Firewall Alert
80.221.73.180 - HackAttack: [TCP SYN Flooding]
Dec 26 15:59:14 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 80.221.73.180:51328 to 80.220.22.74:54112
Dec 26 15:59:14 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 80.221.73.180:513...
91.226.212.41 - HackAttack: [TCP SYN Flooding]
Dec 26 07:14:35 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.226.212.41:40585 to 80.220.22.74:8909
Dec 26 07:14:35 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.226.212.41:4834...
188.103.250.84 - HackAttack: [SPI:Illegal connection state attack]
Dec 26 05:36:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.103.250.84 to 80.220.22.74
Dec 26 05:36:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
84.186.177.6 - HackAttack: [SPI:Illegal connection state attack]
Dec 26 05:34:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 84.186.177.6 to 80.220.22.74
Dec 26 05:34:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
114.134.159.246 - HackAttack: [SPI:Illegal connection state attack]
Dec 25 07:22:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.134.159.246 to 80.220.22.74
Dec 25 07:22:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
178.32.240.221 - HackAttack: [SPI:Illegal connection state attack]
Nov 7 17:45:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 178.32.240.221 to 80.220.22.74
Dec 21 02:17:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
113.155.154.198 - HackAttack: [SPI:Illegal connection state attack]
Dec 20 00:25:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 113.155.154.198 to 80.220.22.74
Dec 20 00:25:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
50.112.240.79 - HackAttack: [SPI:Illegal connection state attack]
Dec 18 11:19:26 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 50.112.240.79:0 to 80.220.22.74:0
Dec 19 09:24:03 HackAttack: [SPI:Illegal connection state attack] TCP packet...
Dec 17 17:35:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 5.39.8.27 to 80.220.22.74
Dec 19 04:51:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from ...
77.105.242.17 - HackAttack: [Trojan Scan]
Dec 14 13:07:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 77.105.242.17:51733 to 80.220.22.74:54321
Dec 19 02:49:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 77.105.242.17:53730 to 80.2...
1.252.115.12 - HackAttack: [SPI:Illegal connection state attack]
Dec 16 19:24:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 1.252.115.12 to 80.220.22.74
Dec 16 19:24:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
37.59.93.86 - HackAttack: [SPI:Illegal connection state attack]
Dec 4 16:49:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.93.86 to 80.220.22.74
Dec 15 19:31:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
192.168.1.6 - Port Scan Attack logged
I always get this message on my computer from my antivirus program. What is this? I get this message for a long period of time!!...
192.168.1.6 - Port Scan Attack logged
I always get this message on my computer from my antivirus program. What is this? I get this message for a long period of time!!...
192.168.1.6 - Port Scan Attack logged
I always get this message on my computer from my antivirus program. What is this? I get this message for a long period of time!!...
192.168.1.6 - Port Scan Attack logged
I always get this message on my computer from my antivirus program. What is this? I get this message for a long period of time!!...
68.232.44.253 - Port scan attempt
Dec 15 14:22:30
IDS scan parser : tcp port scan: 68.232.44.253 scanned at least 10 ports at
Wankers trying to scan my ports go to hell....
64.31.29.61 - reported with 100% proxy or spamming IP
The IP address 64.31.29.61 has been reported and now it has a 100.00% probability being a proxy or spamming IP
1 64.31.29.61 December 11th, 2012
2 64.31.29.61 December 10th, 2012
3 64.31.29.61 D...
188.138.115.206 - HackAttack: [Trojan Scan]
Dec 14 17:39:27 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.138.115.206:26607 to 80.220.22.74:54321
Dec 14 17:39:30 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.138.115.206:26607 to ...
46.55.23.55 - Trojan Scanner, Hacker, Spammer, MOLDTELECOM-NET
Doommeria@mail.ru, Bembenorbab@mail.ru, quiemotut@mail.ru
19-Sep-12 23:35 - 22-Sep-12 20:30
+120 spam items .....
http://www.stopforumspam.com/ipcheck/46.55.23.55
inetnum: 46.55.16.0 - 46.55....
abuse reports to LSN-DLLSTX-2 Limestone Networks, 69.162.105.18, 69.162.105.20
To: [abuse@limestonenetworks.com]
Subject: abuse-report-ticket#0006, malicious threat, exploit, Trojan, hacking, port sc...
178.93.49.225 - HackAttack: [Trojan Scan]
Dec 14 11:13:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 178.93.49.225:4786 to 80.220.22.74:54320
Dec 14 11:13:21 HackAttack: [Trojan Scan] TCP packet from [nas0] 178.93.49.225:4786 to 80.220...
70.115.160.78 - HackAttack: [Trojan Scan]
Dec 14 08:59:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 70.115.160.78:4477 to 80.220.22.74:54321
Dec 14 08:59:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 70.115.160.78:4477 to 80.220...
46.55.23.55 - HackAttack: [Trojan Scan]
Dec 14 02:33:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.55.23.55:56314 to 80.220.22.74:54320
Dec 14 02:33:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.55.23.55:56314 to 80.220.2...
58.218.199.227 - attackers, spy, remote control, sites spreading virus, Trojans, spyware, firewall attacks, account hijacking, CHINANET-JS reports
Attackers who try to spy or remotely control others\' computers by means such Microsoft remote terminal, SSH, Telnet or shared desktops.
Threats for email servers or users: spiders/bots, account hijac...
74.63.195.90 - Checking router logs
14 times in 2 minutes this IP address has attempted TCP connection to my workstation. Not understanding why this is happening. GIving feedback for others....
58.218.199.227 - firewall security alert
ip based in China; tcp packet. I\'m not a specialist, so I just mention this for information. It seems it has scanned my own IP. My firewall send an alert....
184.107.157.130 - HackAttack: [Trojan Scan]
Dec 13 20:04:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.107.157.130:45505 to 80.220.22.74:54321
Dec 13 20:04:41 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.107.157.130:45505 to ...
64.39.111.69 - 64.39.111.69
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: JBoss JMX Console Authentication Bypass
Attacker: 64.39.111.69:42008 ==> Victim x.x.x.x:80
Signature...
64.39.111.69 - 64.39.111.69
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: IOS HTTP Unauth Command Execution
Attacker: 64.39.111.69:43609 ==> Victim x,x,x,x:80
Signature ID: 5...
64.39.111.69 - 64.39.111.69
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: Generic SQL Injection
Attacker: 64.39.111.69:44104 ==> Victim x.x.x.x:80
Signature ID: 5930
Sub-Si...
64.39.111.69 - 64.39.111.69
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: Generic Cross Site Scripting Attack
Attacker: 64.39.111.69:42179 ==> Victim x.x.x.x:80
Signature ID:...
64.39.111.65 - 64.39.111.65
received 12/13/12
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: JBoss JMX Console Authentication Bypass
Attacker: 64.39.111.69:42008 ==> Victim x....
64.39.111.65 - 64.39.111.65
received 12/13/12
The following IDS alert has been received by Net eWare Security Monitoring :
________________________________________
Signature Name: Generic Cross Site Scripting Attack
Attacker:...
64.39.111.65 - 64.39.111.65
received 12/12/12
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: IOS HTTP Unauth Command Execution
Attacker: 64.39.111.65:57422 ==> Victim x.x.x.x:8...
64.39.111.65 - 64.39.111.65
received 12/12/12
The following IDS alert has been received by Net eWare Security Monitoring :
Signature Name: IOS HTTP Unauth Command Execution
Attacker: 64.39.111.65:57422 ==> Victim x.x.x.x:8...
78.138.126.223 - HackAttack: [SPI:Illegal connection state attack]
Dec 12 11:18:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.138.126.223 to 80.220.22.74
Dec 12 13:54:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
78.138.126.223 - HackAttack: [SPI:Illegal connection state attack]
Dec 12 05:47:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.138.126.223 to 80.220.22.74
Dec 12 06:37:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
78.138.126.223 - HackAttack: [SPI:Illegal connection state attack]
Dec 11 22:46:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.138.126.223 to 80.220.22.74
Dec 12 03:24:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
210.4.15.236 - HackAttack: [Trojan Scan]
Dec 11 17:40:46 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:11061 to 80.220.22.74:54320
Dec 11 17:40:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:11061 to 80.220...
210.4.15.83 - HackAttack: [Trojan Scan]
Dec 11 17:03:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.83:5799 to 80.220.22.74:54320
Dec 11 17:04:41 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.83:5799 to 80.220.22....
210.4.15.233 - HackAttack: [Trojan Scan]
Dec 11 16:15:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:22978 to 80.220.22.74:54320
Dec 11 16:15:07 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:22978 to 80.220...
210.4.15.81 - HackAttack: [Trojan Scan]
Dec 11 15:54:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.81:17417 to 80.220.22.74:54320
Dec 11 15:55:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.81:17417 to 80.220.2...
210.4.15.236 - HackAttack: [Trojan Scan]
Dec 11 15:12:59 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:16902 to 80.220.22.74:54320
Dec 11 15:13:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:16902 to 80.220...
210.4.15.233 - HackAttack: [Trojan Scan]
Dec 11 15:12:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:64097 to 80.220.22.74:54320
Dec 11 15:12:34 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:64097 to 80.220...
210.4.15.81 - HackAttack: [Trojan Scan]
Dec 11 15:00:21 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.81:40532 to 80.220.22.74:54320
Dec 11 15:00:24 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.81:40532 to 80.220.2...
182.208.94.68 - HackAttack: [SPI:Illegal connection state attack]
Dec 11 04:11:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 182.208.94.68 to 80.220.22.74
Dec 11 04:11:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
210.4.15.234 - HackAttack: [Trojan Scan]
Dec 10 19:46:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:7665 to 80.220.22.74:54320
Dec 10 19:46:59 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:7665 to 80.220.2...
210.4.15.230 - HackAttack: [Trojan Scan]
Dec 10 06:50:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:46975 to 80.220.22.74:54320
Dec 10 06:50:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:46975 to 80.220...
210.4.15.236 - HackAttack: [Trojan Scan]
Dec 10 06:37:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:53038 to 80.220.22.74:54320
Dec 10 06:37:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:53038 to 80.220...
210.4.15.235 - HackAttack: [Trojan Scan]
Dec 10 06:15:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.235:45550 to 80.220.22.74:54320
Dec 10 06:15:59 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.235:45550 to 80.220...
210.4.15.231 - HackAttack: [Trojan Scan]
Dec 10 05:36:16 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.231:45215 to 80.220.22.74:54320
Dec 10 05:36:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.231:45215 to 80.220...
210.4.15.230 - HackAttack: [Trojan Scan]
Dec 10 05:18:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:15628 to 80.220.22.74:54320
Dec 10 05:18:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:15628 to 80.220...
89.73.79.73 - HackAttack: [Trojan Scan]
Dec 10 00:11:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 89.73.79.73:58763 to 80.220.22.74:54321
Dec 10 00:11:45 HackAttack: [Trojan Scan] TCP packet from [nas0] 89.73.79.73:58763 to 80.220.2...
188.138.115.206 - Blackhatworld Gimme4Free Pinterest Bot Cracked, HackAttack, Trojan Scan, Forum Spammer
Blackhatworld Gimme4Free Pinterest Bot Cracked - cookie9886@live.com
PinProfits - kaci_kennedy@aol.com
patriot acts narratives of post-9 11 injustice ==> jhall8405@sbcglobal.net
Gimme4Free Pinteres...
188.138.115.206 - HackAttack: [Trojan Scan]
Dec 9 21:47:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.138.115.206:38454 to 80.220.22.74:54321
Dec 9 21:47:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.138.115.206:38454 to ...
175.196.161.70 - HackAttack: [SPI:Illegal connection state attack]
Dec 9 19:32:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 175.196.161.70 to 80.220.22.74
Dec 9 19:32:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
61.183.248.222 - Sites spreading virus, trojans, spyware, threats for servers: exploits, fake identities/agents, DDoS attackers
Warning: Quarantined. IP/Hostname/Website found involved in various Dangerous/Suspicious activities.
Attackers who try to spy or remotely control others\' computers by means such Microsoft remote te...
61.183.248.222 - HackAttack: [Trojan Scan]
[INFO] Sat Dec 08 20:57:57 2012 Blocked incoming TCP connection request from 61.183.248.222:30628 to 109.173.114.61:32461
[INFO] Sat Dec 08 20:57:48 2012 Above message repeated 2 times
[INFO] Sat Dec ...
61.183.248.222 - HackAttack: [Trojan Scan]
[INFO] Sat Dec 08 20:57:57 2012 Blocked incoming TCP connection request from 61.183.248.222:30628 to 109.173.114.61:32461
[INFO] Sat Dec 08 20:57:48 2012 Above message repeated 2 times
[INFO] Sat Dec ...
61.183.248.222 - HackAttack: [Trojan Scan]
[INFO] Sat Dec 08 20:57:57 2012 Blocked incoming TCP connection request from 61.183.248.222:30628 to 109.173.114.61:32461
[INFO] Sat Dec 08 20:57:48 2012 Above message repeated 2 times
[INFO] Sat Dec ...
174.139.148.148 - HackAttack: [Trojan Scan] + [Net Bus Scan]
Dec 8 13:51:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:2364 to 80.220.22.74:54321
Dec 8 13:51:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:2364 to 80...
95.27.98.209 - HackAttack: [Trojan Scan]
Dec 8 12:42:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.27.98.209:60194 to 80.220.22.74:54320
Dec 8 12:42:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.27.98.209:60194 to 80.220...
174.139.148.148 - HackAttack: [Net Bus Scan]
Dec 8 08:04:15 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.139.148.148:2632 to 80.220.22.74:12345
Dec 8 08:04:18 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.139.148.148:2632 to ...
178.18.16.66 - Break and enter or trying to enter system without permission
FiberMax Networks BV tried to enter my computer without my knowledge and or permission and so this would of been a breach of privacy and against the Law in the United States and my own country.
My F...
174.139.148.148 - HackAttack: [Trojan Scan]
Dec 8 05:40:30 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:3490 to 80.220.22.74:54321
Dec 8 05:40:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:3490 to 80...
174.139.148.148 - HackAttack: [Trojan Scan]
Dec 7 21:49:35 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:4851 to 80.220.22.74:54320
Dec 7 21:49:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:4851 to 80...
89.73.79.73 - HackAttack: [Trojan Scan]
Dec 7 15:58:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 89.73.79.73:55334 to 80.220.22.74:54321
Dec 7 15:58:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 89.73.79.73:55334 to 80.220.2...
142.4.60.51 - HackAttack: [Net Bus Scan] + [Trojan Scan]
Dec 7 00:18:15 HackAttack: [Net Bus Scan] TCP packet from [nas0] 142.4.60.51:3946 to 80.220.22.74:12345
Dec 7 00:18:18 HackAttack: [Net Bus Scan] TCP packet from [nas0] 142.4.60.51:3946 to 80.220.2...
187.45.180.205 - HackAttack: [Trojan Scan]
Dec 6 15:58:56 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:52932 to 80.220.22.74:54321
Dec 6 15:58:56 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:52931 to 80...
187.45.180.205 - spam fraud blacklist 187.45.180.205, 187.37.77.140, 187.38.132.132 ,187.38.65.200, 187.40.136.22, 187.40.144.192, 187.40.165.195
... 187.37.77.140, 187.38.132.132 ,187.38.65.200, 187.40.136.22, 187.40.144.192, 187.40.165.195, 187.45.180.205
http:///wwwblacklist.ict-health.be/blacklist.php
Spam block list, August 2012. ... 181....
187.45.180.205 - HackAttack: [Trojan Scan]
Dec 6 14:01:04 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:55596 to 80.220.22.74:54321
Dec 6 14:01:04 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:55597 to 80...
103.13.241.2 - HackAttack: [Trojan Scan]
Dec 6 13:57:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 103.13.241.2:52060 to 80.220.22.74:54321
Dec 6 13:57:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 103.13.241.2:52058 to 80.220...
103.13.241.2 - HackAttack: [Trojan Scan]
Dec 6 12:43:21 HackAttack: [Trojan Scan] TCP packet from [nas0] 103.13.241.2:54295 to 80.220.22.74:54321
Dec 6 12:43:21 HackAttack: [Trojan Scan] TCP packet from [nas0] 103.13.241.2:54293 to 80.220...
174.139.148.148 - HackAttack: [Trojan Scan]
Dec 6 11:15:07 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:2701 to 80.220.22.74:31337
Dec 6 11:15:10 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:2701 to 80...
116.199.127.114 - multiple DOS UDP Packet
constant DOS UDP Packet warnings received from router regarding this address...over 250 in 24hrs. This IP adress seems to be ranging and revloving last element of IP to try and access router.
...
46.105.8.33 - HackAttack: [Trojan Scan]
Dec 5 20:55:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.105.8.33:50601 to 80.220.22.74:54320
Dec 5 20:55:35 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.105.8.33:50601 to 80.220.2...
210.4.15.235 - HackAttack: [Trojan Scan]
Dec 5 08:06:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.235:34985 to 80.220.22.74:54320
Dec 5 08:06:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.235:34985 to 80.220...
210.4.15.234 - HackAttack: [Trojan Scan]
Dec 5 07:43:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:39060 to 80.220.22.74:54320
Dec 5 07:43:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:39060 to 80.220...
210.4.15.229 - HackAttack: [Trojan Scan]
Dec 5 07:23:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:61255 to 80.220.22.74:54320
Dec 5 07:23:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:61255 to 80.220...
210.4.15.234 - HackAttack: [Trojan Scan]
Dec 5 07:09:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:8886 to 80.220.22.74:31337
Dec 5 07:09:09 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:8886 to 80.220.2...
210.4.15.234 - HackAttack: [Trojan Scan] + [Net Bus Scan]
Dec 5 06:22:17 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:3332 to 80.220.22.74:54320
Dec 5 06:22:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:3332 to 80.220.2...
210.4.15.238 - HackAttack: [Trojan Scan]
Dec 5 05:25:10 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.238:32066 to 80.220.22.74:54320
Dec 5 05:25:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.238:32066 to 80.220...
174.139.148.148 - HackAttack: [Net Bus Scan]
Dec 4 23:02:49 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.139.148.148:2580 to 80.220.22.74:12345
Dec 4 23:02:52 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.139.148.148:2580 to ...
93.170.127.96 - brute force attack on port 53
This IP is constantly trying to reach our port 53 for some reasons. This has been going one for many many weeks. Impossible to contact them.
...
174.139.148.148 - HackAttack: [Trojan Scan]
Dec 3 21:55:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:2447 to 80.220.22.74:54320
Dec 3 21:55:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:2447 to 80...
174.139.148.148 - HackAttack: [Net Bus Scan]
Dec 3 00:37:58 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.139.148.148:1689 to 80.220.22.74:12345
Dec 3 00:38:01 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.139.148.148:1689 to ...
121.92.157.252 - HackAttack: [SPI:Illegal connection state attack]
Dec 1 20:03:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 121.92.157.252 to 80.220.22.74
Dec 1 20:03:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
192.168.1.23 - samp
samp JJJRLK UKJHU UHESUIHSET UHISUDHFIUSEFH UIHSEFDFSNEUIR UHEISUFDDNJDSNF UIEHSNDJK NSEIUS KSEFN ISEIHS SJJENBI BIBSKBHISUEIH IESIHIU HESI UISEIB BSEIUF HBESFUESBIH BUSEN OSSB IEJII JJEIOBIJ IEB HSEI...
199.30.80.32 - Firewall Port Scan
Getting tired of these guy\'s. Looks like I\'m not the only one. IPillion you are in violation with the law and amendment.
You as a company and business structure,
are not p...
60.168.125.152 - Failed attempt at getting to me through gmail
This person has tried to get through into my account through one of my authorised apps that i have used. This was stopped by gmail thanks to his ip being untrusted....
23.22.46.237 - HackAttack: [Trojan Scan]
Nov 29 20:48:17 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:56648 to 80.220.22.74:31337
Nov 29 20:48:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:56648 to 80.220...
23.22.46.237 - HackAttack: [Net Bus Scan] + [Trojan Scan]
Nov 29 17:32:10 HackAttack: [Net Bus Scan] TCP packet from [nas0] 23.22.46.237:58486 to 80.220.22.74:12345
Nov 29 17:32:13 HackAttack: [Net Bus Scan] TCP packet from [nas0] 23.22.46.237:58486 to 80.2...
23.22.46.237 - HackAttack: [Trojan Scan]
Nov 29 13:53:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:59795 to 80.220.22.74:1243
Nov 29 13:53:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:59795 to 80.220....
210.4.15.234 - HackAttack: [Trojan Scan]
Nov 29 13:51:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:57369 to 80.220.22.74:54320
Nov 29 13:51:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:57369 to 80.220...
210.4.15.234 - HackAttack: [Trojan Scan]
Nov 29 10:06:48 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:32292 to 80.220.22.74:54320
Nov 29 10:06:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:32292 to 80.220...
211.143.61.53 - Network Attack Intrusion
UDP от 211.143.61.53 to local port 1434 Forbidden : Intrusion.Win.MSSQL.worm.Helkern 29.11.2012 10:46:12
UDP от 211.143.61.53 to local port 1434 Forbidden...
25.191.93.49 - intruders on my network
This ip is hitting my network 3 times a minute. WHY?!? Photo here:
http://www.facebook.com/photo.php?fbid=3766539684437&set=a.1051864859263.2008562.1305023843&type=1&theater My profile is ...
72.44.80.57 - HackAttack: [Trojan Scan]
Nov 28 20:43:49 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:54650 to 80.220.22.74:54320
Nov 28 20:43:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:54650 to 80.220.2...
70.38.118.34 - HackAttack: [SPI:Illegal connection state attack]
Nov 28 20:42:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 70.38.118.34 to 80.220.22.74
Nov 28 20:42:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
72.44.80.57 - HackAttack: [Trojan Scan]
Nov 28 20:34:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:35235 to 80.220.22.74:54320
Nov 28 20:34:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:35235 to 80.220.2...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 28 03:08:05 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:51716 to 80.220.22.74:54321
Nov 28 03:08:08 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:51716 to 80.2...
67.222.12.123 - HackAttack: [Trojan Scan] + [Net Bus Scan]
Nov 27 23:40:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:51452 to 80.220.22.74:54320
Nov 27 23:40:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:51452 to 80.2...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 27 20:27:09 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:39789 to 80.220.22.74:31337
Nov 27 20:27:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:39789 to 80.2...
