sync flood attacks about once an hour

same here

here

just keeps setting off my firewall warning system.

Keeps seetting off fire wall by port scans. Port scans each time I log onto internet and about every 30 to 60 minutes thereafter.

Its almost 1 weeks that this host has been UDP port scanning ports: 55298, 57859, 54551, 58928, 54080, 58955, 52323, 61303, 53461, 57056 on the gateways and keeps scanning although we have blocked all incoming packets from this IP

scans about every 2 min and attempts to reconfigure my setting on my computer. Also seems to be interfering with download speeds. seems to bog down the system.

2008-10-21 21:15:17 Port-Scan KleinerEingang TCP 218.10.111.106 01-00-20-00-01-00 85.179.14.86 00-00-01-00-00-00 ich ICH-1 Normal 3 2008-10-21 21:14:01 2008-10-21 21:14:16

Somebody is scanning your computer. Your computer's TCP ports: 8000, 8118, 8800, and 11055 have been scanned from 218.10.111.106..

someday maybe we\'ll just be able to easily block all of china. It seems all my attacks are from there. They export port scans, crappy goods, and melamine. Nuff said.

someday maybe we\'ll just be able to easily block all of china. It seems all my attacks are from there. They export port scans, crappy goods, and melamine. Nuff said.

give it up already china stop scanning me was every hour or so now its every few mins

Several times an hour. How do we stop this?

This host keeps trying to access ports 8090, 9090, 9000, and 9788 -- every 15 minutes or so -- been going on for days, maybe more. My firewll keeps blocking them, but it's really annoying. There are a few other IPs from China doing similar things, so I'm getting hits about every five minutes. I'm running a restrictive firewall and the packets just get dropped silently. I don't know that it matters but here's the nmap scan: Not shown: 65524 closed ports PORT STATE SERVICE 80/tcp open http 135/tcp filtered msrpc 136/tcp filtered profile 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 1025/tcp open NFS-or-IIS 3306/tcp open mysql 8010/tcp open unknown 32210/tcp open unknown

Port scanning, locked onto port 9090 and ran dictionary attacks. Block this IP range!!

My firewall reports: Somebody is scanning your computer. Your computer's TCP ports have been scanned from 218.10.111.106.

Somebody is scanning your computer. Your computer's TCP ports: 7212, 988, 9090, and 6588 have been scanned from 218.10.111.106 Happened 10 times in 5 hours. Annoying...

I've blocked all ports to this address long ago.

Been hitting the firewall at my work every 15 minutes. This has taken down our internet access for several minutes at a time.

http://www.google.com/search?q=whois++218%2E10%2E111%2E106

After repeated port scans the day before yesterday, I turned my PC off for the night. The next day, when I rebooted my PC, it was all messed up and acting like it had a virus. I think there is a special place in hell for jerks who do this to others. I am tempted to contact the cops.

This 218.10.111.106 is bombarding my PC every day every hour. I have 13 pages of there attacks in all Ports! I have banned 218.10.111.106 but I want to know how to totally eliminate them from my PC.

He/She never appears to get any further than tripping a log report on my Belkin router and my F-Secure internet security is not reporting it at all so i assume i am surviving his attacks.

This IP has been doing multiple port scans on my IP over various ports. (Usually my local ports 9788, 1080, and 7212)

64.94.150.158, 64.94.150.134, & 64.94.150.170 was filtering encrypted data on one of my credit card websites 11/15/2008 around 2:30pm CST

18/11/2008 12:04:11 PM UDP from 218.71.136.106 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern how to free my ip from 218.71.136.106 he sent me and web attack thank you

Port scans and other garbage from this guy.

218.10.111.106 has scanned my ports all day today, once every 30 to 60 minutes. Keeps scanning ports 9090, 8090, 7212, and 988. All scans originate from port 12200. My firewall blocks them, but it's really getting tiresome.

Somebody is scanning your computer. Your computer's TCP ports: 9090, 8090, 7212, and 988 have been scanned from 218.10.111.106.. Somebody is scanning your computer. Your computer's TCP ports: 8080, 80, 1080, and 8118 have been scanned from 222.187.220.169..

