

I think a Chinese bastard is scanning my port.

I think a Chinese bastard is scanning my port.

Mein PC wurde soeben von einem Hacking-Software attakiert und dank Bullguard erfolgreich abgewehrt. Ein scan der IP-Adresse zeigt, dass der Angreifer aus Ningbo, China kommt. Seid gewarnt, leider kommt selten etwas gutes aus China.

Sygate personal fire wall: " Your computer's TCP ports: 6588, 8090, 808, and 7212 have been scanned from 122.227.164.96.."

IP 122.227.164.96 has been scanning my corporate firewall with increasing frequency over the last two weeks. Yet another issue with a Chinese-based IP. :(

Somebody is scanning your computer. Your computer's TCP ports: 8000, 6588, 1080, and 8118 have been scanned from 122.227.164.96 same person a few days ago, who is this?

Attempting to hack for over 3 months now. How do I get them to stop?

IP 122.227.164.96 has been scanning my ports for about three months now on a consistent basis. Today it was scanning port 808. Sometimes there won't be anything for two or three days and then the IP (comes up as China) may hit me up to three times in a day. My security system keeps informing me it is blocking but the constant activity makes me feel uneasy. Traffic description was port 12200.

IP 122.227.164.96 has been scanning ports:10275, 38175, 36895, 38943, 14348, 20480, 33315, 39199, 48153.. Please, block this.

http://proxyjudge2.proxyfire.net/http://proxyjudge2.proxyfire.net/fastenv trying to hack my apache httpd

122.227.164.96... trying to hack into my account.

Scanned ports on my remote server and looked into hg repo, opened via http for reading. Dunno why…

It would seem this bastard has hijacked my address, changed my password, and is using my unit as a proxy. We sure need to bust his links or counter-attack in enough force to at least shut him down for more than 30 min. I fear he is using a proxy system in his attacks.

...

I have been getting reports of port attacks daily from this IP address and I believe they have hacked into my e-mail account as well. Every time I sign on it signs me off saying it has been signed on by another computer which is crazy as I'm the only user...Crazy stuff is going down for sure on my PC.... Isn't there something we can do about this!!!!!

10/12/2009 19:44:51 EST, from port 12200 to my IP, port 8081, dropped.

the intrusion was detected and blocked; portscan TCP port12200.. Application path system..Risk level is medium . destination was my computer( wont put exact name)This IP# has been quiet for a bit and is back again.. When the hell is someone going to do something about him? Daily hits around the same time is getting ridulous.

Des hackers Chinois scannent mon ordinateur plusieurs fois par jours. Mon logiciel: "MALWAREBYTES" les stoppent automatiquement et ils m'en avertissent à chaque fois. Avec l'adresse IP donnée par celui-ci, j'utilise IPILLION pour rejoindre le fournisseur internet du hacker. J'ai envoyé plusieurs avertissements au fournisseur internet en CHINE et j'attends des nouvelles qui ne viennent pas vite. La prochaine étape sera de porter plainte à la GRC du Canada.

IP address [?]: 122.227.164.96 Copy [Whois] [Reverse IP] IP country code: CN IP address country: ip address flag China IP address state: Zhejiang IP address city: Ningbo IP address latitude: 29.8750 IP address longitude: 121.5419 ISP of this IP [?]: CHINANET Zhejiang province network Organization: CHINANET-ZJ Ningbo node network Local time in China: 2009-10-25 22:33 i have scan him retourn!!he have match ports open!!port1,21,17,34,50,66 82,98usw

Your computer's TCP ports: 8085, 8088, 8089, 6588 and 808 have been scanned from 122.227.164.96. Very clever, isn't it ! O_o

Found attack from 122.227.164.96 in port 8088 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 3128 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 80 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 8089 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 6588 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 808 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 8118 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 8888 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 9415 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 8081 => Wed Oct 28 19:35:08 20 Found attack from 122.227.164.96 in port 9000 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 8080 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 9090 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 8090 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 7212 => Wed Oct 28 19:35:08 2009 Found attack from 122.227.164.96 in port 1025 => Wed Oct 28 19:35:08 2009

scan port http, Socks, 9000, 1025

Somebody is scanning your computer. Your computer's TCP ports: 808, 8118, 8888, and 9415 have been scanned from 122.227.164.96..

37 port scans over the course of 1 hour and 29 minutes. Four of them rated high by ZoneAlarm.

For 15 days now scanning one of my SonicWalls Here are the ports for the last 5 days: Possible port scan detected - 122.227.164.96, 12200, TCP scanned port list, 8089, 8000, 6588, 1080, 808 TCP scanned port list, 8088, 3128, 8089, 8000, 6588 TCP scanned port list, 16737, 16751, 16752, 16754, 16755 TCP scanned port list, 9000, 8085, 8080, 8088, 3128 TCP scanned port list, 13212, 13213, 13214, 13215, 13218

122.227.164.96 SCANNING PORTS (10275, 38175, 36895, 38943, 14348, 20480)

Somebody is scanning your computer. Your computer's TCP ports: 8080, 8088, 8089, 8085 and 3128 have been scanned from 122.227.164.96. I love my firewall.

Last attack on ports : 808, 9000, 1080, 3128, 8080, 8085, 8089, 8090, 6588, 9415, ..." username="not logged yet"

My fire wall reports that 122.227.164.96 is scanning my ports. What is going on and how do I stop this? Is there a danger?

Portscan

[13-20/Nov/2009 03:58-4:30] PORTSCAN "122.227.164.96" hostname="122.227.164.96" "protocol: TCP, source: 122.227.164.96, destination: 195.68.153.138, 195.68.153.139, ..., ports: 808, 9000, 3128, 8000, 80, 8080, 8085, 8088, 8089, 6588

Ports scan & Phishing.

ports 6588, 808, 7212, 8118 and 8888 have been scanned today and yesterday please stop him, likle you already did with the other chinese ;)

=>Found attack from 122.227.164.96. Source port is 12200 and destination port is 8090 which use the TCP protocol. Thu Nov 26 15:53:53 2009

27/11/2009 7:02:06 AM EST Firewall Security Log Message: Somebody is scanning your computer. Your computer's TCP ports: 80, 6588, 808, and 8118 have been scanned from 122.227.164.96

Jemand scannt Ihren Computer. Ihre TCP ports: 3128, 8089, 6588, 808 und 7212 wurden von 122.227.164.96 gescannt. kann man ihn nicht aufhalten ???

30/11/2009 6:47:23 AM EST Firewall Security Log Message: Somebody is scanning your computer. Your computer's TCP ports: 808, 7212, 8118, and 1025 have been scanned from 122.227.164.96

Your computer's TCP ports: 8089, 8090, 8000, and 8118 have been scanned from 122.227.164.96. 03-12-2009 21:27:45 Port Scan

I think this chinese bastard Chinese bastard is scanning my port more than once. This bastard detail as fellow: IP address : 122.227.164.96 IP country code: CN IP address country: China IP address state: Zhejiang IP address city: Ningbo IP address latitude: 29.8750 IP address longitude: 121.5419 ISP of this IP : CHINANET Zhejiang province network Organization: CHINANET-ZJ Ningbo node network "NING BO LAN ZHONG WANG LUO YOU XIAN GONG SI"

This guy is using s port scanner to scann ALL my ports. I have one open port which let him know I'm here and since then he has not left me alone. I have him permenantly banned but he keeps trying :-)