67.212.233.132 - HackAttack: [SPI:Illegal connection state attack]
Nov 11 21:18:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.212.233.132 to 80.220.22.74
Nov 27 18:21:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
119.240.250.237 - HackAttack: [SPI:Illegal connection state attack]
Nov 27 06:31:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 119.240.250.237 to 80.220.22.74
Nov 27 06:31:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
50.97.97.41 - HackAttack: [SPI:Illegal connection state attack]
Sep 8 09:12:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.97.41 to 80.220.22.74
Nov 24 12:29:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
192.241.10.67 - HackAttack: [SPI:Illegal connection state attack]
Nov 24 02:48:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 192.241.10.67 to 80.220.22.74
Nov 24 02:49:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
204.45.55.17 - HackAttack: [SPI:Illegal connection state attack]
Nov 18 20:04:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 204.45.55.17 to 80.220.22.74
Nov 23 07:01:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
209.208.63.225 - HackAttack: [SPI:Illegal connection state attack]
Nov 20 18:03:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 209.208.63.225 to 80.220.22.74
Nov 23 16:13:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
198.15.86.226 - HackAttack: [SPI:Illegal connection state attack]
Nov 18 23:09:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.15.86.226 to 80.220.22.74
Nov 19 00:19:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
198.15.86.226 - HackAttack: [SPI:Illegal connection state attack]
Nov 18 23:09:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.15.86.226 to 80.220.22.74
Nov 19 00:19:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
213.186.121.82 - firewall attack alert
I am receiving several firewall attacks alerts from this ip.
213.186.121.82
both malware pro and norton 360 giving alert messages . in min numerous and continuous alert without surfing net....
173.245.58.120 - DNS cache poisining attack.
ESET has intercepted numerous DNS cache poisining attacks from this particular IP address over the past several months to my home computer janenc@rogers.com
Please look into this.
Thank you...
173.245.59.118 - DNS cache poisining attack
ESET firewall has intercepted numerous DNS cache poisining attacks to my home computer janenc@rogers.com from this particular IP address over the past few months.
Please look into this.
Thank you...
194.8.75.57 - cache poisining attack
ESET security has blocked numerous cache poisining attacks from this IP address unto my home computer janenc@rogers.com. This has been going on for several months.
Thank you...
94.23.40.212 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 00:04:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.23.40.212 to 80.220.22.74
Nov 18 01:42:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
66.75.239.149 - HackAttack: [SPI:Illegal connection state attack]
Nov 18 01:35:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.75.239.149 to 80.220.22.74
Nov 18 01:35:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
78.47.198.219 - HackAttack: [TCP SYN Flooding]
Nov 17 00:47:50 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 78.47.198.219:6660 to 80.220.22.74:6660
Nov 17 00:47:50 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 78.47.198.219:6666 ...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 16 17:19:45 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:58811 to 80.220.22.74:54320
Nov 16 17:19:48 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:58811 to 80.2...
75.82.154.30 - HackAttack: [SPI:Illegal connection state attack]
Nov 16 16:39:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.82.154.30 to 80.220.22.74
Nov 16 16:39:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 16 16:23:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:46203 to 80.220.22.74:54321
Nov 16 16:23:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:46203 to 80.2...
59.57.137.89 - HackAttack: [SPI:Illegal connection state attack]
Nov 16 16:06:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 59.57.137.89 to 80.220.22.74
Nov 16 16:06:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 16 15:56:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:37266 to 80.220.22.74:31337
Nov 16 15:56:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:37266 to 80.2...
72.44.80.57 - HackAttack: [Trojan Scan]
Nov 16 12:06:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:50812 to 80.220.22.74:54320
Nov 16 12:06:04 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:50812 to 80.220.2...
87.106.97.207 - HackAttack: [TCP SYN Flooding]
Nov 16 01:33:24 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 87.106.97.207:64987 to 80.220.22.74:5905
Nov 16 01:33:24 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 87.106.97.207:6498...
94.23.117.104 - HackAttack: [SPI:Illegal connection state attack]
Oct 15 17:46:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.23.117.104 to 80.220.22.74
Nov 16 00:42:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
188.227.184.179 - HackAttack: [SPI:Illegal connection state attack]
Nov 7 22:32:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.227.184.179 to 80.220.22.74
Nov 15 21:10:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
175.139.36.86 - HackAttack: [SPI:Illegal connection state attack]
Nov 15 19:11:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 175.139.36.86 to 80.220.22.74
Nov 15 19:11:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
85.71.127.76 - firewall icmp check
firewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall i...
119.70.194.28 - Firewall icmp check
Firewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall i...
184.170.16.35 - firewall icmp check
firewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall i...
88.135.170.228 - firewall icmp checker
firewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall ic...
98.246.232.40 - firewall icmp check
firewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall i...
188.126.44.153 - Firewall icmp check
Firewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall icmp checkFirewall i...
1.239.113.25 - firewall checker
firewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall checkerfirewall...
80.223.2.172 - firewall icmp checker
firewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall icmp checkerfirewall ic...
67.220.32.190 - firewall icmp check
firewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall icmp checkfirewall i...
174.2.45.166 - firewall icmp check
firewall check firewall check firewall check firewall check firewall check firewall check firewall check firewall check firewall check firewall check firewall check firewall check firewall check firew...
114.108.217.228 - Firewall icmp
Firewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirewall icmpFirew...
217.209.216.231 - Firewall alert
Firewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFirewall alertFire...
210.4.15.228 - HackAttack: [Trojan Scan] + [Net Bus Scan]
Nov 15 00:40:53 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.228:29437 to 80.220.22.74:54321
Nov 15 00:40:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.228:33056 to 80.220...
This was what I found in my routers log after I lost the connection to a movie I was watching. This has been happening a lot from different IP addresses now....
50.23.224.106 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 03:55:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.23.224.106 to 80.220.22.74
Nov 14 06:58:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
174.139.148.148 - HackAttack: [Trojan Scan]
Nov 14 00:45:24 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:3546 to 80.220.22.74:54320
Nov 14 00:45:27 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.148.148:3546 to 80...
50.23.224.106 - HackAttack: [SPI:Illegal connection state attack]
Nov 13 20:06:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.23.224.106 to 80.220.22.74
Nov 13 21:28:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
37.220.0.182 - HackAttack: [SPI:Illegal connection state attack]
Nov 13 02:47:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.220.0.182 to 80.220.22.74
Nov 13 05:36:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
217.23.9.140 - Virus connection
A virus I\'ve been trying to remove from my computer keeps trying to connect to this IP and one other IP address. I have no idea what the deal is but its very annoying! ...
199.36.74.219 - HackAttack: [SPI:Illegal connection state attack]
Nov 11 15:35:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 199.36.74.219 to 80.220.22.74
Nov 12 06:03:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
116.80.172.18 - HackAttack: [SPI:Illegal connection state attack]
Nov 12 01:42:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 116.80.172.18 to 80.220.22.74
Nov 12 01:42:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
72.44.80.57 - HackAttack: [Net Bus Scan] + [Trojan Scan]
Nov 11 21:35:18 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:44601 to 80.220.22.74:12345
Nov 11 21:35:19 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:44601 to 80.220...
209.46.83.138 - Intrusion.Win.MSSQL.worm.Helkern
Having multiple intrusion attempts from this IP and others similar to it. Kaspersky Internet Security reports:
UDP from 209.46.83.138 to local port 1434
Denied: Intrusion.Win.MSSQL.worm.Helkern
I\'m...
72.44.80.57 - HackAttack: [Net Bus Scan]
Nov 11 21:09:08 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:42652 to 80.220.22.74:12345
Nov 11 21:09:09 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:42652 to 80.220...
202.239.224.127 - HackAttack: [SPI:Illegal connection state attack]
Nov 11 13:41:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 202.239.224.127 to 80.220.22.74
Nov 11 13:41:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
209.46.83.138 - Intrusion.Win.MSSQL.worm.Helkern
I had network attack /Intrusion.Win.MSSQL.worm.Helkern from 209.46.83.138
at 11/11/2012 2:47:50 trying to use port 1434 the attack was denied I am not sure where it came form , it said it came fro...
210.1.176.11 - HackAttack: [SPI:Illegal connection state attack]
Nov 11 04:38:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 210.1.176.11 to 80.220.22.74
Nov 11 04:40:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
37.9.53.2 - ssh attacks
alert from Little Snitch comes up
Nov 9 03:37:53 eugeniozs-iMac.local socketfilterfw[249] <Info>: Allow screensharingd connecting from 37.9.53.2:58432 to port 5900 proto=6
Nov 9 12:25:29 eugen...
85.159.237.4 - HackAttack: [SPI:Illegal connection state attack]
Nov 10 12:55:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 85.159.237.4 to 80.220.22.74
Nov 10 12:55:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
72.44.80.57 - HackAttack: [Trojan Scan]
Nov 9 23:21:51 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:48383 to 80.220.22.74:54320
Nov 9 23:21:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:48383 to 80.220.2...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 8 21:34:18 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:45923 to 80.220.22.74:31337
Nov 8 21:34:21 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:45923 to 80.2...
67.222.12.123 - HackAttack: [Trojan Scan]
Nov 8 17:21:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:42752 to 80.220.22.74:54321
Nov 8 17:21:41 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:42752 to 80.2...
123.185.26.235 - Malformed or unhandled IP packet dropped
Get 100 of Malformed or unhandled IP packet dropped Protocol 17 hitting IP address 65.254.111.249, 10243 on My Firewall. IP address was traced back to China.
11/07/2012 19:30:43.240 Alert Network Acc...
85.198.130.132 - A new one for me from this location
3 attempts 2 minutes apart then silent for a few minutes.
Thu Nov 8 09:11:36 2012
=>Found attack from 85.198.130.132.
Use the ICMP protocol.
Thu Nov 8 09:11:38 2012
=>Found attack from 85.198.1...
58.218.199.227 - Continous every day
Thu Nov 8 08:54:36 2012
=>Found attack from 58.218.199.227.
Source port is 12200 and destination port is 8090 which use the TCP protocol.
Thu Nov 8 08:54:36 2012
=>Found attack from 58.218.199.2...
121.245.225.142 - A first from this one
Thu Nov 8 09:03:53 2012
=>Found attack from 121.245.222.103.
Source port is 59316 and destination port is 23 which use the TCP protocol.
Thu Nov 8 09:04:23 2012
=>Found attack from 121.245.225.1...
108.61.53.59 - Continuous ICMP ping
We have been under pinging attack from this IP for more than three days.
ICMP ping id=0! From 108.61.53.59
ICMP ping id=0! From 108.61.53.59
ICMP ping id=0! From 108.61.53.59 ...
188.138.101.206 - HackAttack: [SPI:Illegal connection state attack]
Nov 7 18:28:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.138.101.206 to 80.220.22.74
Nov 7 18:48:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
108.61.53.59 - HackAttack: [SPI:Illegal connection state attack]
Nov 6 15:55:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.61.53.59 to 80.220.22.74
Nov 7 03:02:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
209.18.47.61 - tried hacking my system
No.001 Nov 5 05:05:49 - [Firewall Log-PORT SCAN] UDP Packet - 209.18.47.61 --> 74.67.182.72
No.002 Nov 5 05:05:49 - [Firewall Log-PORT SCAN] UDP Packet - 209.18.47.61 --> 74.67.182.72
No.0...
208.115.234.210 - HackAttack: [SPI:Illegal connection state attack]
Nov 6 19:47:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 208.115.234.210 to 80.220.22.74
Nov 6 20:47:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
210.4.15.234 - HackAttack: [Trojan Scan]
Nov 6 15:10:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:16804 to 80.220.22.74:54320
Nov 6 15:10:51 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:16804 to 80.220...
118.163.123.126 - HackAttack: [Trojan Scan]
Nov 6 14:16:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 118.163.123.126:48455 to 80.220.22.74:54320
Nov 6 14:16:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 118.163.123.126:48455 to ...
210.4.15.231 - HackAttack: [Trojan Scan]
Nov 6 13:27:07 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.231:11350 to 80.220.22.74:54320
Nov 6 13:27:10 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.231:11350 to 80.220...
210.4.15.233 - HackAttack: [Trojan Scan]
Nov 6 13:15:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:36145 to 80.220.22.74:54320
Nov 6 13:15:09 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:36145 to 80.220...
210.4.15.229 - HackAttack: [Trojan Scan]
Nov 6 10:05:16 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:19461 to 80.220.22.74:54320
Nov 6 10:05:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:1858 to 80.220....
210.4.15.236 - HackAttack: [Trojan Scan]
Nov 6 09:42:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:3802 to 80.220.22.74:54320
Nov 6 09:42:53 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:3802 to 80.220.2...
210.4.15.234 - HackAttack: [Trojan Scan]
Nov 6 09:32:05 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:19621 to 80.220.22.74:1243
Nov 6 09:32:10 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:19621 to 80.220....
210.4.15.229 - HackAttack: [Trojan Scan]
Nov 6 09:03:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:22793 to 80.220.22.74:54320
Nov 6 09:03:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:22793 to 80.220...
210.4.15.237 - HackAttack: [Trojan Scan]
Nov 6 07:09:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:40360 to 80.220.22.74:1243
Nov 6 07:09:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:45110 to 80.220....
118.163.123.126 - HackAttack: [Trojan Scan]
Nov 6 07:00:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 118.163.123.126:23838 to 80.220.22.74:1243
Nov 6 07:00:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 118.163.123.126:23838 to 8...
210.4.15.237 - HackAttack: [Trojan Scan]
Nov 6 06:36:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:1420 to 80.220.22.74:54320
Nov 6 06:36:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:1420 to 80.220.2...
210.4.15.238 - HackAttack: [Trojan Scan]
Nov 6 06:14:10 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.238:15265 to 80.220.22.74:1243
Nov 6 06:14:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.238:15265 to 80.220....
210.4.15.230 - HackAttack: [Trojan Scan]
Nov 6 06:06:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:22577 to 80.220.22.74:54320
Nov 6 06:07:01 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:22577 to 80.220...
210.4.15.234 - HackAttack: [Trojan Scan]
Nov 6 06:05:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:54528 to 80.220.22.74:54320
Nov 6 06:05:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:54528 to 80.220...
210.4.15.238 - HackAttack: [Trojan Scan]
Nov 6 05:56:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.238:17811 to 80.220.22.74:31337
Nov 6 05:56:27 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.238:17811 to 80.220...
210.4.15.234 - HackAttack: [Trojan Scan]
Nov 6 05:50:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:63080 to 80.220.22.74:54320
Nov 6 05:50:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:63080 to 80.220...
41.98.175.103 - HackAttack: [SPI:Illegal connection state attack]
Nov 5 19:05:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.98.175.103 to 80.220.22.74
Nov 5 19:05:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
69.64.32.45 - HackAttack: [SPI:Illegal connection state attack]
May 14 23:42:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.64.32.45 to 80.220.22.74
Nov 5 08:14:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
68.68.27.31 - HackAttack: [SPI:Illegal connection state attack]
Nov 3 08:37:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.27.31 to 80.220.22.74
Nov 4 14:22:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
218.1.4.113 - HackAttack: [SPI:Illegal connection state attack]
Mar 10 20:43:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 218.1.4.113 to 80.220.22.74
Nov 4 09:36:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
5.39.122.75 - HackAttack: [SPI:Illegal connection state attack]
Nov 3 18:12:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 5.39.122.75 to 80.220.22.74
Nov 4 05:23:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
74.121.136.126 - Router Service blocked: ICMP_echo_req] from source 74.121.136.126
the 74.121.136.*** where *** represents a number of octets, .86, .89, .125, .126, maybe more. IPs owned by Media Math, some kind of advertising tracker company. Hits my router a couple of times a m...
17.173.254.223 - Firewall alerts from the said IP
The said IP is hitting our firewall with a huge volume of traffic on multiple UDP ports such as 48460
16403
35639
56805
Please take the necessary action.
Thanks a lot....
80.241.209.45 - HackAttack: [SPI:Illegal connection state attack]
Nov 3 08:21:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 80.241.209.45 to 80.220.22.74
Nov 3 15:38:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
107.21.155.163 - HackAttack: [Trojan Scan]
Nov 2 23:04:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 107.21.155.163:49401 to 80.220.22.74:54320
Nov 2 23:04:09 HackAttack: [Trojan Scan] TCP packet from [nas0] 107.21.155.163:49401 to 80...
61.185.238.233 - Network attack intrusion
UDP from 61.185.238.233 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern 10/29/2012 1:55:17 PM
Kaspersky bloked
I smell something bad about 119.142.38.154 ip - scamed my gmail account (gm...
74.206.235.92 - HackAttack: [SPI:Illegal connection state attack]
Nov 2 02:19:36 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 74.206.235.92:0 to 80.220.22.74:0
Nov 2 16:34:11 HackAttack: [SPI:Illegal connection state attack] TCP packet ...
76.10.221.163 - HackAttack: [SPI:Illegal connection state attack]
Nov 2 12:17:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.10.221.163 to 80.220.22.74
Nov 2 12:56:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
210.4.15.228 - HackAttack: [Trojan Scan]
Nov 2 11:14:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.228:54202 to 80.220.22.74:54320
Nov 2 11:14:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.228:54202 to 80.220...
210.4.15.233 - HackAttack: [Trojan Scan]
Nov 2 10:23:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:7630 to 80.220.22.74:54320
Nov 2 10:23:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:7630 to 80.220.2...
74.206.235.92 - HackAttack: [SPI:Illegal connection state attack]
Nov 1 08:01:41 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 74.206.235.92:0 to 80.220.22.74:0
Nov 1 17:06:49 HackAttack: [SPI:Illegal connection state attack] TCP packet...
89.41.60.234 - HackAttack: [SPI:Illegal connection state attack]
Oct 12 13:05:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 89.41.60.234 to 80.220.22.74
Nov 1 09:55:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
68.68.27.32 - HackAttack: [SPI:Illegal connection state attack]
Oct 31 22:30:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.27.32 to 80.220.22.74
Oct 31 22:57:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
68.68.27.32 - HackAttack: [SPI:Illegal connection state attack]
Oct 24 11:41:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.27.32 to 80.220.22.74
Oct 31 04:24:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
107.21.155.163 - HackAttack: [Trojan Scan]
Oct 31 04:23:51 HackAttack: [Trojan Scan] TCP packet from [nas0] 107.21.155.163:51832 to 80.220.22.74:31337
Oct 31 04:23:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 107.21.155.163:51832 to 80...
106.189.74.25 - HackAttack: [SPI:Illegal connection state attack]
Oct 31 02:50:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 106.189.74.25 to 80.220.22.74
Oct 31 02:50:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
107.21.155.163 - HackAttack: [Net Bus Scan]
Oct 30 21:36:50 HackAttack: [Net Bus Scan] TCP packet from [nas0] 107.21.155.163:63700 to 80.220.22.74:12345
Oct 30 21:36:53 HackAttack: [Net Bus Scan] TCP packet from [nas0] 107.21.155.163:63700 to ...
113.53.65.240 - HackAttack: [SPI:Illegal connection state attack]
Oct 30 17:05:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 113.53.65.240 to 80.220.22.74
Oct 30 17:05:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
107.21.155.163 - HackAttack: [Trojan Scan]
Oct 30 08:51:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 107.21.155.163:59235 to 80.220.22.74:1243
Oct 30 08:51:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 107.21.155.163:59235 to 80....
198.15.115.4 - HackAttack: [SPI:Illegal connection state attack]
Oct 30 03:38:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.15.115.4 to 80.220.22.74
Oct 30 05:40:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
108.60.135.53 - HackAttack: [SPI:Illegal connection state attack]
Oct 29 20:59:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.60.135.53 to 80.220.22.74
Oct 29 21:22:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
72.44.80.57 - HackAttack: [Trojan Scan]
Oct 29 19:33:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:48705 to 80.220.22.74:54320
Oct 29 19:33:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:48705 to 80.220.2...
67.222.12.123 - HackAttack: [Trojan Scan]
Oct 29 14:40:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:59692 to 80.220.22.74:1243
Oct 29 14:40:29 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:59692 to 80.22...
210.4.15.231 - HackAttack: [Trojan Scan]
Oct 29 09:19:56 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.231:5886 to 80.220.22.74:54320
Oct 29 09:19:59 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.231:5886 to 80.220.2...
210.4.15.237 - HackAttack: [Trojan Scan]
Oct 29 09:10:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:1936 to 80.220.22.74:54320
Oct 29 09:10:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:1936 to 80.220.2...
67.195.186.237 - tcp attack using 5140 port
tcp attack using 5140 port
tcp attack using 5140 port
tcp attack using 5140 port
tcp attack using 5140 port
tcp attack using 5140 port
tcp attack using 5140 port
tanx
...
64.34.169.244 - Inbound Attack Using TCP 4873
Inbound Attack Using TCP port 4873 and 4872 , please check this ip
Inbound Attack Using TCP port 4873 and 4872 , please check this ip
tanx...
210.4.15.234 - HackAttack: [Trojan Scan]
Oct 29 07:23:16 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:14478 to 80.220.22.74:54320
Oct 29 07:23:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:14478 to 80.220...
210.4.15.229 - HackAttack: [Trojan Scan]
Oct 29 07:18:48 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:19724 to 80.220.22.74:54320
Oct 29 07:18:51 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.229:19724 to 80.220...
174.127.99.105 - HackAttack: [SPI:Illegal connection state attack]
Oct 29 03:48:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.127.99.105 to 80.220.22.74
Oct 29 08:25:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
188.40.84.144 - HackAttack: [SPI:Illegal connection state attack]
Oct 22 18:58:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.40.84.144 to 80.220.22.74
Oct 28 22:42:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
5.39.122.75 - HackAttack: [SPI:Illegal connection state attack]
Oct 27 17:51:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 5.39.122.75 to 80.220.22.74
Oct 28 22:11:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
72.44.80.57 - HackAttack: [Trojan Scan]
Oct 28 18:37:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:33504 to 80.220.22.74:1243
Oct 28 18:37:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:33504 to 80.220.22...
188.227.177.3 - HackAttack: [Net Bus Scan] + [Trojan Scan]
Oct 28 15:47:12 HackAttack: [Net Bus Scan] TCP packet from [nas0] 188.227.177.3:50869 to 80.220.22.74:12345
Oct 28 15:47:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.227.177.3:50894 to 80....
206.161.121.126 - 206.161.121.126
malwarebytes keeps blocking this website206.161.121.126 : it\'s very ANNOYING. how do you get this website to stop attacking my computer. It keeps popping up every fewminutes....