Liu Zhiyong was scanning and attempting to hack my computer they have been changing configuration to my setting a they even killed my internet speed to slower than dial up - I am blocking them right now with my firewall and have called my ISP to let them know i want that ip address blocked from scanning my default gateways. Now my computer is up and running again but wow were they slowing my internet speed down... HERE IS MORE INFORMATION ABOUT THIS IP ADDRESS: ( SOMEONE STOP THIS HACKER ) inetnum: 218.7.0.0 - 218.10.255.255 netname: CNCGROUP-HL country: CN descr: CNCGROUP Heilongjiang province network admin-c: CH455-AP tech-c: LZ31-AP status: ALLOCATED PORTABLE mnt-by: APNIC-HM mnt-lower: MAINT-CNCGROUP-HL mnt-routes: MAINT-CNCGROUP-RR changed: 20031110 changed: 20040927 changed: 20050511 changed: 20060124 source: APNIC route: 218.10.0.0/16 descr: CNC Group CHINA169 Heilongjiang Province Network country: CN origin: AS4837 mnt-by: MAINT-CNCGROUP-RR changed: 20060118 source: APNIC role: CNCGroup Hostmaster e-mail: address: No.156,Fu-Xing-Men-Nei Street, address: Beijing,100031,P.R.China nic-hdl: CH455-AP phone: +86-10-82993155 fax-no: +86-10-82993102 country: CN admin-c: CH444-AP tech-c: CH444-AP changed: 20041119 mnt-by: MAINT-CNCGROUP source: APNIC person: Liu Zhiyong nic-hdl: LZ31-AP e-mail: address: Data Communication Bureau of HLJ phone: +86-451-542931 country: CN changed: 20030801 mnt-by: MAINT-CNCGROUP-HL source: APNIC

Hacker Switches Ip Address - Warning This Ip Adress Is A Spam, Hacker 60.222.224.137 The China User Uses This Same Ip Adress 218.10.111.106 THERE NAME IS: Liu Zhiyong

... and here....

Usually TCP ports 9090,8090,7212 and 988. Getting quite annoying. Multiple scans occur first thing after booting up for the day and come about 30 minutes apart. Then a couple every few hours after that. Firewall blocks them (sygate), but it's getting annoying.

This address keeps tripping MAJOR SECURITY violation as well as repeated port scans (minor) as often as every 2-3 minutes most nights it's getting real annoying!

Mostly 9080 and 8090 TCP sync packets which my firewall blocked. Added entire net range class to my IP blocked rules. Note: Those people without a firewall should buy one to prevent computer issues... at least a NAT device for passive FW protection from the Internet. :)

I HAVE HAD THIS IP FROM CHINA TRYING TO HACK MY COMPUTER. I HAVE JUST FINNISHED TALKING WITH BEIJING POLCE & INTERPOLE. MY BEST BET IS WITH BEIJING POLCE I SUGGEST EVERYONE DOES THE SAME.

I've been havin the same problems here.I cand't believe these people they are really idiots.I had enough with them.I'm not even sure that the attacks are blocked my antivirus says so but I don't know.wwhat shall I do?please write back at lara_darkness@yahoo.com.

also getting port scanned from this IP, symantec reports once every 2-5min now. The only way I can explain this IP getting through 2 firewalls is an exploit of IM software. Otherwise this user's computer has the following programs running (WinXP 32bit); Outlook, Firefox, Digsby, filezilla, Thunderbird, word, ultraedit, excel, and symantec I wrote an email to their ISP (not that they care) and sent an email to Spamhaus (not that they can do anything)

he has attacked my computer 1/25/2009 2:40:37 PM Intrusion.Win.MSSQL.worm.Helkern 218.75.199.50 UDP 1434 plz do investigation .

he has attacked my computer 1/25/2009 2:40:37 PM Intrusion.Win.MSSQL.worm.Helkern 218.75.199.50 UDP 1434 plz do investigation .