125.65.110.90 - 125.65.110.90 port scanning
Had a couple of Firewall alerts from 125.65.110.90 thus-:
Somebody is scanning your computer.
Your computer\'s TCP ports:
80, 8080, 8888, and 8000 have been scanned from 125.65.110.90..
...
174.59.31.241 - HackAttack: [Net Bus Scan] + [Trojan Scan] + [TCP SYN Flooding]
Oct 27 15:57:50 HackAttack: [Net Bus Scan] TCP packet from [nas0] 174.59.31.241:62716 to 80.220.22.74:12345
Oct 27 15:57:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.59.31.241:62720 to 80....
91.226.212.41 - HackAttack: [TCP SYN Flooding]
Oct 27 00:57:10 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.226.212.41:54871 to 80.220.22.74:80
Oct 27 00:57:10 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.226.212.41:38406 ...
67.228.102.243 - NETGEAR *Security Alert* [65:10:34]
2012-10-27 04:02:52 - Full Sapu Scan - Source: 67.228.102.243,80, WAN - Destination:72.64.68.181, 13294, LAN. Sat 10/27/2012 7:03AM Central. Once a reverse lookup was performed on 67.228.102.243 the ...
199.116.118.226 - HackAttack: [SPI:Illegal connection state attack]
Oct 26 12:20:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 199.116.118.226 to 80.220.22.74
Oct 26 18:46:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
67.222.12.123 - HackAttack: [Trojan Scan]
Oct 26 11:56:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:52191 to 80.220.22.74:54320
Oct 26 11:56:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:52191 to 80.2...
123.108.179.3 - HackAttack: [SPI:Illegal connection state attack]
Oct 26 09:18:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 123.108.179.3 to 80.220.22.74
Oct 26 09:18:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
5.39.122.75 - HackAttack: [SPI:Illegal connection state attack]
Oct 25 18:08:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 5.39.122.75 to 80.220.22.74
Oct 25 19:41:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
91.224.160.192 - Complaint about 91.224.160.192
This and several others are constantly being blocked (for what I can see) by Malwarebytes, and antivirus I have very little knowledge of computers and I do not know what it does or how to remove it, I...
82.28.1.57 - continuing security alert on router port
Not sure what it is all about, but I received several security alert from that same IP since a couple of days. I can sometime receive alert from IPs, but it is the first time for the same IP. I wonder...
112.203.49.34 - Attempted hack
An attempt was made to attack my ip address, but my firewall stopped the attack
[DOS Attack] : [FIN Scan] packets detected source ip [112.203.49.34]. Thursday, Oct 25,2012 12:24:21
...
206.212.240.204 - Itrusion prevention
From the sec log
SID: 24530] Web Attack: Malicious Exploit Toolkit Website 4 attack blocked. Traffic has been blocked for this application: \\DEVICE\\HARDDISKVOLUME2\\PROGRAM FILES (X86)\\INTERNET EXP...
184.107.196.242 - Hijack
10/25/2012 11:07:02 AM Intrusion Prevention Critical Incoming TCP 184.107.196.242 80 N/A 64.253.118.124 13685 N/A \\DEVICE\\HARDDISKVOLUME2\\PROGRAM FILES\\MICROSOFT ISA SERVER\\WSPSRV.EXE 25701 67104...
58.218.199.227 - OPERATOR, GET ME BEIJING-JING-JING-JING
Detected by ESET. Usually floods or an SQL injection, but recently have been getting port attacks. This guy\'s staying busy, apparently. I\'m going with using Sandbox and Tor from here on....
58.218.199.227 - 58.218.199.227
evry day my interactive firewall say me 58.218.199.227 connect to http-alt, i just see here it is an attack, i m in france so no link with china...
79.145.135.188 - HackAttack: [SPI:Illegal connection state attack]
Oct 24 04:01:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 79.145.135.188 to 80.220.22.74
Oct 24 04:01:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
187.4.64.165 - HackAttack: [SPI:Illegal connection state attack]
Oct 24 01:14:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 187.4.64.165 to 80.220.22.74
Oct 24 03:57:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
65.54.61.172 - Port scanning
I have had numerous connection attempts from this address with the source port being 1863 and the destination port being 49178. I think this person\'s computer is part of a botnet....
78.85.18.135 - (Malicious traffic from 78.85.18.135)²
Este Ip está tentando invadir blogs wordpress. Tome cuidado.
WordPress Firewall has detected and blocked a potential attack!
Web Page: inhosting.com.br/blog/wp-content/plugins/wp-crm...
207.157.1.10 - port scan
I have no ties with this IP Address, have not contacted the establishment, so any scanning of my computer is unnecessary and unwanted. What do \'they\' hope to find?...
58.218.199.227 - trying to telnet port 1080
was trying to telnet port 1080 23rd Oct 2012 10:30 local time - I don\'t know the sense behind this ... maybe anybody else knows...
78.85.18.135 - Alert from WordPress
WordPress Firewall has detected and blocked a potential attack!
Web Page: .../wp-content/plugins/foxypress/uploadify/uploadify.php
Warning: URL may contain dangerous content!
Offending IP: 78.85....
58.218.199.227 - Fuck these Chinese!!
Fuck these Chinese with there always scanning computers!!
Fuck these Chinese with there always scanning computers!!
Fuck these Chinese with there always scanning computers!!
Why must i wrote here 25 w...
5.39.122.75 - HackAttack: [SPI:Illegal connection state attack]
Oct 22 10:47:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 5.39.122.75 to 80.220.22.74
Oct 22 19:35:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
5.39.122.75 - HackAttack: [SPI:Illegal connection state attack]
Oct 16 21:27:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 5.39.122.75 to 80.220.22.74
Oct 21 14:20:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
95.150.15.207 - Someone trying to get into my system
Someone been trying to get into my computer from this location..Please do something about it.I am getting tired of the attacks,I dont know why they are so interested in me...
198.107.148.8 - attack
tried to remote access my computer through t c p 4 9 1 8 1 10/20/2012 10:10:32 pm look out for it coming after you...
124.169.31.232 - ABUSE
[LAN access from remote] from 124.169.31.232:56153 to (MINE)192.168.1.8:16180 Saturday, Oct 20,2012 17:45:30
This above is what I am seeing from the ip
Causing pauses in my internet...
67.222.12.123 - HackAttack: [Trojan Scan]
Oct 20 17:11:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:47443 to 80.220.22.74:54321
Oct 20 17:11:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:47443 to 80.2...
83.35.190.134 - HackAttack: [SPI:Illegal connection state attack]
Oct 20 01:01:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 83.35.190.134 to 80.220.22.74
Oct 20 01:01:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
95.247.112.222 - HackAttack: [SPI:Illegal connection state attack]
Oct 19 22:50:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.247.112.222 to 80.220.22.74
Oct 19 22:50:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
173.20.17.16 - HackAttack: [Trojan Scan]
Oct 19 21:41:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 173.20.17.16:43945 to 80.220.22.74:54320
Oct 19 21:41:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 173.20.17.16:43954 to 80.220...
91.207.6.174 - HackAttack: [Trojan Scan]
Oct 19 19:24:46 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.207.6.174:59719 to 80.220.22.74:54320
Oct 19 19:24:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.207.6.174:59799 to 80.220...
116.229.239.242 - caught by little snitch
This is not the first time, from trying to get on via VNC, to trying to ssh my machine. Think I will close my ports now......
204.93.180.2 - Intrusion.Generic.WebApp.DirTravers.exploit
Caught by Kaspersky Internet Security today (19.10.2012 22:06:18)
TCP from 204.93.180.2 to local port 80
Denied: Intrusion.Generic.WebApp.DirTravers.exploit
Hope thats it will help.
Have a nice day....
80.82.66.232 - HackAttack: [Trojan Scan]
Oct 18 18:17:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 80.82.66.232:46918 to 80.220.22.74:54320
Oct 18 18:17:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 80.82.66.232:46091 to 80.220...
5.9.184.7 - HackAttack: [Trojan Scan] + [Net Bus Scan]
Oct 18 07:34:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 5.9.184.7:52962 to 80.220.22.74:54321
Oct 18 07:34:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 5.9.184.7:53037 to 80.220.22.74...
58.218.199.227 - attempt to connect through httpd at startup
Both 58.218.199.227 and 58.218.199.250 wanted in from Beijing. LittleSnitch suggestion was to let them in -- good thing I looked them up! It\'s not paranoia when they really are after you....
115.248.142.82 - Numerous attempts daily
Found attack from 115.248.142.82.
Source port is 15291 and destination port is 22 which use the TCP protocol.
Thu Oct 18 06:20:22 2012
Very persistent has been going on for 3 days. This is the latest...
98.196.247.69 - Anothers from the USA
Another first this time from Houston?
Thu Oct 18 08:34:55 2012
=>Found attack from 98.196.247.69.
Source port is 45103 and destination port is 23 which use the TCP protocol...
69.175.35.226 - IN the USA too!
Thu Oct 18 08:36:27 2012
=>Found attack from 69.175.35.226.
Source port is 51434 and destination port is 5900 which use the TCP protocol.
This is the first time from this IP...
113.10.181.193 - At it Again
They stopped for a few days but have started again Found attack from 113.10.181.193.
Source port is 56399 and destination port is 22 which use the TCP protocol.
Thu Oct 18 08:34:55 2012 ...
5.9.184.7 - HackAttack: [Trojan Scan]
Oct 18 07:01:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 5.9.184.7:53915 to 80.220.22.74:1243
Oct 18 07:01:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 5.9.184.7:53915 to 80.220.22.74:...
5.9.184.7 - HackAttack: [Trojan Scan]
Oct 18 06:38:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 5.9.184.7:58381 to 80.220.22.74:31337
Oct 18 06:38:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 5.9.184.7:58381 to 80.220.22.74...
88.19.14.10 - HackAttack: [SPI:Illegal connection state attack]
Oct 18 04:19:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 88.19.14.10 to 80.220.22.74
Oct 18 04:19:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
74.59.104.50 - HackAttack: [SPI:Illegal connection state attack]
Oct 18 03:38:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 74.59.104.50 to 80.220.22.74
Oct 18 03:38:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
80.241.209.41 - HackAttack: [SPI:Illegal connection state attack]
Sep 26 17:32:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 80.241.209.41 to 80.220.22.74
Oct 18 01:37:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 17 23:09:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:32781 to 80.220.22.74:31337
Oct 17 23:09:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:32781 to 80.220.2...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 17 17:08:51 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:59688 to 80.220.22.74:31337
Oct 17 17:08:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:59688 to 80.220.2...
91.207.6.174 - HackAttack: [Trojan Scan] + [Net Bus Scan]
Oct 17 16:10:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.207.6.174:55202 to 80.220.22.74:54321
Oct 17 16:10:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.207.6.174:55312 to 80.220...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 17 10:11:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:46588 to 80.220.22.74:31337
Oct 17 10:11:34 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:46588 to 80.220.2...
41.250.133.16 - Potential Hacking to my server
Hello -
Below are some attempts that have been going on for quite sometime to hack into my system. All I know that this person is from Morocco - I was wondering how can prevent this from happening be...
69.162.105.18 - 69.162.105.18
We keep getting connection attempts from this address. We block them via our firewall and they keep on trying!! They keep hitting us from the same 3 IP addresses. We ended up blocking the whole class ...
219.139.81.6 - afjter removing a trojan
after removal of a trojan the above web address is constantly being blocked by malwarebytes and my antivirus eset. Could you please check out the site....
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 17 09:11:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:40367 to 80.220.22.74:31337
Oct 17 09:11:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:40367 to 80.220.2...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 17 04:10:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:39272 to 80.220.22.74:31337
Oct 17 05:10:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:44632 to 80.220.2...
192.198.81.204 - HackAttack: [Net Bus Scan]
Oct 17 04:16:51 HackAttack: [Net Bus Scan] TCP packet from [nas0] 192.198.81.204:39928 to 80.220.22.74:12345
Oct 17 04:16:52 HackAttack: [Net Bus Scan] TCP packet from [nas0] 192.198.81.204:39928 to ...
192.198.81.204 - HackAttack: [Trojan Scan]
Oct 17 04:05:17 HackAttack: [Trojan Scan] TCP packet from [nas0] 192.198.81.204:56234 to 80.220.22.74:54321
Oct 17 04:05:18 HackAttack: [Trojan Scan] TCP packet from [nas0] 192.198.81.204:56234 to 80...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 17 03:10:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:59989 to 80.220.22.74:31337
Oct 17 03:10:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:59989 to 80.220.2...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 22:09:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:56432 to 80.220.22.74:31337
Oct 16 22:09:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:56432 to 80.220.2...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 19:09:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:37401 to 80.220.22.74:31337
Oct 16 19:09:09 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:37401 to 80.220.2...
209.222.102.234 - HackAttack: [Net Bus Scan]
Oct 16 19:03:38 HackAttack: [Net Bus Scan] TCP packet from [nas0] 209.222.102.234:51016 to 80.220.22.74:12345
Oct 16 19:03:39 HackAttack: [Net Bus Scan] TCP packet from [nas0] 209.222.102.234:51016 t...
209.222.102.234 - HackAttack: [Trojan Scan]
Oct 16 18:32:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 209.222.102.234:55060 to 80.220.22.74:54321
Oct 16 18:32:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 209.222.102.234:55060 to ...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 14:08:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:41953 to 80.220.22.74:31337
Oct 16 14:08:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:41953 to 80.220.2...
91.236.74.172 - HackAttack: [Trojan Scan]
Oct 16 13:36:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.236.74.172:65009 to 80.220.22.74:54321
Oct 16 13:36:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.236.74.172:65010 to 80.2...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 11:07:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:49388 to 80.220.22.74:31337
Oct 16 11:07:53 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:49388 to 80.220.2...
23.22.46.237 - HackAttack: [Trojan Scan]
Oct 16 10:43:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:49244 to 80.220.22.74:54320
Oct 16 10:43:46 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:49244 to 80.220...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 10:11:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:41704 to 80.220.22.74:31337
Oct 16 10:11:29 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:41704 to 80.220.2...
23.22.46.237 - HackAttack: [Trojan Scan]
Oct 16 09:16:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:61617 to 80.220.22.74:31337
Oct 16 09:16:35 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:61617 to 80.220...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 09:11:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:35456 to 80.220.22.74:31337
Oct 16 09:11:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:35456 to 80.220.2...
23.22.46.237 - HackAttack: [Trojan Scan]
Oct 16 08:13:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:62063 to 80.220.22.74:54321
Oct 16 08:13:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:62063 to 80.220...
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 06:10:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:36386 to 80.220.22.74:31337
Oct 16 06:11:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:36386 to 80.220.2...
23.22.46.237 - HackAttack: [Trojan Scan]
Oct 16 05:28:17 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:51630 to 80.220.22.74:1243
Oct 16 05:28:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:51630 to 80.220....
95.211.1.41 - HackAttack: [Trojan Scan]
Oct 16 04:11:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:51580 to 80.220.22.74:54321
Oct 16 04:11:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.211.1.41:49516 to 80.220.2...
58.218.199.147 - Scanning from this address
Attempted port scan from known hacker ip, checked on google. Please block this ip address and or do what you can, thank you. Max Darryl....
17.83.253.7 - What is Apple doing at my ports?
When starting up my system the usual IP6 check was done, but also this ID was keeping trying to get acces,17.83.253.7, which turns out to be from Apple?...
108.170.13.18 - HackAttack: [SPI:Illegal connection state attack]
Oct 8 22:30:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.13.18 to 80.220.22.74
Oct 15 22:30:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
23.22.46.237 - HackAttack: [Net Bus Scan]
Oct 15 21:21:39 HackAttack: [Net Bus Scan] TCP packet from [nas0] 23.22.46.237:65505 to 80.220.22.74:12345
Oct 15 21:21:42 HackAttack: [Net Bus Scan] TCP packet from [nas0] 23.22.46.237:65505 to 80.2...
72.44.80.57 - HackAttack: [Trojan Scan]
Oct 15 21:19:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:40455 to 80.220.22.74:54321
Oct 15 21:19:45 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:40455 to 80.220.2...
184.82.161.80 - HackAttack: [Trojan Scan]
Oct 15 20:15:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.82.161.80:4435 to 80.220.22.74:54321
Oct 15 20:15:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.82.161.80:4435 to 80.220...
184.82.161.80 - HackAttack: [Net Bus Scan]
Oct 15 20:15:15 HackAttack: [Net Bus Scan] TCP packet from [nas0] 184.82.161.80:1876 to 80.220.22.74:12345
Oct 15 20:15:18 HackAttack: [Net Bus Scan] TCP packet from [nas0] 184.82.161.80:1876 to 80.2...
72.44.80.57 - HackAttack: [Trojan Scan]
Oct 15 20:06:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:48140 to 80.220.22.74:31337
Oct 15 20:06:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:48140 to 80.220.2...
193.66.251.214 - HackAttack: [Trojan Scan]
Oct 15 06:32:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 193.66.251.214:80 to 80.220.22.74:54320
Oct 15 06:32:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 193.66.251.214:80 to 80.220.2...
114.44.175.229 - HackAttack: [SPI:Illegal connection state attack]
Oct 15 04:50:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.44.175.229 to 80.220.22.74
Oct 15 04:50:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
187.28.179.2 - HackAttack: [SPI:Illegal connection state attack]
Oct 15 00:28:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 187.28.179.2 to 80.220.22.74
Oct 15 00:28:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
79.153.13.178 - HackAttack: [SPI:Illegal connection state attack]
Oct 14 21:50:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 79.153.13.178 to 80.220.22.74
Oct 14 21:50:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
111.74.82.33 - try to hack our firewall
try to hack our firewall
Message meets Alert condition
date=2012-10-15 time=08:08:43 devname=FG100A_DLS device_id=FG100A3907511172 log_id=0104032002 type=event subtype=admin pri=alert vd=root use...
36.227.193.214 - HackAttack: [SPI:Illegal connection state attack]
Oct 14 17:26:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 36.227.193.214 to 80.220.22.74
Oct 14 17:26:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
182.208.226.78 - HackAttack: [SPI:Illegal connection state attack]
Oct 14 09:53:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 182.208.226.78 to 80.220.22.74
Oct 14 09:53:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.218.199.147 - .
hello kido this is cleary your site. thats why am writeing this from global cafe and not my comp. Tell you what m8 upgrade your softwear. No gps no problem...
61.152.74.5 - HackAttack: [SPI:Illegal connection state attack]
Mar 23 11:44:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 61.152.74.5 to 80.220.22.74
Oct 13 13:22:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
95.211.152.157 - hello
mey i somehow remove accses from my compiuter or ip to diseble this ip 95.211.152.157 or in to blacklist some how .my acnolege about com piuters very poor thank you for the answer......
103.10.4.158 - 103.10.4.158
according to my router logs I have had alerts including most recently
[DoS Attack: ACK Scan] from source: 103.10.4.158, port 9000, Tuesday, August 21,2012 03:34:18. would like to see this reported and...
210.4.15.233 - HackAttack: [Trojan Scan]
Oct 12 11:24:34 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:63341 to 80.220.22.74:54320
Oct 12 11:25:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.233:63341 to 80.220...
118.163.123.126 - HackAttack: [Trojan Scan]
Oct 12 11:06:04 HackAttack: [Trojan Scan] TCP packet from [nas0] 118.163.123.126:1472 to 80.220.22.74:54320
Oct 12 11:06:07 HackAttack: [Trojan Scan] TCP packet from [nas0] 118.163.123.126:1472 to 80...
80.243.190.2 - HackAttack: [SPI:Illegal connection state attack]
Oct 12 05:37:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 80.243.190.2 to 80.220.22.74
Oct 12 05:38:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
89.42.146.219 - Brute Force Attack
ICMP Flood Type 5 Code 1 hitting 20 times per second on our firewall for the last 2 days. Reported to ISP JUMP in Romania....
95.211.149.201 - HackAttack: [SPI:Illegal connection state attack]
Sep 8 16:25:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.211.149.201 to 80.220.22.74
Oct 11 18:24:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
186.244.19.214 - HackAttack: [SPI:Illegal connection state attack]
Oct 11 08:27:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 186.244.19.214 to 80.220.22.74
Oct 11 08:27:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
IP 207.171.163.4 from AMAZON in Seattle, USA attempted unauthorized entry, intrusion was averted. This is not the only IP from AMAZON that has attempted entry in the recent past, such as IP 72.21.214....
IP 72.21.214.159 from AMAZON in Seattle, USA attempted unauthorized entry, intrusion was averted. This is not the only IP from AMAZON that have attempted entry in the recent past....
61.185.238.233 - Attack to local port 1434
Attack to local port 1434. Frequent attacks detected by Kaspersky. Not the first time this is happening. As mentioned by other comments listed here on this site....
87.248.122.122 - 87.248.122.122 and 87.248.112.181
NOD32 constantly reports \"Detected covert channel exploit in ICMP packet\" from both of these IP addresses. Yesterday I was playing online game when adsl modem restarted it self two times i...
202.97.66.41 - Take these mothers down
FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 202.97.60.41 Dst ip: 124.177xx.xx.xx Type: Time Exceeded Code: Time to Live exceeded in Transit
located in security alerts in firewall....
125.172.132.8 - HackAttack: [SPI:Illegal connection state attack]
Oct 10 19:26:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 125.172.132.8 to 80.220.22.74
Oct 10 19:26:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
41.89.6.228 - 41.89.6.228
Tries repetedly to acces my nas in Denmark through port 21.
I have no deep knowledge of internet security, so can.t really elaborate further on the subject.
...
211.141.237.42 - Found attack from 211.141.237.42
Firewall Alert
Tue Oct 9 19:03:37 2012
=> Found attack from 211.141.237.42.
Source port is 6000 and destination port is 1433 which use the TCP protocol....
220.172.191.31 - Found attack from 220.172.191.31
Security log:
Tue Oct 9 17:27:22 2012
=>Found attack from 220.172.191.31.
Source port is 39101 and destination port is 22 which use the TCP protocol.
...
210.4.15.234 - HackAttack: [Trojan Scan]
Oct 9 18:04:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:46561 to 80.220.22.74:1243
Oct 9 18:04:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.234:46561 to 80.220....
210.4.15.236 - HackAttack: [Trojan Scan]
Oct 9 03:42:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:43709 to 80.220.22.74:1243
Oct 9 03:42:41 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.236:43709 to 80.220....
210.4.15.230 - HackAttack: [Trojan Scan]
Oct 9 03:27:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:63938 to 80.220.22.74:1243
Oct 9 03:27:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.230:63938 to 80.220....
210.4.15.237 - HackAttack: [Trojan Scan]
Oct 9 03:10:01 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:40025 to 80.220.22.74:1243
Oct 9 03:10:04 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.4.15.237:40025 to 80.220....
I got this too, 3 days ago. And this afternoon, 01:35 EST, from 207.171.163.142. They both are from AMAZON in Seattle. They should identify the hacker among their customers and stop this!...
207.171.163.142 - IP 207.171.163.142 from Seattle, AMAZON attempted unauthorized entry
IP 207.171.163.142 from Seattle, AMAZON attempted unauthorized entry. A recurring event from an AMAZON IP. In one case, there are 64 complaints filed against an AMAZON IP....
178.255.83.1 - 178.255.83.1
My pc sends info to this IP address dgtvjmymjv gdjstrjyh tegxexggww htwere sx efuycgaqgfwr eyfg8wqergfwyrvwf auygYFST7qfas TCST7Qfsyg ySAYDGWVF ATXTFS V EAIYGX EBF Iaauw9wq8f OQWU8HYDE79E B AQY...
69.112.244.154 - HackAttack: [SPI:Illegal connection state attack]
May 12 03:36:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.112.244.154 to 80.220.22.74
Oct 6 10:26:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
109.163.234.36 - tcpIncoming 109.163.234.36 22(SSH Remote Login Protocol, pcAnywhere)
Seems to be trying to access my network using PCAnywhere. Several blocked TCP packets on my Firewall Log from this IP Address.
tcp Incoming 109.163.234.36 22 (SSH Remote Login Protocol, pcAnywhere)
...
96.254.171.2 - HackAttack: [Trojan Scan]
Oct 5 09:40:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 96.254.171.2:50628 to 80.220.22.74:54321
Oct 5 09:40:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 96.254.171.2:50628 to 80.220...
205.251.242.39 - received pop-up "risky connection blocked"
received McAfee pop up on 205.251.242.39
whois.net shows this as an ip adress in a bank owned by amazon
was on facebook using chrome browser
= = =
...
207.171.163.162 - attempted unauthorized connections
207.171.163.162 has been attempting multiple unauthorized connections with my computer today 10/4/12. How can we find out how they are getting in and if they have tampered with anything? Thank you. ...
207.171.163.162 - 207.171.163.162 AMAZON Seattle
207.171.163.162 AMAZON Seattle attempted unauthorized connection, stopped by McAffee firewall
207.171.163.162 AMAZON Seattle attempted unauthorized connection, stopped by McAffee firewall
207.171.163....
71.90.91.58 - HackAttack: [SPI:Illegal connection state attack]
Oct 3 22:34:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 71.90.91.58 to 80.220.22.74
Oct 3 22:34:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
118.111.75.25 - HackAttack: [SPI:Illegal connection state attack]
Oct 2 20:40:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 118.111.75.25 to 80.220.22.74
Oct 2 20:40:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
75.118.62.235 - HackAttack: [SPI:Illegal connection state attack]
Oct 2 13:58:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.118.62.235 to 80.220.22.74
Oct 2 13:58:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
81.169.145.153 - Trying to access my computer
This site tried to access my computer yesterday at least three times. I was alerted by Malwarebytes. This site needs to be investigated and stopped...
213.175.221.80 - Trying to access my computer
This site has tried to access my computer at least three times today. Malwarebytes blocked it. This site needs to be investigated and stopped....
206.161.121.126 - rootkit virus. my firewall reported my system trying to access this site
rootkit virus. my firewall reported my system trying to access this site. i think i have gotten rid of it but i wanted to report it...
126.15.22.125 - HackAttack: [SPI:Illegal connection state attack]
Sep 30 18:21:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 126.15.22.125 to 80.220.22.74
Sep 30 18:21:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
114.45.0.22 - HackAttack: [SPI:Illegal connection state attack]
Sep 30 14:44:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.45.0.22 to 80.220.22.74
Sep 30 14:44:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
208.87.32.71 - Avast outgoing blocked by Malwarebytes
My question is: Why would avast be trying to contact this site???????? 1 2 3 4 5 6 7 8 25 word thing plain sucks...
58.218.199.227 - port attack
This IP is port scanning our Firewall, its not getting in but its still been trying all day. 58.218.199.227 I know Im not alone please black list this ip address...
58.218.199.227 - proxy.php
58.218.199.227 is trying to execute proxy.php on my server a few times every day.
I don\'t have a proxy.php file stored anyway.
cat /var/log/apache2/error.log | grep 58.218.199.227 | wc -l
1596...
114.45.192.66 - HackAttack: [SPI:Illegal connection state attack]
Sep 29 18:07:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.45.192.66 to 80.220.22.74
Sep 29 18:07:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
124.239.195.131 - Win.MSSQL.worm.helkern
I also faced same type of attacks many times and right now before some minutes also , and i had kaspersky internet security also which blocked this attack on the same port no 1434. My location is in I...
After McAffee detecting attempt of unauthorized entry and submitting complaint I notice there are 42 similar complaints spanning 3 years. Why is AMAZON not addressing the issue? Do they want a Class A...
72.21.194.32 - IP72.21.194.32
The above IP 72.21.194.32 attempted unauthorized entry
The above IP 72.21.194.32 attempted unauthorized entry
The above IP 72.21.194.32 attempted unauthorized entry
The above IP 72.21.194.32 attempted...
46.105.8.33 - HackAttack: [Trojan Scan]
Sep 26 01:29:07 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.105.8.33:60572 to 80.220.22.74:54320
Sep 26 01:29:10 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.105.8.33:60572 to 80.220.2...
72.21.81.253 - how to block
This IP is most likely an AD based server with a plugin someone has recently installed or a Pirated software. Best off to just add it to your host file and it will not be any concern after that since...
190.223.47.187 - VNC
They are always trying to hack my dad\'s pc. Theyre are using VNC and the program tells me. It happens pretty often and when they do they trie 10 time....
14.213.153.121 - Alerts all day everyday
Here is a sampling:
Tue Sep 25 20:13:01 2012
=>Found attack from 60.249.195.11.
Source port is 4935 and destination port is 3389 which use the TCP protocol.
Tue Sep 25 20:23:51 2012
=>Found att...
58.218.199.250 - Continous attempts from this address
Tue Sep 25 12:00:31 2012
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 27977 which use the TCP protocol. Has been going on for weeks!!...
218.3.41.16 - Repeated attacks from this address
Tue Sep 25 11:54:20 2012
=>Found attack from 218.3.41.16.
Source port is 6000 and destination port is 1433 which use the TCP protocol. Has been happening everyday...
202.102.153.70 - firewall detected repeated attacks from this address
My computer is getting repeated attacks from this address: 202.102.153.70. The are several attacks a day caught so far by my firewall protection. I would like to report them.
...
198.15.104.250 - HackAttack: [SPI:Illegal connection state attack]
Sep 25 23:57:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.15.104.250 to 80.220.22.74
Sep 26 00:57:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
184.164.144.91 - HackAttack: [SPI:Illegal connection state attack]
Sep 21 21:38:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.164.144.91 to 80.220.22.74
Sep 25 16:43:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
208.44.220.236 - SSH LOGIN ATTEMPT - UNAUTHORIZED
Attempted to gain ROOT access on server.
Attempted to gain ROOT access on server.
Attempted to gain ROOT access on server.
Attempted to gain ROOT access on server....
1.170.64.215 - HackAttack: [SPI:Illegal connection state attack]
Sep 24 18:35:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 1.170.64.215 to 80.220.22.74
Sep 24 18:35:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
122.18.128.118 - HackAttack: [SPI:Illegal connection state attack]
Sep 23 11:55:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 122.18.128.118 to 80.220.22.74
Sep 23 11:55:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
212.36.210.106 - Constant connection requests
Receiving constant connection requests from this ip despite being blocked via firewall.
Seems to be a flooding every 2 to 8 seconds to my system. Not sure as to why a data management company would wa...
61.185.238.233 - network attack blocker
I was working on my pc then the kaspersky internet security 2012
gave me this msg
network attack blocker :
UDP from 61.185.238.233 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern...
58.218.199.227 - Port scanning
Keeps trying to access my computer periodically over the past two weeks. My ESET software blocks and identifies IP address. Scanning attack. Scanning attack. Few times....
208.87.32.71 - blocked by Malware Bytes
malware bytes keeps blocking this IP address - been ongoing for three days now, not sure how to clear it out - really hope i have made the cut for minimum number of words not much else to say...
184.82.47.121 - HackAttack: [Trojan Scan]
Sep 21 13:04:30 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.82.47.121:3295 to 80.220.22.74:31337
Sep 21 13:04:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.82.47.121:3295 to 80.220...
195.3.147.99 - Malabytes blocked
Malaware blocked attempts by this ip to break out. My comp was hacked recently, by these guys I dont know. Can you stop or block them....
89.114.9.96 - Potentially malicious website
This IP address keeps trying to send something outgoing and Malwarbytes keeps blocking it. I\'m not sure what virus infected my computer. ...
182.236.161.149 - Constant connection attempts
We appear to have been infected with ( as yet) undetected malware which constantly attempts to connect to this ip on source port 4329 dest 5566.
New firewall is set to block this, previously our Inte...
58.218.199.227 - 58.218.199.227
Keeps trying to access my computer periodically over the past two weeks. My ESET software blocks and identifies IP address. Scanning attack. Scanning attack....
125.210.190.192 - massive SSH connections attempt
(mer. 19. sept. 15:52:16 2012)
Date : 15:45:27, Date UTC : 13:45:27, Date de début : , Date de début UTC : , Fuseau horaire : +0000, Traces : Alarme, Action : pass, Priorit&...
58.218.199.227 - This IP has been trying to access me network for several weeks
This IP address from China has been trying to hack my network for several weeks. It fills my firewall log to the point that I cannot check anything else and has been slowing down my network. I do not ...
64.37.231.135 - Scans
These are scans from Trustwave which is a PCI compliance company working for Wells Fargo. I\'m not sure if/why they would be scanning people not sighned up for the service....
50.7.211.36 - Swamping me with SIP REGISTER packets
50.7.211.36 has been submitting back to back SIP REGISTER packets to 81.2.83.215 since early on Sunday, London time. This is working out at about 80 pkts/sec and 90MB/hour.
Email was sent to abuse@fd...
87.98.217.187 - HackAttack: [TCP SYN Flooding]
Sep 17 15:41:09 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 87.98.217.187:6668 to 80.220.22.74:6668
Sep 17 15:41:09 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 87.98.217.187:6660 ...
101.50.155.14 - HackAttack: [SPI:Illegal connection state attack]
Sep 17 12:48:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 101.50.155.14 to 80.220.22.74
Sep 17 12:48:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
72.44.80.57 - HackAttack: [Trojan Scan]
Sep 17 03:48:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:56929 to 80.220.22.74:54320
Sep 17 03:48:16 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:56929 to 80.220.2...
178.63.99.120 - 178.63.99.120 ID Theft Alert
My firewall gave a warning about ID Theft coming from 178.63.99.120, I don\'t know what exactly the problem was, because the firewall blocked further access to this site. I don\'t know if this was a ...
65.97.63.247 - Ping? PONG!
Peer Media Technologies which is an Anti-P2P enforcement company that likes to piggyback on torrents. Keeps trying to get past my firewall, but with no luck to them....
64.37.60.116 - selling fresh cvv cc dumps bank log in track 1/2 transfer wu
****Hot****selling fresh cvv, dumps,bin,Wu trsfer,tracks 1&2 with pin etc........
Sell Cvv + Transfer WU + Bank Login + Dumsp + Paypal ....
IF YOU NEED, CONTACT ME BY
Yahoo : mayback.money
Mai...
66.152.88.226 - Attempt to sent outgoing data.
2012/09/15 15:44:21 -0500 ACCORD-63Z2YGJI Kenneth Fuller IP-BLOCK 66.152.78.239 (Type: outgoing)
2012/09/15 15:44:22 -0500 ACCORD-63Z2YGJI Kenneth Fuller IP-BLOCK 66.152.78.239 (Type: outgoing)
2012/0...
58.218.199.147 - 58.218.199.147
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalgold.co.uk
www.globalg...
173.194.38.179 - Covert Channel Exploit
continuously getting eset noification of covert channel exploit in IXMP packet. why this is going on? How can this be stopped?
Is Google Tracking my browsing?...
10.0.1.5 - 10.0.1.5
what is this IP address and why is it trying to access my computer?
Can this this address access my computer? should I be worried?
Please respond..thanks...
91.144.177.97 - HackAttack: [Net Bus Scan]
Sep 14 22:48:28 HackAttack: [Net Bus Scan] TCP packet from [nas0] 91.144.177.97:50023 to 80.220.22.74:12345
Sep 14 22:48:31 HackAttack: [Net Bus Scan] TCP packet from [nas0] 91.144.177.97:50023 to 80...
101.78.135.131 - HackAttack: [SPI:Illegal connection state attack]
Sep 14 21:39:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 101.78.135.131 to 80.220.22.74
Sep 14 21:39:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
91.144.177.97 - HackAttack: [Trojan Scan]
Sep 14 19:30:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.144.177.97:55419 to 80.220.22.74:1243
Sep 14 19:30:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.144.177.97:55419 to 80.22...
64.34.169.244 - continual firewall alerts
continual firewall alerts on all possible ports. These pricks have been constantly and consistently attacking my IP.
sorry that I copied somebodies text. Just wanted to complain and needed 25 words :-...
201.151.124.6 - Helkern
Got the \"Attempted Helkern attack\" notice today. Now, before people start jumping on here clammering for help and threatening China, Mexico and most other nations around the world, i\'ll e...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 14 08:37:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:58631 to 80.220.22.74:1243
Sep 14 08:37:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:58631 to 80.220....
58.218.199.227 - scan port
10-20 times a day, after attempted breach computer goes down and it is difficult to get it back on line, and it take sovernad over to do it
...
120.193.208.162 - Several attempt
120.193.208.162 (China Mobile Comm Corp.) has made several attempts to access our NAS device. We have added them to our \"Blocked Forever\" list, but we are still getting alerts of attempts...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 12 14:32:17 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:52590 to 80.220.22.74:1243
Sep 12 14:32:18 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:52590 to 80.220....
192.168.1.1 - Firewall Alert
This Ip was shown up at my Eset Smart Security as: You are being atacked by 192.168.1.1. So if you can do something against him I would be grateful....
58.218.199.147 - 58.218.199.147
hes not in china hes trying to hide his ass hes in the uk .. . . . . . .. . / . ,...
58.218.199.227 - repeated TCP/UDP packets
my modem initially received TCP packet from this IP and I have been experiencing my modem being flooded with requests from various places ever since....
211.141.86.248 - Kaspersky have bloked it
UDP from 211.141.86.248 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern 11.9.2012 19:39:25
This complaint need to be at least 25 words long, so I am writing shit here just to fill it up...
60.217.235.5 - creating huge amounts of traffic
This ip address is creating a huge amount of trafic to our firewall tcp traffic to port 22 this person needs shutting down as soon as possible...
72.44.80.57 - HackAttack: [Trojan Scan]
Sep 10 23:18:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:46109 to 80.220.22.74:54320
Sep 10 23:18:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:46109 to 80.220.2...
72.44.80.57 - HackAttack: [Trojan Scan]
Sep 10 22:20:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:45114 to 80.220.22.74:31337
Sep 10 22:20:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:45114 to 80.220.2...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 10 18:55:01 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:42303 to 80.220.22.74:1243
Sep 10 18:55:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:42303 to 80.220....
146.185.29.82 - HackAttack: [SPI:Illegal connection state attack]
Sep 10 13:47:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 146.185.29.82 to 80.220.22.74
Sep 10 15:25:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
211.141.86.248 - Network Attack
Intrusion: Win MSSQL worm Helkern attack
211.141.86.248 looks to be located in China. I have also reported this ip to Australian Federal Police. This person needs to be stopped...
69.43.161.171 - 69.43.161.171
Norton blocked this address as \'high threat\' (69.43.161.171) several times today. Unsure of the type of threat or how their business obtained my address. ...
72.21.194.32 - 72.21.194.32 blocked by McAfee
was surfing, FB, Google - McAfee pop-up indicated it blocked connection from this I.P addr. DNS / nslookup shows it is from Amazon block...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 9 20:21:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:42600 to 80.220.22.74:1243
Sep 9 20:21:27 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:42600 to 80.220....
220.78.170.100 - Trying to gain access to our firewall
IP 220.78.170.100 is trying to access our firewall using various services.As per our firewall log we can see multiple incorrect login entires from this IP. Kindly block this IP....
110.45.244.195 - Attempting to gain access to our firewall
IP address 110.42.244.195 is trying to gain the access to our firewall using the various services. As per the our firewall alert we can see this IP is tried to access our firewall. Kindly block this I...
122.228.200.70 - 122.228.200.70 is suspicious
Sep 8 23:29:16 # user.warn kernel: DROP IN=vlan1 OUT= SRC=122.228.200.70 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=107 ID=256 PROTO=TCP SPT=6000 DPT=1433 WINDOW=16384 RES=0x00 SYN URGP=0
mor...
58.218.199.58 - trying to connect
multiple attempts to connect to but my router denied from 58.218.199.58. Well over 100 on Saturday Sep 8th.
Message from d-link router:
Blocked incoming TCP connection request from 58.218.199.250:12...
192.168.1.103 - ICMP L3retriever Ping - attempted recon
This IP address attempted to intrude on my network. Vipre detected a network traffic intrusion attempt; Vipre blocked the attempt, and alerted me. The threat level is rated as a medium intrusion att...
91.197.129.127 - Firefox contineously tryingto gothis site
Something wrong with this IP.. looks like my PC is hacked by it. Malwarebytes blocks it, but cannot remove it. Can any one help please....
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 8 21:20:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:54191 to 80.220.22.74:1243
Sep 8 21:20:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:54191 to 80.220....
62.212.91.28 - HackAttack: [SPI:Illegal connection state attack]
Sep 2 02:24:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 62.212.91.28 to 80.220.22.74
Sep 8 18:14:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 7 22:11:46 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:40489 to 80.220.22.74:1243
Sep 7 22:11:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:40489 to 80.220....
109.163.231.168 - Malware's alert about an attack from this IP
It happened more than once, but it happens to me from other adresses from the USA, what should I do? I check my PC with boh the antivirus and malware scanner and it says everything is allright....
67.222.12.123 - HackAttack: [Trojan Scan]
Sep 7 09:03:12 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:48680 to 80.220.22.74:31337
Sep 7 09:03:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:48680 to 80.2...
67.222.12.123 - HackAttack: [Trojan Scan]
Sep 7 07:03:49 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:59168 to 80.220.22.74:1243
Sep 7 07:03:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:59168 to 80.22...
125.73.22.139 - Multiple Attempts
Login attempt to system by admin root via Telnet from 125.73.22.139:33436 has failed -
This has been in my Firewall logs repeated time. there is no reason anybody should ever be telnetting into this...
199.189.111.164 - HackAttack: [SPI:Illegal connection state attack]
Sep 5 17:18:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 199.189.111.164 to 80.220.22.74
Sep 6 15:13:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
110.87.133.110 - Scanning attack I think
4 Sep 06 2012 13:11:44 106023 110.87.133.110 58385 x 210 Deny tcp src outside:110.87.133.110/58385 dst inside: x /210 by access-group \"outside_access_in\" [0x0, 0x0]
Been blocking a lot of...
91.226.212.41 - Scanning
TCP SYN FLOODING the firewall.. 4 Sep 06 2012 12:53:14 106023 91.226.212.41 53984 3127 Deny tcp src outside:91.226.212.41/53984 dst inside: by access-group \"outside_access_in\" [0x0, 0x0] s...
112.217.101.164 - 34 attempts in 22 minutes
This IP address tries to gain access to all possible pages and directories there is. All attempts failed and IP is blocked as the firewall cicked in and blocked it. ...
Today, MBAM Rapport/Logs \"protection-log-2012-09-06.txt\" in France tels :
2012/09/06 08:04:09 +0200 POPA XX IP-BLOCK 93.88.241.39 (Type: outgoing)
2012/09/06 08:04:12 +0200 POPA XX IP-BLOC...
213.163.65.60 - Multiple alerts "incoming" given by MBAM the 06 september
Today, MBAM Rapport/Logs \"protection-log-2012-09-06.txt\" in France tels :
2012/09/06 09:22:32 +0200 POPA XX IP-BLOCK 213.163.65.60 (Type: incoming)
2012/09/06 10:00:26 +0200 POPA XX IP-BLO...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 5 23:11:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:51323 to 80.220.22.74:1243
Sep 5 23:11:16 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:51323 to 80.220....
78.85.252.173 - Possible executable upload file attack
I received several (20+) warnings from my firewall in quick succession that this IP address was trying to access my root folder. My website is merely a wordpress blog; I installed the firewall the fir...
91.201.64.85 - Possible executable upload file attack
I received several (20+) warnings from my firewall in quick succession that this IP address was trying to access my root folder. My website is merely a wordpress blog; I installed the firewall the fir...
125.131.125.218 - HackAttack: [SPI:Illegal connection state attack]
Sep 5 20:19:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 125.131.125.218 to 80.220.22.74
Sep 5 20:19:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
91.144.177.97 - HackAttack: [Trojan Scan]
Sep 5 10:13:46 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.144.177.97:64085 to 80.220.22.74:1243
Sep 5 10:13:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.144.177.97:64085 to 80.22...
64.56.64.102 - HackAttack: [Trojan Scan]
Sep 5 08:52:34 HackAttack: [Trojan Scan] TCP packet from [nas0] 64.56.64.102:4083 to 80.220.22.74:1243
Sep 5 08:52:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 64.56.64.102:4083 to 80.220.22...
108.178.53.155 - HackAttack: [SPI:Illegal connection state attack]
Sep 5 05:21:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.178.53.155 to 80.220.22.74
Sep 5 05:21:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
208.87.32.71 - Attack site
Malwarebytes blocked a re-direct or attack from that IP address.
I don\'t know what else to write, so I\'m taking up space to fulfill the requirements. Duck sauce is an awesome band...
218.71.136.101 - Intrusion attempt from this IP
Firewall alerts of several intrusion attempts from this adress. It was detected by
FSECURE who gives the detailed description: Intrusion attempt discovered. Nmap TCP scan. ...
17.173.254.223 - Interfering with VoIP
VoIP uses 10000 UDP thru 20000 UDP ports for communications. This Apple IP is using one of the VoIP ports, which sometimes causes us to lose audio one-way. Why is Apple using this port that is reser...
211.141.86.248 - FUCK THAT ASSHOLE
IP-Adresse: 211.141.86.248
IP-Adresse Land: China (CN)
IP Address Region: 03 Jiangxi
IP Address City: Nanchang
Intrusion.Win.MSSQL.worm.Helkern UDP from 211.141.86.248 to local port. Mother FUCKER. ...
182.239.42.243 - Invalid TCP packet - source / destination port 0 - Blocked by IPS
Noticed a large amount of connection attempts from this host across our global offices, quite alarming! I notice a number of other people complaining about attacks from the same subnet!...
72.21.194.32 - Hacker
Report to FBI...trying to hack into my computer. My virus, spyware, firewall caught the intruder. Get the internet service provider to get the physical address and send the authorities.
...
This IP address is misbehaving:
2012/09/04 21:29:05 -0400 213.163.65.60 (Type: incoming)
2012/09/04 22:21:36 -0400 213.163.64.32 (Type: incoming)
The access is successfully caught by MalwareBytes....
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 5 00:12:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:54964 to 80.220.22.74:1243
Sep 5 00:12:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:54964 to 80.220....
81.17.24.83 - shows up in suhosin logs
the error message in logs contains the following: \"
ALERT - configured request variable name length limit exceeded - \" ...
It appears to attack WordPress installs, specifically WordPress-...
151.24.136.58 - DOS attack
there is an attack from this address (at least one) tonight.
NO clue about who is doing it. I have a simple router which reports me such alerts every time there is an attack
...
100.42.223.149 - HackAttack: [SPI:Illegal connection state attack]
Sep 4 08:25:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 100.42.223.149 to 80.220.22.74
Sep 4 08:25:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
222.237.140.80 - HackAttack: [SPI:Illegal connection state attack]
Sep 3 22:36:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 222.237.140.80 to 80.220.22.74
Sep 3 22:36:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
72.21.194.32 - Program Nexon Steam Game Launcher
Don\'t know why Steam\'s maplestory launcher was trying to connect to an Amazon website upon launch.
Karma Koin, Nexon, and Wizet don\'t have any sort of connection with Amazon with operating their g...
149.20.36.135 - Unauthorized uploads
2012-09-03 11:19:07 crit EXE file detected/blocked! From 178.33.88.171:80 to 70.36.xxx.xxx:2972, proto TCP (zone Untrust, int ethernet0/0). Occurred 1 times.
2012-09-02 23:21:29 crit ZIP file detected...
95.211.152.157 - Malwarebytes detecting IP and Blocking
95.211.152.157 is attempting to access my computer, but MWB is blocking it. Unable to ascertain if it is a hacking attack or some program running....
188.29.8.155 - Intrusion.Win.NETAPI.Buffer-Overflow Exploit
This is worrying I am using a 3 3g dongle and this came up from my computer firewall..I am not impressed..What should I do now?...
188.26.126.181 - intrusion win dcom exploit kaspersky
I am worried when I got this warning about an intrusion on my network intrusion.win.dcom.exploit kaspersky warning from this IP address to my port 35...
211.141.86.248 - network attack from 211.141.86.248
I\'m using kaspersky antivirus and this attack has been reported multiple times during the last few days
Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 211.141.86.248 to local port 1434 ...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 3 04:35:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:33372 to 80.220.22.74:1243
Sep 3 04:35:41 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:33372 to 80.220....
199.189.111.164 - HackAttack: [SPI:Illegal connection state attack]
Sep 2 16:25:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 199.189.111.164 to 80.220.22.74
Sep 3 03:55:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
64.94.137.117 - Keep getting McAfee notice of blocked IP 64.94.137.117
This has been happening for a while. Not sure when it started but from blogs I read it seems that accessing POGO has something to do with it. My wife used my computer to play POGO and now I have this...
72.44.80.57 - HackAttack: [Trojan Scan]
Sep 2 20:21:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:47678 to 80.220.22.74:1243
Sep 2 20:22:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:47678 to 80.220.22...
188.241.44.167 - ICMP flooding attack
This IP 188.241.44.167 has tried a number ok attacks on my computer. I REALLY do NOT appreciate it.
P.S. chiar are sens sa se chinuie cineva sa imi hack-uiasca mie pc-ul... ce vrei ma, poze cu mama? ...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 2 08:10:27 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:35912 to 80.220.22.74:1243
Sep 2 08:10:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:35912 to 80.220....
2.116.105.242 - Complaint about 2.116.105.242
The above IP is relaying mail to my yahoo and hotmail please stop it.
he above IP is relaying mails to yahoo and hotmail thru mail servers. Exchange is continously sending...
125.74.20.138 - Hack Attack
Hacking My Computer
Fire wall alert that 125.74.20.138 is hacking my computer netname:125.74.0.0-125.75.255.255 netname: chinanet-gs desc:chinanet gansu...Net Bus scan tcp packet from (nas0) 125.74.20...
206.161.121.3 - Hacking my computer
netnum: 125.74.0.0 - 125.75.255.255
netname: CHINANET-GS
descr: CHINANET Gansu province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: CN
admin-c: CH93-AP
tec...
125.74.20.138 - Hacking my computer
Hacking my Computer
netnum: 125.74.0.0 - 125.75.255.255
netname: CHINANET-GS
descr: CHINANET Gansu province network
descr: China Telecom
descr: No.31,jingrong street
descr: Beijing 100032
country: C...
125.74.20.138 - HackAttack: [Net Bus Scan]
Sep 1 16:04:17 HackAttack: [Net Bus Scan] TCP packet from [nas0] 125.74.20.138:44194 to 80.220.22.74:12345
Sep 1 16:04:20 HackAttack: [Net Bus Scan] TCP packet from [nas0] 125.74.20.138:44194 to 80...
27.155.168.32 - HackAttack: [Net Bus Scan]
Sep 1 15:51:27 HackAttack: [Net Bus Scan] TCP packet from [nas0] 27.155.168.32:54379 to 80.220.22.74:12345
Sep 1 15:51:30 HackAttack: [Net Bus Scan] TCP packet from [nas0] 27.155.168.32:54379 to 80...
91.239.66.42 - HackAttack: [Trojan Scan]
Sep 1 13:08:17 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:48682 to 80.220.22.74:1243
Sep 1 13:08:18 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:48682 to 80.220....
110.85.243.212 - HackAttack: [Net Bus Scan]
Sep 1 10:20:51 HackAttack: [Net Bus Scan] TCP packet from [nas0] 110.85.243.212:52807 to 80.220.22.74:12345
Sep 1 10:20:54 HackAttack: [Net Bus Scan] TCP packet from [nas0] 110.85.243.212:52807 to ...
62.217.195.133 - HackAttack: [Net Bus Scan]
Sep 1 04:32:25 HackAttack: [Net Bus Scan] TCP packet from [nas0] 62.217.195.133:56732 to 80.220.22.74:12345
Sep 1 04:32:28 HackAttack: [Net Bus Scan] TCP packet from [nas0] 62.217.195.133:56732 to ...
27.156.27.251 - HackAttack: [Net Bus Scan]
Sep 1 04:31:29 HackAttack: [Net Bus Scan] TCP packet from [nas0] 27.156.27.251:57569 to 80.220.22.74:12345
Sep 1 04:31:32 HackAttack: [Net Bus Scan] TCP packet from [nas0] 27.156.27.251:57569 to 80...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 31 19:13:18 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:46026 to 80.220.22.74:1243
Aug 31 19:13:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:46026 to 80.220....
61.185.238.233 - Network attack
Kaspersky reports network attack attack blocked and gives object as UDP from 61.185.238.233 to local port 1434 and result as Denied.Intrusion.win.MSSQL.worm. the application is unknown...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 31 02:35:51 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:33504 to 80.220.22.74:1243
Aug 31 02:35:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:33504 to 80.220....
From 2 months on 3 of my joomla websites are detected attempts to login in the backend as admin user. Be careful!
attempts come from many different ip address.
The method is brute force. Passwords are...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 30 11:22:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:39302 to 80.220.22.74:1243
Aug 30 11:22:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:39302 to 80.220....
This IP address 204.11.109.62 from Tribal Fusion in Oakland, California, USA attempted unauthorised entry.This IP address 204.11.109.62 from Tribal Fusion in Oakland, California, USA attempted unautho...
94.91.178.210 - MULTI-SLASH-ENCODING ATTACK
[type=HTTP-Inspection(8119008)] MULTI-SLASH-ENCODING ATTACK Action: No Action Severity: medium 2012-08-30 05:58:57 94.91.178.210:1334
[type=HTTP-Inspection(8119008)] MULTI-SLASH-ENCODING ATTACK Acti...
217.146.194.233 - ASCII-ENCODING ATTACK
[type=HTTP-Inspection(8119001)] ASCII-ENCODING ATTACK Action: No Action Severity: medium 2012-08-30 05:41:34 79.45.86.41:49297
[type=HTTP-Inspection(8119001)] ASCII-ENCODING ATTACK Action: No Actio...
178.137.70.205 - Failed admin login attempts
This IP has attempted on 7 occasions to login to the backend of my Joomla site within a 5 hour period, fortunately unsuccessfully due to Firewall protection....
207.200.59.179 - Attacks from 207.200.59.179
[DoS Attack: ACK Scan] from source: 207.200.59.179, port 443, Wednesday, August 29,2012 03:26:04
[DoS Attack: ACK Scan] from source: 207.200.59.179, port 443, Wednesday, August 29,2012 04:27:48...
219.66.73.131 - HackAttack: [SPI:Illegal connection state attack]
Aug 30 01:20:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 219.66.73.131 to 80.220.22.74
Aug 30 01:20:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
178.137.70.205 - LATEST ATTEMPT
Description: There was an unsuccessful attempt to login into the backend section of your website using an unknown username.
Alert level: Medium
Date of event: 29.08.2012 20:06:43
User IP: 178.137.70.2...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 29 08:02:46 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:49003 to 80.220.22.74:1243
Aug 29 08:02:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:49003 to 80.220....
61.128.110.96 - Intrusion attempt
Instrusion.Win.MSSQL.worm.Helkern
This is the third or fourth attempt at a break in. Consistant attempts at DDOS fail, but intrusion attempts are becomming annoying. Why did we ever give China our IP ...
221.6.97.130 - Ping flood
Occasional pings over the past few days, ending up as a sustained ping DOS attack today. Protocol ICMP, Message type 5. Ongoing for several hours now....
114.42.104.79 - HackAttack: [SPI:Illegal connection state attack]
Aug 28 06:02:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.42.104.79 to 80.220.22.74
Aug 28 06:02:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
180.69.228.88 - HackAttack: [SPI:Illegal connection state attack]
Aug 28 05:25:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 180.69.228.88 to 80.220.22.74
Aug 28 05:25:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
61.128.110.96 - Win.MSSQL.worm.Helkern 61.128.110.96
Constantly pops up and having trouble with my internet going out constantly. It leads me to believe that they are hijacking my computer or stealing my info. It is very strange and started on day out...
41.98.145.116 - HackAttack: [SPI:Illegal connection state attack]
Aug 27 19:18:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.98.145.116 to 80.220.22.74
Aug 27 19:18:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 27 16:56:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:52617 to 80.220.22.74:1243
Aug 27 16:56:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:52617 to 80.220....
95.211.185.107 - hacking
this ip address is continuous trying to hack into my computer. my firewall keeps alerting and blocking this but the hack is very persistent and wouldnt stop ...
31.210.123.227 - ssh attempt
31-210-123-227.turkrdns.com was trying to ssh into my machine. 31-210-123-227.turkrdns.com was trying to ssh into my machine. 31-210-123-227.turkrdns.com was trying to ssh into my machine. ...
5.34.246.119 - Never has a location
Every time i try to locate this IP it never comes up with a location.
Mon Aug 27 08:11:16 2012
=>Found attack from 5.34.246.119.
Source port is 2831 and destination port is 110 which use the TCP p...
217.77.53.77 - Another persistant attempt
Mon Aug 27 08:17:58 2012
=>Found attack from 217.77.53.77.
Source port is 52628 and destination port is 22 which use the TCP protocol.
Happens daily been of and on today.
...
58.218.199.250 - This one is persistent
Mon Aug 27 06:36:51 2012
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 2479 which use the TCP protocol.
Mon Aug 27 06:36:51 2012
=>Found attack from 58.218.199...
200.113.185.227 - Another attack
Mon Aug 27 07:14:31 2012
=>Found attack from 200.113.185.227.
Source port is 36269 and destination port is 22 which use the TCP protocol.
I have never seen this one before....
110.84.171.195 - Another attack
Mon Aug 27 07:12:28 2012
=>Found attack from 110.84.171.195.
Source port is 53574 and destination port is 9100 which use the TCP protocol.
Has been going on for a few days know. ...
8.24.249.170 - Found Attack
Mon Aug 27 07:02:40 2012
=>Found attack from 8.24.249.170.
Source port is 4935 and destination port is 3389 which use the TCP protocol.
Got this alert it started just this morning....
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 26 23:15:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:49700 to 80.220.22.74:1243
Aug 26 23:15:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:49700 to 80.220....
67.195.186.237 - [DoS Attack: ACK Scan] from source: 67.195.186.237
Seeing repeated warnings in the netgear router logs
[DoS Attack: ACK Scan] from source: 67.195.186.237, port 80, Sunday, August 26,2012 15:47:31
[DoS Attack: ACK Scan] from source: 67.195.186.237, po...
85.245.76.15 - HackAttack: [SPI:Illegal connection state attack]
Aug 26 19:32:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 85.245.76.15 to 80.220.22.74
Aug 26 19:32:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 26 15:30:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:50247 to 80.220.22.74:1243
Aug 26 15:30:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:50247 to 80.220....
46.249.63.16 - HackAttack: [Net Bus Scan] + [Trojan Scan]
Aug 26 15:06:20 HackAttack: [Net Bus Scan] TCP packet from [nas0] 46.249.63.16:49937 to 80.220.22.74:12345
Aug 26 15:06:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.249.63.16:49940 to 80.22...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 26 08:24:08 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:33435 to 80.220.22.74:1243
Aug 26 08:24:09 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:33435 to 80.220....
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 26 01:47:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:60267 to 80.220.22.74:1243
Aug 26 01:47:15 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:60267 to 80.220....
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 25 14:17:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:58056 to 80.220.22.74:1243
Aug 25 14:17:29 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:58056 to 80.220....
118.169.195.240 - HackAttack: [SPI:Illegal connection state attack]
Aug 25 12:25:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 118.169.195.240 to 80.220.22.74
Aug 25 12:25:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 25 09:19:30 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:36461 to 80.220.22.74:1243
Aug 25 09:19:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:36461 to 80.220....
IP Address:
109.163.231.168
City:
Moscow
State/Region:
Moscow City
Country:
Russian Federation
Latitude/Longitude:
55.752°, 37.616°
Time Zone:
Europe/Mosc...
213.153.132.18 - Constant attempts to port 22
Ip address info: 213.153.132.18 (213.153.132.18)
× Latitude: 41.0186
× Longitude: 28.9647
× Counry: Turkey 213.153.132.18
× Region: 34
× City: Istanbul
&A...
188.212.152.18 - UNauthorized atttempts to port 5900 (port for VNC)
Unsure if this is \"bad\" IP - reporting here it anyway in case..
Ip address info: 188.212.152.18 (188.212.152.18)
× Latitude: 45.1833
× Longitude: 24.5
× Coun...
Host Name: hn.kd.ny.adsl
The number of this IP address is 125.41.145.14. This IP address is related to China, and active in Henan, Shanxi. IP Country code is CN. ISP of this address is \"Chi...
93.75.188.54 - Constant incoming attempts to port 22. Be aware sampling.award.volia.net and volia.net are both with Volia Subnet
IP Location
IP Address:
93.75.188.54
City:
Kiev
State/Region:
Kyyivs\'ka Oblast\'
Country:
Ukraine
Latitude/Longitude:
50.455°, 30.524°
Time Zone:
Europe...
Ip address info: 59.52.255.42 (59.52.255.42)
× Latitude: 28.55
× Longitude: 115.9333
× Counry: China 59.52.255.42
× Region: 03
× City: Nanchang
× ...
188.241.44.167 - flood atack
ICMP flooding ASA PATESC SI EU DAR NOROC CU EESET SMART 5 E BUN TARE SIL RECOMAND TUTUROR TOT DIN BOTOSANI MI LAGASIT SI MIE K ESTE TRBLUATE MASURI DACACONTINUI ASA O SA VINALUMEA PESTEW TINE...
93.114.42.164 - Another IP from Voxility SR - blocked by anti virus
inetnum: 93.114.40.0 - 93.114.47.255
netname: VOXILITY-SRL
descr: VOXILITY SRL
descr: Dimitrie Pompei 9-9A Cladirea 24, etaj 2, sector 2
descr: Bucuresti ...
98.126.208.67 - Blocked by anti virus this time
Host Name: CUSTOMER.KRYPT.COM
IP address 98.126.208.67 is located within an IP block ranging from 98.126.188.32 to 98.126.211.215 with CIDR 98.126.188.32/20 and netmask 255.255.232.72. According ...
89.28.99.241 - Blocked
Is another Starnet
Host Name: 89-28-99-241.starnet.md
The number of this IP address is 89.28.99.241. This IP address is related to Moldova, Republic of. IP Country code is MD. IP address is ass...
79.135.150.179 - Blocked
By malawarebytes
Host Name: 179.150.135.79.microlines.lv
IP address is numbered 79.135.150.179. This IP address is affiliated with Latvia. IP Country code is LV. IP address ISP is \"Micro...
218.10.41.184 - Another China IP blocked
By Malawarebytes Pro
Ip address info: 218.10.41.184 (218.10.41.184)
× Latitude: 45.75
× Longitude: 126.65
× Counry: China 218.10.41.184
× Region: 08
× C...
87.248.122.122 - ÐТÐКИ
Ð’ ТЕЧЕÐИИ ÐЕДЕЛИ ПОСТОЯÐÐО ФÐЕÐ...
109.163.226.170 - Blocked & listed with virus url
By Malawarebytes. Another from Voxility
Host Name: lh19699.voxility.net
IP address is numbered 109.163.226.170. This IP address is affiliated with Romania. IP Country code is RO. ISP of this ad...
109.163.231.62 - Blocked
By malwarebytes & is another from Voxility
Host Name: lh18314.voxility.net
The number of this IP address is 109.163.231.62. This IP address is related to Romania. IP Country code is RO. IS...
59.34.246.236 - Blocked
By Malawarebytes & is another from China
Host Name: 236.246.34.59.broad.zj.gd.dynamic.163data.com.cn
IP address is numbered 59.34.246.236. This IP address is located in China, and affiliat...
212.117.174.174 - Blocked
By Malawarebytes Pro
Host Name: ip-212-117-174-174.as5577.net
IP address is numbered 212.117.174.174. This IP address is registered in Luxembourg. IP Country code is LU. IP address is assigned...
89.28.72.185 - Blocked
By Malawarebytes Pro
Host Name: 89-28-72-185.nordlinks.net
IP address is numbered 89.28.72.185. This IP address is fixed within Moldova, Republic of, and active in Balti IP Country code is MD...
77.78.247.165 - Blocked
By Malawarebytes Pro
× Ip address info: 77.78.247.165 (77.78.247.165)
× Latitude: 44.0161
× Longitude: 18.2589
× Counry: Bosnia and Herzegovina 77.78.247.165
&A...
222.69.93.86 - Blocked
By Malawarebytes Pro
Host Name: N/A
IP address is numbered 222.69.93.86. This IP address is registered in China, and fixed within Shanghai, Shanghai. IP Country code is CN. IP address is assig...
121.125.194.79 - Blocked
Malawarebytes Pro blocked this IP
Host Name: N/A
IP address is numbered 121.125.194.79. This IP address is active in Korea, Republic of, and affiliated with Seoul, Seoul-t\'ukpyolsi. IP Country...
109.163.230.114 - Blocked
Malawarebytes Pro keeps blocking my browser from accessing this IP
It\'s hostname is alpha.lulzimg.com
inetnum: 109.163.230.0 - 109.163.231.255
netname: Voxility
descr: S...
193.105.134.117 - Blocked
By Malawarebytes Pro and unknown why
Is what I found right now on this IP
inetnum: 193.105.134.0 - 193.105.134.255
netname: SWEDENDEDICATED-NET
descr: SwedenDedicated Network
...
89.28.89.207 - Blocked
By malawarebytes & unknown why
This is all the info I found right now
Host Name: 89-28-89-207.starnet.md
The number of this IP address is 89.28.89.207. This IP address is fixed within Moldo...
50.97.97.41 - HackAttack: [SPI:Illegal connection state attack]
Aug 18 16:37:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.97.41 to 80.220.22.74
Aug 25 05:58:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
91.239.66.42 - HackAttack: [Trojan Scan]
Aug 25 04:37:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:49319 to 80.220.22.74:1243
Aug 25 04:37:41 HackAttack: [Trojan Scan] TCP packet from [nas0] 91.239.66.42:49319 to 80.220....
72.21.194.32 - trips firewall
Firewall tripped by connection to this ip. Unclear excactly why Usage of Facebook trips this connection. Likely wrongly constructed add.
Not enough knowledge to tell you excactly what they do....
58.218.199.58 - Port Scanning Attack
Eset Smart Security gives repeated alerts of port scanning attacks from this IP address. Comcast cable is my provider. How can this be stopped? I am assuming my security suite is stopping it from g...
38.113.165.68 - Secret spying on my PC
I just installed a light-weight firewall on my PC and it stops traffic going to 38.113.165.68 several times a day and usually first thing when I turn my PC on in the morning before I start any program...
66.35.204.10 - Secret spying activity on my computer
I just installed a light-weight firewall on my PC and it stops traffic going to 66.35.204.10 several times a day and usually first thing when I turn my PC on in the morning before I start any programs...
124.239.195.131 - Network Attack
Have finally been able to stop him, it was a network attack and attempted 7 times in last one year period. Don\'t know if it actually originates from China....
Hack attempt
I am getting a message from Malwarebytes about OUTBOUND traffic to this malicious domain
I am getting a message from Malwarebytes about OUTBOUND traffic to this malicious domain...
64.37.231.135 - The IP Address 64.37.231.144
Receiving hundreds of these scans every 30 seconds see below.
08/24/2012 05:12:32.832 - Alert - Intrusion Prevention - Possible port scan detected - 64.37.231.144, 49309, X1, twscan-64-37-231-144....
64.31.10.229 - HackAttack: [SPI:Illegal connection state attack] + INFO
Aug 23 21:23:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 64.31.10.229 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/64.31.10.229 RESULT:
64.31.10.229 IP addre...
188.241.44.167 - IP attacking my pc
i have many attack from this IP, can you do something? 188.241.44.167 and other IP range, this is taking a boring situation aaaaaa aaaaaaa aaaa...
93.170.104.62 - Malwarebytes reports this and others
Stop trying to screw over my computer! I have no idea how to stop this. It started randomly. This ip and a few others are being blocked by malwarebytes. some web pages dont load because of this....
68.68.22.103 - HackAttack: [SPI:Illegal connection state attack]
May 30 16:28:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.22.103 to 80.220.22.74
Aug 22 18:28:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
61.185.238.233 - CIBER ATTACK
My sistem firewall stop an attack from 61.185.238.233,
WIN .MSSQL.worm.helkern.
that is not the first attack ´lease stop the attacks any way .as soon as possible ...
123.62.24.246 - NMAP SANS
i AM GETTING A LOT OF NMAP SCANS OR TRIES TO DO SCANS FROM THIS IP ADDRESS THE USER IS TRYING TO DO NMAP SCANS OVER AND OVER....
74.208.206.81 - my comp is attempting to contact this IP
my comp is attempting to contact this IP
I did not initiate any programs that would need to access the internet.. I am blocking this IP. I do not know why my comp would attempt to contact this IP....
66.40.56.80 - my computer is attempting to contact this IP on startup
I am not browsing the internet, have just turned on my computer and it is attempting to contact this IP. I do not know if it is malware trying to \"phone home\" but I am blocking this IP....
69.162.105.18 - This IP trying to attack a computer port.
For the past 2 days, I keep getting messages that this IP address 69.162.105.18 (and also 69.162.105.21) are trying to attack a port on my computer. I get the messages multiple times throughout the d...
188.72.233.154 - HackAttack: [Trojan Scan]
Aug 21 22:44:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.72.233.154:61124 to 80.220.22.74:54320
Aug 21 22:44:53 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.72.233.154:61124 to 80...
174.139.160.177 - HackAttack: [Trojan Scan] [TCP SYN Flooding] [Net Bus Scan]
Aug 21 20:51:44 HackAttack: [Trojan Scan] TCP packet from [nas0] 174.139.160.177:9300 to 80.220.22.74:31337
Aug 21 20:51:44 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 174.139.160.177:9300 ...
23.22.46.237 - HackAttack: [Trojan Scan]
Aug 21 19:52:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:64767 to 80.220.22.74:1243
Aug 21 19:52:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 23.22.46.237:64767 to 80.220....
58.218.199.250 - port attack scan
All to often I get a firewall alert and a pop-ups on this Attack! from 2 to 4 times
all to offten! Bust This person for everybody else to! Jail>>>>>>>>>>>>...
46.249.63.16 - HackAttack: [Net Bus Scan] + [Trojan Scan]
Aug 20 20:13:24 HackAttack: [Net Bus Scan] TCP packet from [nas0] 46.249.63.16:61425 to 80.220.22.74:12345
Aug 20 20:13:24 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.249.63.16:61436 to 80.22...
64.34.169.244 - 64.34.169.244
continual firewall alerts every 5 minutes, literally hundreds of probes through port 53 all blocked by router.
This highly annoying has been occuring for almost two weeks, and interfering with our bus...
58.241.101.77 - Blocked
And earlier today posted on 2 other very simliar IP\'s of this company
Malwarebytes Pro and other software are blocking access to this IP and not positve why @ this time...
94.242.250.3 - HackAttack: [SPI:Illegal connection state attack]
Aug 19 21:42:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.242.250.3 to 80.220.22.74
Aug 20 07:06:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
218.250.156.17 - HackAttack: [SPI:Illegal connection state attack]
Aug 20 06:34:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 218.250.156.17 to 80.220.22.74
Aug 20 06:34:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
108.61.40.175 - HackAttack: [SPI:Illegal connection state attack] + INFO
Aug 19 05:54:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.61.40.175 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.61.40.175 RESULT:
108.61.40.175 IP a...
173.194.42.23 - Firewall: Stealth Mode connection attempt
I have been observing the following in OSX system logs starting this morning:
8/19/12 6:20:46.772 AM Firewall: Stealth Mode connection attempt to TCP 10.0.1.5:54781 from 173.194.42.23:443 ...
124.28.64.254 - Blocked
And unsure why. As far as I can tell @ this time this is a cable TV company near Seoul, Korea and also is in a proxy IP range this area uses which the proxy range could be why it was blocked by my ant...
The host of these IP\'s is in China and while looking up info on the IP i am reporting, found a link to the company of the IP. they appear, altho I did not go into great depth studying, to be a compan...
58.240.239.50 - Unknown but found.....
I was actually looking up 58.241.220.12 & is same \"neighborhood\" as this IP and I saw the replies made by others & aren\'t \'years ago\' so is going here as well
The host of t...
89.202.157.227 - Illegal connection state attack from 89.202.157.227
Aug 18 18:54:04 HackAttack: [SPI:Illegal connection state attack] TCP packet from [ppp0] 89.202.157.227:80 to 197.87.44.63:1045
Aug 18 18:54:04 HackAttack: [SPI:Illegal connection state attack] TCP p...
198.78.223.126 - Attack
[INFO] Sun Aug 19 04:36:07 2012 Blocked incoming TCP packet from 198.78.223.126:80 to 192.168.33.11:64266 with unexpected sequence 4041239864
[INFO] Sun Aug 19 04:36:02 2012 Blocked incoming TCP packe...
184.164.144.91 - HackAttack: [SPI:Illegal connection state attack] + INFO
Aug 18 20:27:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.164.144.91 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/184.164.144.91 RESULT:
184.164.144.91 IP...
85.195.82.185 - Attack
according to my firewall,this IP (85.195.82.185) is attacking me according to my firewall. I may be hacked.. help !! help !! help !! help !! help !! help !!...
91.121.134.30 - HackAttack: [SPI:Illegal connection state attack]
Aug 9 23:05:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 91.121.134.30 to 80.220.22.74
Aug 18 19:50:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
176.8.205.67 - HackAttack: [Trojan Scan]
Aug 18 17:04:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.8.205.67:64051 to 80.220.22.74:31337
Aug 18 17:04:14 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.8.205.67:64051 to 80.220...
61.237.17.89 - rodolfo
intrusion .win .mssql .worm. helrkem 07/06/2012 gracias por este servicio y por lo visto no soy el unico a quienes se deberia bloquear esta red por uso indebido...
210.213.141.146 - HackAttack: [Trojan Scan]
Aug 17 21:24:49 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.146:16325 to 80.220.22.74:54320
Aug 17 21:24:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.146:16325 to ...
64.135.110.19 - HackAttack: [Trojan Scan]
Aug 17 20:01:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 64.135.110.19:9300 to 80.220.22.74:54320
Aug 17 20:01:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 64.135.110.19:9300 to 80.220...
210.213.141.146 - HackAttack: [Trojan Scan]
Aug 17 19:53:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.146:37194 to 80.220.22.74:54320
Aug 17 19:53:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.146:37194 to ...
210.213.141.136 - HackAttack: [Trojan Scan]
Aug 17 19:46:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.136:45871 to 80.220.22.74:54320
Aug 17 19:46:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.136:45871 to ...
188.72.233.154 - HackAttack: [Trojan Scan]
Aug 17 19:29:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.72.233.154:1317 to 80.220.22.74:1243
Aug 17 19:29:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.72.233.154:1317 to 80.22...
98.126.218.15 - HackAttack: [Trojan Scan]
Aug 17 19:28:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.218.15:9300 to 80.220.22.74:1243
Aug 17 19:28:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.218.15:9300 to 80.220....
188.72.233.154 - HackAttack: [Trojan Scan]
Aug 17 19:27:08 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.72.233.154:59158 to 80.220.22.74:31337
Aug 17 19:27:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 188.72.233.154:59158 to 80...
210.213.141.136 - HackAttack: [Trojan Scan]
Aug 17 19:16:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.136:10644 to 80.220.22.74:31337
Aug 17 19:16:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.136:10644 to ...
110.75.188.26 - SMTP
IP keeps trying to send mail out of our mail svr farm without an account.
basically a SMTP flood. there is a attempt every .05 of a sec and this is through their entire IP range.
...
220.132.156.239 - HackAttack: [SPI:Illegal connection state attack]
Aug 16 23:21:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 220.132.156.239 to 80.220.22.74
Aug 16 23:21:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
211.141.86.248 - Network attack from 211.141.86.248
I\'m using kaspersky antivirus and this attack has been reported multiple times during the last few days:
8/16/2012 3:44:31 AM Network attack detected Unknown Blocked: Intrusion.Win.MSSQL.worm.Helker...
61.128.110.96 - Network attack from 61.128.110.96
I\'m using kaspersky antivirus and this attack has been reported multiple times during the last few days:
8/15/2012 2:03:02 AM Network attack detected Unknown Blocked: Intrusion.Win.MSSQL.worm.Helker...
121.84.151.235 - Attach from this IP
I\'m using kaspersky antivirus and this attack has been reported multiple times during the last few days:
Network attack detected Unknown Blocked: Intrusion.Win.MSSQL.worm.Helkern UDP from 121.84.151...
210.213.141.136 - HackAttack: [Trojan Scan]
Aug 16 18:25:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.136:3468 to 80.220.22.74:54320
Aug 16 18:25:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 210.213.141.136:3468 to 80...
85.26.241.24 - Another new attempt
Attempts had been quiet for a few days but started up again this morning. This is a new one for me.
Thu Aug 16 11:21:42 2012
=>Found attack from 85.26.241.24.
Source port is 23040 and destination ...
1.85.17.248 - Login in Attempts
Just started getting this one today. Other attempts from other addresses had stopped for a few days but started up again this morning.
Thu Aug 16 11:25:18 2012
=>Found attack from 1.85.17.248.
Sour...
72.44.80.57 - HackAttack: [Trojan Scan]
Aug 15 23:55:59 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:41812 to 80.220.22.74:54320
Aug 15 23:56:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:41812 to 80.220.2...
91.226.212.41 - HackAttack: [TCP SYN Flooding] + INFO
Aug 15 06:25:20 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.226.212.41:59464 to 80.220.22.74:27977
Aug 15 06:25:20 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.226.212.41:476...
213.186.33.4 - WebAttack
Tried to attack my system.[SID: 25736] Web Attack: Exploit Toolkit Website 8 attack blocked. Traffic has been blocked for this application: \\DEVICE\\HARDDISKVOLUME1\\PROGRAM FILES\\INTERNET EXPLORER\...
50.97.49.236 - HackAttack: [SPI:Illegal connection state attack] + INFO
Aug 15 01:23:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.49.236 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.97.49.236 RESULT:
50.97.49.236 IP addre...
68.68.27.34 - HackAttack: [SPI:Illegal connection state attack]
May 7 21:43:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.27.34 to 80.220.22.74
Aug 15 00:51:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
213.163.65.60 - Multiple alerts "incoming" given by MBAM
He tries to enter my computer, probably through a Remote Administration Tool, MBAM marked it and stopped it. (Malwarebytes Anti-Malware PRO detects and removes malware where even the best known anti-v...
194.217.242.248 - Error
Why this ip is showing in Sonicall firewall. What is the Issue. Why it is showing in our Sonicwall Firewall. Kindly request to remove this..
...
50.97.49.240 - HackAttack: [SPI:Illegal connection state attack]
Aug 14 01:12:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.49.240 to 80.220.22.74
Aug 14 04:50:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
201.222.228.36 - OPENTEAR
15:54:58 201.222.228.36 block for 5 min OPENTEAR
My firewall has detected this attack when i wan using bitorrent. No others alerts detected by anti-virus or anti-malware. Be careful buds!
...
1.177.234.11 - HackAttack: [SPI:Illegal connection state attack]
Aug 13 09:10:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 1.177.234.11 to 80.220.22.74
Aug 13 09:10:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
118.17.122.121 - HackAttack: [SPI:Illegal connection state attack]
Aug 13 06:43:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 118.17.122.121 to 80.220.22.74
Aug 13 06:43:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
Trying to break into my NAS by quessing the username and password. This is all
for the moment
Trying to break into my NAS by quessing the username and password. This is all for the moment
Trying to...
115.38.214.2 - HackAttack: [SPI:Illegal connection state attack]
Aug 12 23:19:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 115.38.214.2 to 80.220.22.74
Aug 12 23:19:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
85.17.188.76 - HackAttack: [SPI:Illegal connection state attack]
Aug 11 00:40:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 85.17.188.76 to 80.220.22.74
Aug 12 21:21:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
72.21.194.32 - 72.21.194.32
McAfee firewall blocked 72.21.194.32 from accessing my PC around 1pm CDT. I had just clicked \"Follow\" on twitter to follow someone associated with NASA. It could\'ve been a coincidence b...
46.119.124.196 - Try to hack
Websites
http://spricigariteza60min.com
http://littlestpetshop.bg
http://lubamanolova.info
http://ifco-sofia2012.com
Was under attack from this IP address: 46.119.124.196. Attempts was 68 times for l...
72.21.194.32 - risky connection blocked
I had my laptop on and a sign from McAfee came up saying there was a risky connection attempt. McAfee blocked a risky connection from this ip address 72.21.194.32...
159.253.131.99 - HackAttack: [SPI:Illegal connection state attack] + INFO
Aug 11 21:53:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 159.253.131.99 to 80.220.22.74
Aug 11 21:53:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
72.44.80.57 - HackAttack: [Trojan Scan]
Aug 11 07:17:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:33411 to 80.220.22.74:31337
Aug 11 07:17:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:33411 to 80.220.2...
61.128.110.96 - Attempted Network Intrusion
My Anti-Virus Program just Reportet this IP and blocked it!
Detected: Intrusion.Win.MSSQL.worm.Helkern
UDP from 61.128.110.96 to local port 1434
Hope this Person will be hit by Lightning while shitt...
72.44.80.57 - HackAttack: [Trojan Scan]
Aug 11 05:28:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:37799 to 80.220.22.74:1243
Aug 11 05:28:29 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:37799 to 80.220.22...
72.44.80.57 - HackAttack: [Net Bus Scan]
Aug 11 04:52:47 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:60330 to 80.220.22.74:12345
Aug 11 04:52:50 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:60330 to 80.220...
72.44.80.57 - HackAttack: [Trojan Scan]
Aug 11 04:36:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:56173 to 80.220.22.74:54320
Aug 11 04:36:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:56173 to 80.220.2...
72.44.80.57 - HackAttack: [Net Bus Scan]
Aug 11 04:31:00 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:52421 to 80.220.22.74:12345
Aug 11 04:31:03 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:52421 to 80.220...
72.44.80.57 - HackAttack: [Trojan Scan]
Aug 11 01:20:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:58996 to 80.220.22.74:31337
Aug 11 01:21:00 HackAttack: [Trojan Scan] TCP packet from [nas0] 72.44.80.57:58996 to 80.220.2...
58.218.199.227 - More than 20 attemps in 1 day
Tried to access to my computer. Blocked by ZoneAlarm
More than 20 attemps in 1 day
Tried to access to my computer. Blocked by ZoneAlarm
More than 20 attemps in 1 day
Tried to access to my computer. Bl...
126.126.2.137 - HackAttack: [SPI:Illegal connection state attack]
Aug 10 12:34:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 126.126.2.137 to 80.220.22.74
Aug 10 12:34:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
108.163.223.94 - HackAttack: [SPI:Illegal connection state attack]
Aug 10 08:10:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.163.223.94 to 80.220.22.74
Aug 10 08:23:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
108.163.223.94 - HackAttack: [SPI:Illegal connection state attack] + INFO
Aug 10 03:32:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.163.223.94 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.163.223.94 RESULT:
108.163.223.94 IP...
91.121.167.190 - HackAttack: [SPI:Illegal connection state attack]
Jul 19 23:05:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 91.121.167.190 to 80.220.22.74
Aug 10 00:45:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
72.21.194.32 - Mcafee blocked this address 72.21.194.32
McaAfee blocked this as a risky connection making me susceptible to phishing and malware attack. McAfee blocked IP address 72.21.194.32 .Trying to gain access to my pc...
31.184.245.200 - during infected with sirefef
the process svchost tried to get contact to this ip every 5-20 min, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254.254,...
31.184.244.180 - during infected with sirefef
the process svchost tried to get contact to this ip every 5-20 min, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254.254,...
78.41.203.120 - during infected with sirefef
the process svchost tried to get contact to this ip every 5-20 min, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254.254,...
31.184.245.120 - during infected with sirefef
the process svchost tried to get contact to this ip every 5-20 min, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254.254,...
91.188.37.21 - during infected with sirefef
the process explorer.exe tried to get contact to this ip once in a while (each time for two tries), since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 1...
88.254.254.254 - during infected with sirefef
process explorer.exe tried to get contact to this ip every 5-10 seconds, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254...
119.244.254.254 - during infected with sirefef
process explorer.exe tried to get contact to this ip every 5-10 seconds, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254...
117.254.254.254 - during infected with sirefef
process explorer.exe tried to get contact to this ip every 5-10 seconds, since sirefef is removed no more tries happened
further involved: 31.184.245.120, 88.254.254.254, 117.254.254.254, 119.244.254...
108.178.40.186 - Intrusion Attempt
Norton Security reported: An intrusion attempt by lukaho944.us.to was blocked. Nothing flagged in hard firewall.
25 words required. I have never been punished for being brief since high school....
46.118.118.103 - 46.118.118.103 report
Description: There was an unsuccessful attempt to login into the backend section of your website using an unknown username.
Alert level: Medium
Date of event: 07.08.2012 13:42:56
User IP: 46.118.11...
87.248.122.122 - yahoo attacking
My anti virus detected covert channel exploit in icmp packet
remote ip address:
87.248.122.122
---------------------
It reapt every time I connect to internet and seems is trying to hacking my pc...
89.191.118.25 - flooding attack
I have eset antivirus and it said it was trying to flood attack it stopped it I guess so yea to to to to to...
61.185.238.233 - MS sql worm attack
UDP attack on port 1434 - MSSQL worm Helkern from ip No. 61.185.238.233 from China. IP Address: 61.185.238.233 IP Address Country: China (CN)
IP Address Region: 02 Zhejiang IP Address City: Sha...
125.134.178.74 - HackAttack: [SPI:Illegal connection state attack]
Aug 4 07:26:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 125.134.178.74 to 80.220.22.74
Aug 4 07:26:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
61.235.147.19 - numerous failed password attempts from this ip address
I am receiving a number of failed password attempts from this china ip address. This is being done on a large number of ports. ...
72.44.80.57 - HackAttack: [Net Bus Scan]
Aug 3 00:21:04 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:44503 to 80.220.22.74:12345
Aug 3 00:21:07 HackAttack: [Net Bus Scan] TCP packet from [nas0] 72.44.80.57:44503 to 80.220...
42.75.14.125 - Intrusion attempt
Anti virus has blocked an intrusion attempt from IP address 42.75.14.125 with incorrect SYN, ACK and FIN combinations on 2 August 2012 14:10:38 BST. Only one attempt so far....
50.97.97.41 - FIREWALL icmp check
Aug 2 02:47:38 FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 50.97.97.41 Dst ip: 196.217.99.127 Type: Destination Unreachable Code: Port Unreacheable
thanks for your interrest
...
58.218.199.250 - Detected Port Scanning attack
Date: From: To:
02/08/2012 14:37:50 58.218.199.250:12200 xxx.xxx.xxx.xxx:7212 TCP
02/08/2012 14:35:18 58.218.199.227:12200 xxx.xxx.xx...
67.222.12.123 - HackAttack: [Trojan Scan]
Aug 1 23:36:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:50047 to 80.220.22.74:54320
Aug 1 23:36:05 HackAttack: [Trojan Scan] TCP packet from [nas0] 67.222.12.123:50047 to 80.2...
119.70.185.25 - HackAttack: [SPI:Illegal connection state attack]
Aug 1 23:28:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 119.70.185.25 to 80.220.22.74
Aug 1 23:28:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
173.12.155.166 - Firewall blocked request
IP: 78.85.53.190 August 01 2012 08:41:34
Request: /wp-content/plugins/wpstorecart/php/upload.php
Code: On our user agent blacklist
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*...
115.135.128.88 - HackAttack: [Net Bus Scan]
Aug 1 00:31:58 HackAttack: [Net Bus Scan] TCP packet from [nas0] 115.135.128.88:43126 to 80.220.22.74:12345
Aug 1 00:32:01 HackAttack: [Net Bus Scan] TCP packet from [nas0] 115.135.128.88:43126 to ...
222.168.189.48 - Trying to get into myPC
Found attack from 222.168.189.48.
Source port is 57975 and destination port is 88 which use the TCP protocol.
Wed Aug 1 00:54:27 2012
numerous times 24 hours a day....
184.22.13.103 - Trying to get into my PC
Not much information on this one, just that there numerous attempts all day long from this address.
Found attack from 184.22.13.103.
Use the ICMP protocol.
Wed Aug 1 03:16:50 2012
...
14.139.209.84 - Trying to get into my PC
Found attack from 14.139.209.84.
Source port is 5174 and destination port is 22 which use the TCP protocol. Another new one that just started today...
87.201.115.22 - Trying to get into my PC
Found attack from 87.201.115.22.
Source port is 50504 and destination port is 6670 which use the TCP protocol.
Wed Aug 1 09:29:32 2012
A new one that just started today...
58.218.199.250 - Trying to get into my PC
Found attack from 58.218.199.227.
Source port is 12200 and destination port is 27977 which use the TCP protocol.
Wed Aug 1 08:11:33 2012 Numerous times a day...
74.53.249.58 - Trying to get in my PC
Found attack from 74.53.249.58.
Source port is 50756 and destination port is 3389 which use the TCP protocol.
Wed Aug 1 08:11:33 2012
Numerous times a day...
61.219.85.233 - Trying to get into my PC
Found attack from 61.219.85.233.
Source port is 8888 and destination port is 1433 which use the TCP protocol.
Tue Jul 31 13:28:18 2012
numerous times...
121.185.195.85 - HackAttack: [Net Bus Scan]
Jul 31 19:52:23 HackAttack: [Net Bus Scan] TCP packet from [nas0] 121.185.195.85:3132 to 80.220.22.74:12345
Jul 31 19:52:26 HackAttack: [Net Bus Scan] TCP packet from [nas0] 121.185.195.85:3132 to 80...
126.12.147.73 - HackAttack: [SPI:Illegal connection state attack]
Jul 31 18:31:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 126.12.147.73 to 80.220.22.74
Jul 31 18:31:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
24.230.197.185 - HackAttack: [SPI:Illegal connection state attack]
Jul 31 08:30:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.230.197.185 to 80.220.22.74
Jul 31 08:30:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
184.154.48.62 - HackAttack: [SPI:Illegal connection state attack]
Jul 29 13:31:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.154.48.62 to 80.220.22.74
Jul 31 08:22:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
80.82.66.111 - 80.82.66.111 keeps pinging my computer.. every sec..
Plz stop the pinging from this ip address. would be greatly appriciated...
thanks...
word
word word word word word word word word word word word. ...
79.40.99.23 - 79.40.99.23
13:55:42 79.40.99.23 SHORT_FRAGMENTS detected by Augnitum Outpost firewall, just when i tried to update foxit reader and the firewall blocked the direction.
Waiting for your answer, thanks for your ...
211.210.124.201 - Attack
Hello,
This hackers group are trying to scan my network, i have many alert in my firewall,
Port scan,ports vulnerability since few days ...
25 word now ! ...
58.218.199.58 - Portscanning attack
I wish someone would just shut down china\'s internet. That country is full of nothing but rice eating slope thieving trash. 25 words? There isn\'t really much else to say, I\'ve tried everything to k...
116.49.186.74 - HackAttack: [Trojan Scan]
Jul 30 02:27:24 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.186.74:57002 to 80.220.22.74:31337
Jul 30 02:27:24 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.186.74:57061 to 80.2...
58.218.199.227 - getting a message that my personal firewall is being attacked by IP
I keep getting a firewall message thru my eset that I am getting a port attempt from IP address 58.218.199.227. What can I do?...
116.49.186.74 - HackAttack: [Trojan Scan] + [TCP SYN Flooding]
Jul 29 21:58:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.186.74:55863 to 80.220.22.74:31337
Jul 29 21:58:47 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.186.74:55880 to 80.2...
193.66.251.210 - HackAttack: [Trojan Scan]
Jul 29 15:47:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 193.66.251.210:80 to 80.220.22.74:54320
Jul 29 15:47:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 193.66.251.210:80 to 80.220.2...
116.49.186.74 - HackAttack: [Trojan Scan]
Jul 29 11:33:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.186.74:55188 to 80.220.22.74:1243
Jul 29 11:33:53 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.186.74:55188 to 80.22...
58.218.199.250 - Port Scanning Attack
Starting July 27th my anti-virus (ESET Nod32) has been detecting Port Scanning attack attempts from this IP and another similar IP. I tried formatting my hard drive but it\'s still happening and I don...
108.170.4.242 - HackAttack: [SPI:Illegal connection state attack]
Jul 23 19:17:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.4.242 to 80.220.22.74
Jul 28 19:25:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
93.170.107.139 - Ð¡ÐµÑ‚ÐµÐ²Ð°Ñ Ð°Ñ‚Ð°ÐºÐ°
Firewall (Kaspersky Internet Security 2012)
Ð¡ÐµÑ‚ÐµÐ²Ð°Ñ Ð°Ñ‚Ð°ÐºÐ° TCP от 93...
91.202.63.177 - ÑÐµÑ‚ÐµÐ²Ð°Ñ Ð°Ñ‚Ð°ÐºÐ°
ПоÑтоÑÐ½Ð½Ð°Ñ ÑÐµÑ‚ÐµÐ²Ð°Ñ Ð°Ñ‚&ET...
211.141.86.248 - More attemps out of China to hack my computer
Unbelievable...just got hit again while filing a complaint..getting hit multiple times daily
Object: UDP from 211.141.86.248 to local port 1434
Event: Denied: Intrusion.Win.MSSQL.worm.Hellkern...
61.234.245.66 - Constant attempts out of China to access my computer
The attempt showed up on my firewall as:
Object: UDP from 61.234.245.66 to local port 1434
Denied: Intrusion.Win.MSSQL.worm.Hellkern
Is there anyone who can get these people to stop?...
Hi, I have got the alert \" denied intrusion.win.mssql.worm.helkern\" today from my Antivirus which pointed that the above message and blocked the UDP sent from the IP \"210.200.228.215...
184.105.159.93 - HackAttack: [Trojan Scan]
Jul 26 05:09:59 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.105.159.93:1261 to 80.220.22.74:1243
Jul 26 05:10:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.105.159.93:1261 to 80.22...
198.136.55.103 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jul 25 03:30:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.103 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/198.136.55.103 RESULT:
198.136.55.103 IP...
61.128.110.96 - Attempted Network Intrusion
Object: UDP from 61.128.110.96 to local port 1434
Event: Denied: Intrusion.Win.MSSQL.worm.Helkern
Continually attacking my network. Is there anybody out there who can do anything about this?...
98.126.112.18 - HackAttack: [Trojan Scan]
Jul 24 15:57:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.112.18:1478 to 80.220.22.74:31337
Jul 24 15:57:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.112.18:1478 to 80.220...
98.126.50.178 - HackAttack: [Trojan Scan]
Jul 24 15:13:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.50.178:1857 to 80.220.22.74:54320
Jul 24 15:13:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.50.178:1857 to 80.220...
68.6.18.100 - PIng ID = 0
Receiving thousands of critical alerts \"ICMP ping id=0! From 68.6.18.100\" in external firewall logs. This has been ongoing for several hours today without any signs of slowing down....
208.83.20.164 - Retard attack.
This annoying idiot is attacking my pc. Peerblock is blocking him for 2 hours. It is driving me crazy. Shut him down or something. Thanks.
...
206.161.121.3 - Malwarebyte alert of Herndon, VA
If I had the skills to nuke this ip I\'d do it in a heartbeat. When I find whatever it is that is causing my sytem to want to call you...trust me...it and you are toast. That is how much animosity you...
213.186.127.14 - repeated alert
213.186.127.14 (Type: incoming, Port: 80)
2012/07/24 08:35:57 +0400 Administrator IP-BLOCK 213.186.127.14 (Type: incoming, Port: 80)
2012/07/24 08:35:57 +0400 Administrator IP-BLOCK 213.186.127.14 (...
61.128.110.96 - Helkern Worm Virus sent from this address
my kapersky anti virus pick up an UDP network worm helkern attack from this IP address. it have attacked me twice within the weeks with this sort of attack not just once. I felt the need to report thi...
122.194.21.12 - SSH port attempt
Multiple and ongoing unauthorised connections to SSH port according to console logs. This IP address does not have permissions to attempt to connect to this system....
74.117.56.131 - SSH Port attempt
This IP attempted to connect via SSH. This ip does not have authorized access to any device at this site. Our firewall blocked on 1st attempt.
...
58.218.199.227 - LANDATTACKIN attack
Jul 23 07:39:53 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attack detected from 58.218.199.250 117
Jul 23 07:39:54 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attac...
61.128.110.96 - Network attack alert by Kaspersky 2012 by given IP
My Kaspersky gave an alert that i was attacked by the IP address 61.128.110.96. At first I just ignored it but later on I got another alert for Network Attack. I want to complaint about attack, though...
61.128.110.96 - Intrusion.Win.MSSQL.worm.Helkern
It\'s absurd you\'re still using this worms to make attacks, however, it\'s very annoying. Trust me, it won\'t get too far.
UDP desde 61.128.110.96 al puerto local 1434 Denegado: Intrusion.Win.MSSQL....
80.74.151.194 - whois.ripe.net
Greetings!
Elemer Erdelyi here, from Hungary;
dvfinance@t-online.hu;
My English is still very hobble, and I don\' t no why I\' m is here?
Sorry! Can you help me?
Elemer Erdelyi
www.erdelyieforecl.blo...
108.170.4.242 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jul 22 02:50:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.4.242 to 80.220.22.74
Jul 22 05:34:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
119.236.114.165 - HackAttack: [Trojan Scan]
Jul 21 08:44:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.236.114.165:59031 to 80.220.22.74:54320
Jul 21 08:44:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.236.114.165:59102 to ...
119.236.114.165 - HackAttack: [Trojan Scan]
Jul 21 01:21:02 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.236.114.165:55718 to 80.220.22.74:1243
Jul 21 01:21:05 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.236.114.165:55718 to 8...
98.126.108.154 - HackAttack: [Trojan Scan]
Jul 20 23:57:50 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:3287 to 80.220.22.74:31337
Jul 20 23:57:53 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:3287 to 80.2...
61.128.110.96 - Helkern
Leave me alone you fucking chinese! Don\'t you have enything better too doo. You won\'t find eny intresting in my computer or my network, like that fantastic tentacle porno. So gtfo from the world wid...
222.186.20.44 - trying to access port 3389
Malware bytes reports this IP is trying to access port 3389. I\'m being attacked 2-3 times a day from a group of IPs in China...
198.136.55.109 - HackAttack: [SPI:Illegal connection state attack]
Jul 20 22:38:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.109 to 80.220.22.74
Jul 20 23:25:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
98.126.108.154 - HackAttack: [Trojan Scan]
Jul 20 20:53:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:3909 to 80.220.22.74:1243
Jul 20 20:53:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:3909 to 80.22...
61.147.127.241 - HackAttack: [Trojan Scan]
Jul 20 20:07:52 HackAttack: [Trojan Scan] TCP packet from [nas0] 61.147.127.241:4025 to 80.220.22.74:54320
Jul 20 20:07:55 HackAttack: [Trojan Scan] TCP packet from [nas0] 61.147.127.241:4025 to 80.2...
98.126.108.154 - HackAttack: [Trojan Scan]
Jul 20 18:20:19 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:2905 to 80.220.22.74:54320
Jul 20 18:20:22 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:2905 to 80.2...
41.98.173.32 - HackAttack: [SPI:Illegal connection state attack]
Jul 20 14:29:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.98.173.32 to 80.220.22.74
Jul 20 14:29:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
98.126.108.154 - HackAttack: [Trojan Scan]
Jul 20 11:44:01 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:1998 to 80.220.22.74:54320
Jul 20 11:44:03 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.126.108.154:1998 to 80.2...
77.222.56.57 - Alerted by Malwarebytes Anti-Malware
Soft blocked an outgoing connection to this iP
2012/07/20 20:42:41 +0200 (USERDATA) IP-BLOCK 77.222.56.57 (Type: outgoing, Port: 58039, Process: firefox.exe)
2012/07/20 20:42:49 +0200 (USERDATA) IP-B...
115.177.205.110 - HackAttack: [SPI:Illegal connection state attack]
Jul 20 01:31:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 115.177.205.110 to 80.220.22.74
Jul 20 01:31:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
61.219.178.57 - MULTI-SLASH-ENCODING ATTACK
The IP attacked my private website with a MULTI SLASH ENCODING ATTACK attempt on the evening of 7/19/12, for several hours, so far. Neither the site nor the domain are public....
58.218.199.227 - j'ai des attaques
Je suis constament attaquer par vos gens je suis la solution final j\'exgige et j\'ordonne que sa cesse ou vous verrai votre pays tomber dans l\'instabilité votre manque de respect envers...
91.239.24.245 - Summary of attack
I received this in my web filter: http://myinfo.any-request- allowed.com/?strGet=get9992. Basically it was repeated a few times with the strGet changed and it had a few entries....
184.105.159.93 - HackAttack: [Trojan Scan]
Jul 19 02:04:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.105.159.93:2339 to 80.220.22.74:1243
Jul 19 02:04:28 HackAttack: [Trojan Scan] TCP packet from [nas0] 184.105.159.93:2339 to 80.22...
189.200.3.2 - PeerBlock spamming
PeerBlock stopped these beaners at least 25 times in a half hour. Labelled as \"botnet on MetroRED Telecom Services\". Not sure what it\'s about, but I\'m keeping PeerBlock on, just to make ...
213.163.65.60 - Multiple alerts "incoming" given by MBAM
Since yesterdday, multiple alerts \"incoming\" detected by MBAM.
(Malwarebytes Anti-Malware PRO detects and removes malware where even the best known anti-virus and anti-malware applications...
76.87.99.153 - IP 76.87.99.153 Doing Port Scan Continously
IP 76.87.99.153 Doing Port Scan Continously for almost 1 week. Over one hundred a day. Only info I can find is it\'s from rr.com.
cpe-76-87-99-153.socal.res.rr.com to be exact....
220.243.3.105 - Hacking into system
sshd:
Authentication Failures:
unknown (220.243.3.105): 576 Time(s)
root/password from 220.243.3.105: 297 Time(s)
webalizer/password from 220.243.3.105: 1 Time(s)...
199.192.157.216 - HackAttack: [Trojan Scan]
Jul 18 11:30:34 HackAttack: [Trojan Scan] TCP packet from [nas0] 199.192.157.216:2073 to 80.220.22.74:54320
Jul 18 11:30:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 199.192.157.216:2073 to 80...
86.183.127.140 - HackAttack: [Trojan Scan]
Jul 18 10:52:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 86.183.127.140:63392 to 80.220.22.74:1243
Jul 18 10:52:58 HackAttack: [Trojan Scan] TCP packet from [nas0] 86.183.127.140:63404 to 80....
88.198.11.8 - HackAttack: [SPI:Illegal connection state attack]
Jul 17 18:33:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 88.198.11.8 to 80.220.22.74
Jul 18 05:56:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
176.227.198.140 - HackAttack: [Trojan Scan]
Jul 18 02:25:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:54169 to 80.220.22.74:1243
Jul 18 02:25:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:54178 to 8...
176.227.198.140 - HackAttack: [Trojan Scan] + HackAttack: [TCP SYN Flooding]
Jul 18 00:42:08 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:59008 to 80.220.22.74:1243
Jul 18 00:42:08 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:59015 to 8...
124.236.9.132 - HackAttack: [SPI:Illegal connection state attack]
Jul 17 15:03:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 124.236.9.132 to 80.220.22.74
Jul 17 15:03:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
69.50.210.135 - web filter detection
date=2012-07-17 time=02:29:19 src=69.50.210.135 sport=41848 src_port=41848 src_int=\"port1\" dst=xxx.xxx.xxx.xxx dport=443 dst_port=443 dst_int=\"port10\" service=\"https\&quo...
176.227.198.140 - HackAttack: [Trojan Scan] + HackAttack: [TCP SYN Flooding]
Jul 17 12:06:49 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:55628 to 80.220.22.74:1243
Jul 17 12:06:49 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:55632 to 8...
199.192.157.216 - HackAttack: [Trojan Scan]
Jul 17 10:50:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 199.192.157.216:2267 to 80.220.22.74:1243
Jul 17 10:50:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 199.192.157.216:2267 to 80....
176.227.198.140 - HackAttack: [Trojan Scan]
Jul 17 09:44:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:57069 to 80.220.22.74:1243
Jul 17 09:44:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:57075 to 8...
176.227.198.140 - HackAttack: [Trojan Scan]
Jul 16 23:13:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:65071 to 80.220.22.74:1243
Jul 16 23:13:21 HackAttack: [Trojan Scan] TCP packet from [nas0] 176.227.198.140:65073 to 8...
220.85.73.53 - intrusion attempt
Tries to enter the computer with different passwords for root using different ports and protocol ssh2. ip-address is listet for Seoul, Republic of Korea, Korea Telecom....
119.237.169.138 - HackAttack: [Trojan Scan]
Jul 16 02:21:08 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.237.169.138:55728 to 80.220.22.74:1243
Jul 16 02:21:11 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.237.169.138:55728 to 8...
63.223.114.127 - HackAttack: [Trojan Scan]
Jul 15 16:58:54 HackAttack: [Trojan Scan] TCP packet from [nas0] 63.223.114.127:3865 to 80.220.22.74:31337
Jul 15 16:58:57 HackAttack: [Trojan Scan] TCP packet from [nas0] 63.223.114.127:3865 to 80.2...
86.181.208.63 - HackAttack: [Trojan Scan]
Jul 15 14:32:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 86.181.208.63:60853 to 80.220.22.74:54320
Jul 15 14:32:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 86.181.208.63:60855 to 80.2...
116.48.123.18 - HackAttack: [Trojan Scan]
Jul 15 13:07:24 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.48.123.18:65229 to 80.220.22.74:54320
Jul 15 13:07:27 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.48.123.18:65273 to 80.2...
64.31.29.61 - Attempting McAfee http/game play port 6515 hack
71 hits in last 24 hrs from 64.31.29.61 to my system. Attempting to exploit
port 6515. This is an exploit of the Mcafee http/game play hack....
219.153.65.119 - ROOT ACCESS FROM THIS IP
THIS IP OWNER TRYING TO ACCESS ROOT PASSWORD USING PORT 22 .PLEASE HELP ME TO TRACK THIS IP USER , FROM WHICH COMPANY , IS IT A DYNAMIC IP ADDRESS ....
95.168.183.186 - HackAttack: [Trojan Scan]
Jul 15 11:08:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.168.183.186:59942 to 80.220.22.74:54320
Jul 15 11:08:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.168.183.186:59941 to 80...
187.45.180.205 - HackAttack: [Trojan Scan]
Jul 15 10:26:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:45063 to 80.220.22.74:54320
Jul 15 10:26:38 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:45061 to 80...
71.158.241.202 - HackAttack: [Trojan Scan]
Jul 15 10:23:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 71.158.241.202:38885 to 80.220.22.74:31337
Jul 15 10:23:25 HackAttack: [Trojan Scan] TCP packet from [nas0] 71.158.241.202:64221 to 80...
95.168.183.186 - HackAttack: [Trojan Scan]
Jul 15 10:16:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.168.183.186:53243 to 80.220.22.74:31337
Jul 15 10:16:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.168.183.186:53242 to 80...
65.19.133.90 - HackAttack: [Trojan Scan]
Jul 15 10:02:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 65.19.133.90:46153 to 80.220.22.74:1243
Jul 15 10:02:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 65.19.133.90:46154 to 80.220....
95.168.183.186 - HackAttack: [Trojan Scan]
Jul 15 09:17:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.168.183.186:36788 to 80.220.22.74:54320
Jul 15 09:17:43 HackAttack: [Trojan Scan] TCP packet from [nas0] 95.168.183.186:36789 to 80...
187.45.180.205 - HackAttack: [Trojan Scan]
Jul 15 09:16:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:60760 to 80.220.22.74:1243
Jul 15 09:16:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 187.45.180.205:60759 to 80....
116.48.121.113 - HackAttack: [Trojan Scan]
Jul 14 19:53:33 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.48.121.113:64186 to 80.220.22.74:54320
Jul 14 19:53:35 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.48.121.113:64310 to 80...
184.164.144.93 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jul 14 19:02:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.164.144.93 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/184.164.144.93 RESULT:
184.164.144.93 I...
89.248.100.198 - Compromised or Hostile Host Traffic
Jul 14 00:29:58 snort[14456]: [1:2500080:2567] ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (41) [Classification: Misc Attack] [Priority: 2] {TCP} 89.248.100.198:29108 -> 108.17.34...
81.23.250.227 - Compromised or Hostile Host Traffic
Jul 14 01:41:46 snort[14456]: [1:2500074:2567] ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (38) [Classification: Misc Attack] [Priority: 2] {TCP} 81.23.250.227:65324 -> 108.17.34....
46.119.123.239 - Repeated attempts to hack
Repeated attempts to hack admin account.
This hacker is trying to access same page again and agan abot 3 hrs interval.
Get this address banned please.
Currently tries to hack our Joomla site administ...
50.97.97.41 - HackAttack: [SPI:Illegal connection state attack]
Jun 25 19:25:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.97.41 to 80.220.22.74
Jul 13 04:46:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
116.49.125.80 - HackAttack: [Trojan Scan]
Jul 13 04:19:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.125.80:52288 to 80.220.22.74:54320
Jul 13 04:19:06 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.49.125.80:52329 to 80.2...
46.249.63.16 - HackAttack: [Trojan Scan]
Jul 12 23:50:05 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.249.63.16:53604 to 80.220.22.74:54320
Jul 12 23:50:05 HackAttack: [Trojan Scan] TCP packet from [nas0] 46.249.63.16:53608 to 80.220...
119.236.67.80 - HackAttack: [Trojan Scan]
Jul 12 19:22:26 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.236.67.80:49584 to 80.220.22.74:54320
Jul 12 19:22:29 HackAttack: [Trojan Scan] TCP packet from [nas0] 119.236.67.80:49584 to 80.2...
116.48.123.113 - HackAttack: [Trojan Scan]
Jul 12 10:40:29 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.48.123.113:51419 to 80.220.22.74:54320
Jul 12 10:40:32 HackAttack: [Trojan Scan] TCP packet from [nas0] 116.48.123.113:51419 to 80...
64.64.2.159 - constantly asking for outgoing access to this address.
constantly asking for outgoing access to this address. However i do not know why it wants to access this address and for what reason. To be on the safe side block this ip address....
60.173.26.237 - Portscan
Since a few days i get every day a Popup from Bitdefender which informed me about a blocked portscan from this IP. Protocol: TCP. It started on 2012-07-06...
61.132.27.120 - Portscan detected
Since a few days i get every day a Popup from Bitdefender which informed me about a blocked portscan from this IP and from 60.173.26.237....
198.136.55.16 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jul 10 11:13:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.16 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/198.136.55.16 RESULT:
198.136.55.16 IP ad...
180.70.69.246 - illegal connection state attack
Jul 10 10:01:38 home user.info kernel: HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas_0_0_101] 180.70.69.246 to xxx.xxx.xxx.xxx
Multiple attempts at entry...
24.23.156.34 - Illegal connection state attack
Firewall logs report illegal state connection packer from [nas_0_0_101] 24.23.156.34 to xxx.xxx.xxx.xxx
Jul 10 10:02:28 home user.info kernel: HackAttack: [SPI:Illegal connection state attack] IC...
210.106.26.103 - HackAttack: [SPI:Illegal connection state attack]
Jul 9 17:39:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 210.106.26.103 to 80.220.22.74
Jul 9 17:39:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
67.215.246.204 - this ip adress is scanning my computor
it is slowing down my system this ip adress is scanning my computor Malwarebytes keeps blocking Outgoing IP Address 67.215.246.204, and it has been accomplicing ...
I turned on my computer and the Catylyst Control Software was trying to communicate with this IP address. The software also wanted to know if modifications to the software were allowed....
222.64.67.18 - Utorrent Port Intruder
Wanted to go thru it several times, fortunately my software stopped him.
I advice everyone else to use malwarebytes or he\'ll gain access to part of your network....
206.248.139.133 - HackAttack: [SPI:Illegal connection state attack]
Jul 9 10:41:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 206.248.139.133 to 80.220.22.74
Jul 9 10:52:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
64.37.60.116 - selling fresh cc cvv cvv2 dumps track pp wu transfer pp
IF YOU NEED, CONTACT ME BY
Yahoo : mayback.money
Mail : mayback.money@yahoo.com
CHAT WITH ME FOR FURTHER INFORMATION
------------- do WU Transfer -------------
Transfer : US,UK,CA,AU,EU,France,Ge...
64.37.60.116 - selling fresh cc cvv cvv2 dumps track pp wu transfer pp
IF YOU NEED, CONTACT ME BY
Yahoo : mayback.money
Mail : mayback.money@yahoo.com
CHAT WITH ME FOR FURTHER INFORMATION
------------- do WU Transfer -------------
Transfer : US,UK,CA,AU,EU,France,Ge...
68.82.96.169 - HackAttack: [SPI:Illegal connection state attack]
Jul 7 16:04:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.82.96.169 to 80.220.22.74
Jul 7 16:04:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
58.218.199.58 - Port Scanning AHOLE
Port scanning from this slope red sea system....nice. Shut it down..or were pinging back..Get a real job rice eater....58.218.199.227, 58.218.199.250
send anti-spam reports to spam@jsinfo.net
send a...
58.218.199.250 - Portscan from 58.218.199.250
Apparantly some china hackers are sounding out my system for the last couple of weeks. Also adress 58.218.199.58 is being used.
Warning to you all, update every peace of software you run on your comp...
221.182.2.9 - Known Compromised or Hostile Host Traffic
From Snort Log:
4 2 TCP ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (27) Misc Attack 221.182.2.9 5157 -> 108.17.38.127 22 1:2500052:2560 07/07-03:03:51
-end of report-...
80.67.12.199 - Compromised or Hostile Host Traffic
From Snort log:
2 2 TCP ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (39) Misc Attack 80.67.12.199 60261 -> nnn.nn.nn.nnn 22 1:2500076:2560 07/07-11:41:08
3 2 TCP E...
41.68.54.98 - Your employee with IP 41.68.54.98 is chatting with our employees using their names and harrasing them.
Your employee with IP 41.68.54.98 is chatting with our employees using their names and harrasing them. I am assuming this employee is shaik Abid hussain. He was working in Bangalore India and was move...
198.136.55.110 - HackAttack: [SPI:Illegal connection state attack]
Jun 11 19:17:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.110 to 80.220.22.74
Jul 6 16:42:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
107.22.255.239 - HackAttack: [SPI:Illegal connection state attack]
Jul 6 14:40:26 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 107.22.255.239:0 to 80.220.22.74:0
Jul 6 16:41:29 HackAttack: [SPI:Illegal connection state attack] TCP packet...
46.233.7.216 - OS Attack from 46.233.7.216
I would like to report that he computer with the IP address 46.233.7.216 is repeatedly attempting intrusions (os attacks - ms rpcss cve 2004 0116 3) on my computer...
78.231.226.37 - Os Attack from 78.231.226.37
I would like to report that he computer with the IP address 78.231.226.37 is repeatedly attempting intrusions (os attacks - ms rpcss cve 2004 0116 3) on my computer....
107.22.255.239 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jul 6 10:28:33 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 107.22.255.239:0 to 80.220.22.74:0
http://www.ip-adress.com/ip_tracer/107.22.255.239 RESULT:
107.22.255.239...
I\'m Seller for : CC, CVV US,UK,CA, EURO,AU, Italian,Japan,France ...
Selling cvv cvv US UK EU ASIA Bank longins tracks dumps ......
I sell fresh live cc CVV cv2 from all over the world. Trusted S...
31.7.60.138 - HackAttack: [SPI:Illegal connection state attack]
Jul 4 09:16:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 31.7.60.138 to 80.220.22.74
Jul 4 13:39:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
72.21.194.32 - McAfee blocked this ip
McaAfee blocked this as a risky connection making me susceptible to phishing and malware attack. McAfee blocked IP address 72.21.194.32 .Trying to gain access to my pc...
31.7.60.138 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jul 4 05:06:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 31.7.60.138 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/31.7.60.138 RESULT:
31.7.60.138 IP address...
98.194.49.200 - HackAttack: [Trojan Scan]
Jul 3 01:25:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.194.49.200:33256 to 80.220.22.74:31337
Jul 3 01:25:42 HackAttack: [Trojan Scan] TCP packet from [nas0] 98.194.49.200:33256 to 80.2...
72.21.194.32 - McaAfee blocked this as a risky connection making me susceptible to phishing and malware attacks
this IP is puitting my system in danger. Why would Amazon.com be trying to access my system and endangering my computer. This turned up as a potentially risky connection and I\'m not sure how that hap...
218.88.113.175 - HackAttack: [Trojan Scan]
Jul 2 22:51:20 HackAttack: [Trojan Scan] TCP packet from [nas0] 218.88.113.175:48055 to 80.220.22.74:31337
Jul 2 22:51:23 HackAttack: [Trojan Scan] TCP packet from [nas0] 218.88.113.175:48055 to 80...
85.65.104.167 - HackAttack: [Trojan Scan]
Jul 2 20:34:36 HackAttack: [Trojan Scan] TCP packet from [nas0] 85.65.104.167:38435 to 80.220.22.74:31337
Jul 2 20:34:39 HackAttack: [Trojan Scan] TCP packet from [nas0] 85.65.104.167:38435 to 80.2...
210.106.5.112 - HackAttack: [SPI:Illegal connection state attack]
Jul 2 18:36:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 210.106.5.112 to 80.220.22.74
Jul 2 18:36:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
115.236.59.28 - HackAttack: [SPI:Illegal connection state attack]
Jul 2 12:02:12 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 115.236.59.28:0 to 80.220.22.74:0
Jul 2 12:06:28 HackAttack: [SPI:Illegal connection state attack] TCP packet...
58.218.199.58 - IP address 58.218.199.58
Attack reported by Bull Guard from the above address at 2 July 2012 at about 2150 BST. I don\'t think this is the first time this address has attempted to scan my PC....
46.119.123.239 - Repeated attempts to hack into clients sites
The use of this IP has repeatedly attempted to hack into my clients sites.
Single username and password attempts but still very annoying. Hacker Hacker Hacker...
178.255.83.1 - ocsp.comodoca.com
ocsp.comodoca.com thru 178.255.83.1 attempting to gain unauthorised access.
ocsp.comodoca.com thru 178.255.83.1 attempting to gain unauthorised access.
ocsp.comodoca.com thru 178.255.83.1 attempting ...
206.161.121.126 - 206.161.121.xxx
This domain has my computer sending a lot of incoming and outgoing data that keeps getting blocked by malwarebytes. I believe it\'s connected to a hijack software I haven\'t found in my system yet...
193.66.251.210 - Firewall alert from this incoming tcp
not nice thing anyway.... .. .. .. .. .. .. .... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .... .. ...... .... .. .. .. .... .. .. .. .. .. .... .. .. . . . . . . ....
193.107.19.201 - Web Attack: Blackhole Toolkit Website 14
My firewall gave me a arning today. Apparently this ip was used to try to get in to my computer earlier on, under the name \'\'scoobydoo\'\'.
Attacker URL: scoobydoo.in/refer.php?id=1493da8872f0ccf7
...
31.3.236.218 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 30 14:06:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 31.3.236.218 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/31.3.236.218 RESULT:
31.3.236.218 IP addr...
123.154.26.11 - firewall blocked identy theft, click to prevent damage
TROJAN SPAM VIRUS, I don\'t care, just BLOCK these that are NOT REAL, they are FAKE warnings. China can block opinion but not CRIME. FUCK THEM ALL...
115.236.59.28 - HackAttack: [SPI:Illegal connection state attack]
Jun 30 05:20:34 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 115.236.59.28:0 to 80.220.22.74:0
Jun 30 18:03:49 HackAttack: [SPI:Illegal connection state attack] TCP packet...
192.168.1.6 - 192.168.11.6
numerous firewall alert, more than 50 attempts in a few days.anybody knowing what it is about? it has got port 139 and 1591. many thanks...
72.21.194.32 - McAfee blocked your PC from making a potentially risky connection IP Address 72.21.194.32
Okay, Amazon, why are you trying to get to my PC??????????????????????????????? Or, is someone on you r cloud causing this iusse? Either way, fix it!!!!!!!!!!!!!!!!...
46.119.123.239 - Hacking attempts on our website.
www.tibet.nu is being hassled bij ukrainian creeps trying to log in on as admin.
Please stop this. Their ip is:46.119.123.239. They try every day to guess the passwords.
Thank you....
58.218.199.58 - 58.218.199.58
Port Scanning attempt
IP Address Country: China (CN)
IP Address Region: 22 Beijing
IP Address City: Beijing
IP Postal Code
IP Address Area Code 0
IP Metro Code 0
IP Address Latitude: 39.9289016724...
88.243.127.118 - GMAIL account hack attempt
My gmail account was supposedly attempted to hack from this unknown IP. Frauds like this must be banned from the internet world. Thank god, google has secured login attempts from unknown location
...
91.205.41.57 - McAfee
I keep getting a notification from McAfee saying \'blah blah blocked and ipadress\'
Is this false? Or is it just so McAfee is scaring me into buying their crap??...
58.221.41.59 - HackAttack: [SPI:Illegal connection state attack]
Jun 27 13:48:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 58.221.41.59 to 80.220.22.74
Jun 27 14:16:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
58.221.41.47 - HackAttack: [SPI:Illegal connection state attack]
Jun 24 21:54:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 58.221.41.47 to 80.220.22.74
Jun 27 13:07:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
58.221.41.30 - HackAttack: [SPI:Illegal connection state attack]
Jun 26 20:17:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 58.221.41.30 to 80.220.22.74
Jun 27 12:55:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
58.221.41.30 - icmp check
Jun 27 10:45:24 ( UTC +1 ) FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 58.221.41.30 Dst ip: 178.36.239.107 Type: Destination Unreachable Code: Port Unreacheable...
198.136.62.131 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 27 00:32:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.62.131 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/198.136.62.131 RESULT:
198.136.62.131 IP...
69.67.159.206 - trying to gain access to my pc
Ok this is really annoying that other ip addresses try to gain access to my computer. I have all the latest programs so I am not worried and report all that try but something really must be done about...
72.21.194.32 - Trying to gain access to my pc
my anti virus is blocking this IP whoever it is doesn\'t have access to my computer. It needs to stop NOW! I sure wish these big security companies would do something about these ip addresses trying t...
188.241.44.167 - ICMP flooding
My ESET shows several time flooding attack from this ip : 188.241.44.167.
As I see, I´m not the only one. If there are any ideas , I´ll be thankful...
72.21.194.32 - MCafee Risky Connection Blocked.-Program WeatherBug Desktop
I received this warning this morning at 8:10 AmMountain time address \"72.21.194.32\" saying it was a \"MCafee Risky Connection Blocked\".-that is was a \"Program: WeatherBu...
206.161.121.4 - svchost.exe
I\'m constantly getting Malwarebytes pop-ups blocking outgoing traffic to this IP address using svchost.exe. Scans come up clean within Windows for malware and viruses, so I figured I\'d research thi...
58.218.199.147 - Attempted DOS attack
58.218.199.147, 58.218.199.227 and 58.218.199.250 continuously attempting DOS/ SYN flood attacks on systems behind firewall. Very annoying with extensive firewall logs coming in to email. ...
These kind of attacks need to be killed with fire! Network Flooding & Port Scanning. Formal Complaint Submitted To Server Provider & UK Internet Crime Division. I wish they would simply flood ...
216.246.124.87 - Tris IP try to hack a wordpress site
216.246.124.87 tried to enter my wordpress site. I got yesterday a warning alert from wordpress. The hacker is apparently in Chicago and is in Hostforweb. I am trying to track him....
58.221.41.30 - HackAttack: [SPI:Illegal connection state attack]
Jun 23 21:15:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 58.221.41.30 to 80.220.22.74$
Jun 24 01:30:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
85.97.86.200 - firewall warning about 85.97.86.200
My complaint: I believe 85.97.86.200 is misbehaving I hereby want to report the abuser. I keep receiving repeated warnings about possible fragmentation attacks originating from said IP address...
184.172.172.250 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 23 20:28:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.172.172.250 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/184.172.172.250 RESULT:
184.172.172.25...
27.254.52.184 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 22 18:00:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 27.254.52.184 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/27.254.52.184 RESULT:
27.254.52.184 IP ad...
1.170.133.69 - attempt to connect to me
Jun 22 19:29:20 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=90:01:3b:08:1c:d1:00:19:8f:2e:33:58:08:00 SRC=1.170.133.69 DST=************* LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=62213 DF PRO...
121.9.233.242 - tried to make connections to me
Jun 22 19:37:11 (none) user.alert kernel: Intrusion -> IN=atm0 OUT= MAC=90:01:3b:08:1c:d1:00:19:8f:2e:33:58:08:00 SRC=121.9.233.242 DST=*********** LEN=48 TOS=0x00 PREC=0x00 TTL=237 ID=13673 DF PRO...
93.114.44.187 - Blocked by Malware Bytes
Classed as rogue security by Malware Bytes. Never got through to my computer but blocked by Malware bytes. But now going to do a scan just in case...
58.221.41.47 - Firewall alert
The following alert appears on my log constantly:
FIREWALL icmp check (1 of 1): Protocol: ICMP Src ip: 58.221.41.47 Dst ip: 94.194.202.75 Type: Destination Unreachable Code: Port Unreacheable
...
58.221.41.59 - HackAttack: [SPI:Illegal connection state attack]
Jun 22 04:52:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 58.221.41.59 to 80.220.22.74
Jun 22 05:08:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
198.136.55.195 - HackAttack: [SPI:Illegal connection state attack]
Jun 19 18:33:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.195 to 80.220.22.74
Jun 22 01:22:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.221.41.47 - HackAttack: [SPI:Illegal connection state attack]
Jun 21 12:23:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 58.221.41.47 to 80.220.22.74
Jun 22 04:39:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
128.9.160.132 - Smurf Amplification attacks
I have had an attack dropped on my firewall every 2-3 minutes. I don\'t know what they are doing, but they should not be attacking random IPs for \"research\"...
58.218.199.147 - Attacking my ports
This IP has been randomly attacking my system, NOD 32 firewall seems to keep blocking it.
I hope this IP can be revoked or something to be done about it...
113.98.159.246 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 21 00:05:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 113.98.159.246 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/113.98.159.246 RESULT:
113.98.159.246 IP...
112.90.82.35 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 20 19:50:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 112.90.82.35 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/112.90.82.35 RESULT:
112.90.82.35 IP addr...
72.21.194.32 - Foxmail attempt to connect to 72.21.194.32 blocked by McAfee
The firewall didn\'t alert, but I was looking for explanation of this error message for Foxmail not connecting to Yahoo mail server, \"Error Information: No connection could be made because the t...
85.26.232.101 - Detected Syn Fin scan
My security service blocked this IP address from an attempted syn fin scan for the second time this week.
Will keep updating records as these attempts keep coming in....
128.9.160.132 - Blocked incoming ICMP packet (ICMP type 8) from 128.9.160.132
...
[INFO] Wed Jun 20 13:54:43 2012 Blocked incoming ICMP packet (ICMP type 8) from 128.9.160.132 to 109.173.114.61
[INFO] Wed Jun 20 13:43:39 2012 Blocked incoming ICMP packet (ICMP type 8) from 128....
109.163.226.240 - shows up on my anti malware as a possible malicious ip address
shows up on my anti malware as a possible malicious ip address. potentially ushing for phishing or spware or downloading trojan viruses. which i have had two recently from about the time i have had a ...
198.136.55.195 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 19 16:03:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.195 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/198.136.55.195 RESULT:
198.136.55.195 IP ...
78.187.159.64 - TCP Null Scan + Xmas Tree Attack
Firewall reported intrusion detection \"Probable TCP NULL scan detected\"
Within ten minutes of previous intrusion attempt, firewall reported \"TCP Xmas Tree dropped\"
Reported by...
188.72.248.215 - Hacking
This IP address is trying to hack my computer. They try every five minutes and I have reported them to homeland security. Good Luck Hacker!...
72.21.194.32 - ip address 72.21.194.32
McAfee keeps blocking this risky ip address from my computer. I am tired of this. I wish some one would do some thing about this. Thank you....
140.113.13.101 - SSH root access
A ton of these in my logs, doesn\'t stop, pretty annoying
[sshd] pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=banyan.cm.nctu.edu.tw user=root
[sshd] Failed...
58.218.199.147 - this ipa is hitting my server with proxyproxys.com
some one from this ip address is hitting my server using the following domain proxyproxys.com, I don\'t have this domain registered and it seems like they are trying to hack into my server using some ...
72.21.194.32 - Mcaffee
mcafee has reported that this ip address has been blocked as it was trying to make a connection is stated is was a \" risky connection blocked\"...
4.69.138.62 - HackAttack: [SPI:Illegal connection state attack]
Mar 12 03:05:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 4.69.138.62 to 80.220.22.74
Jun 17 20:37:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
72.21.194.32 - Risky coneection blocked by my McAfee
McAfee (Net Guard) blocked this connection that Internet Explorer 9 was trying to access. Completly out of nowwhere. Please do something about this. I\'ll send Amazon a mail about this too. ...
189.14.98.86 - HackAttack: [SPI:Illegal connection state attack]
Jun 12 09:36:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.158.128.242 to 80.220.22.74
Jun 17 02:52:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
188.227.173.107 - HackAttack: [SPI:Illegal connection state attack]
Apr 20 11:25:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.227.173.107 to 80.220.22.74
Jun 16 23:57:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.218.199.147 - PORT SCANNING
IT BEEN HITTING MY FIREWALL ALOT !! but my firewall blocks it can i block this any other way ? if do tell thanks IT SHOWS AS PORT SCANNING PROLLY THRU PAL TALK .COM
...
125.255.26.61 - HackAttack: [SPI:Illegal connection state attack]
Jun 16 16:27:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 125.255.26.61 to 80.220.22.74
Jun 16 16:27:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
69.64.34.87 - HackAttack: [SPI:Illegal connection state attack]
Jun 16 07:18:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.64.34.87 to 80.220.22.74
Jun 16 07:18:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
94.6.95.87 - none
idk :s confusing stuff what can i do i am just reporting because my stuff told me to. i need 25 wrods to complain wth that is so silly ...
68.67.159.206 - mcafee alert
they said they blocked a suspicious connection to that Ip adress, i think nexus is nexon US who are the owner of the game Combat Arms and others. Don\'t know what it meant for......
180.254.132.210 - Fin Scan alert
Reporting this IP address as it has attempted more than once to port scans on various devices in my home.
Will continue monitoring and will report back as soon as it tries again.
25 words seems like ...
192.168.1.1 - problem of ip conflict with another netwok
there is an ip ddress conflict with another system on the net work . i have receive a massage . during working the speed of the dsn slow and i cant \'n do work
...
58.218.199.58 - HackAttack: [Trojan Scan]
Jun 15 09:56:37 HackAttack: [Trojan Scan] TCP packet from [nas0] 58.218.199.58:3783 to 80.220.22.74:1243
Jun 15 09:56:40 HackAttack: [Trojan Scan] TCP packet from [nas0] 58.218.199.58:3783 to 80.220....
99.115.61.101 - HackAttack: [SPI:Illegal connection state attack]
Jun 14 12:30:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.115.61.101 to 80.220.22.74
Jun 14 12:30:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
111.240.194.47 - Numerous Attempts
Got about 300 attempts to pass through my firewall today and pretty much every other day. This problem continues everyday until they realize they can\'t get through. It is very annoying...
42.214.8.132 - Attack
This IP-adress trying to force my router. This IP-adress trying to force my router.
This IP-adress trying to force my router. This IP-adress trying to force my router...
68.67.159.206 - Risky connection blocked by McAfee
A little unsettling to be notified that McAfee blocked this URL as a risky connection.
They offered no further explanation. I was connected to our local paper\'s website, which is loaded with all fin...
211.147.3.19 - Misc Attack
Jun 13 20:50:27 snort[29783]: [1:2500040:2536] ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (21) [Classification: Misc Attack] [Priority: 2] {TCP} 211.147.3.19:57073 -> xx.xx.xx.xx...
66.228.116.179 - HackAttack: [SPI:Illegal connection state attack]
Jun 13 21:38:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.228.116.179 to 80.220.22.74
Jun 13 22:32:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
91.237.52.179 - HackAttack: [SPI:Illegal connection state attack] +INFO
Jun 13 21:07:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 91.237.52.179 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/91.237.52.179 RESULT:
91.237.52.179 IP ad...
67.202.66.206 - HackAttack: [SPI:Illegal connection state attack]
May 6 00:40:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.202.66.206 to 80.220.22.74
Jun 13 10:04:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
50.30.43.183 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 13 09:31:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.30.43.183 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.30.43.183 RESULT:
50.30.43.183 IP addre...
67.132.117.2 - attempting to connect via port 80
This address (67.132.117.2) has attempted to connect via port 80, which would allow it into our web-configurator. I consider this a brute-force type--testing addresses in search of a configurator....
58.218.199.147 - 58.218.199.147
Have any of you guys got or run an AVTECH cctv DVR ?? curious as ive psoken to a few peopole that run the AVTECH stuff and this ip hits a lot, if i disable the net access to my cctv system i get no at...
I got 32 notifications from the wordpress firewall all from this IP address: myurl.co.uk/wp-content/themes/zcool-like/uploadify.php
Warning: URL may contain dangerous content. Executable File Upload A...
94.180.39.148 - RSFirewall! for......
Page: /administrator/index.php
Description: There was an unsuccessful attempt to login into the backend section of your website using an unknown username.
Alert level: Medium
Date of event: 12.06.2...
41.98.188.43 - HackAttack: [SPI:Illegal connection state attack]
Jun 11 17:48:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.98.188.43 to 80.220.22.74
Jun 11 17:48:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
182.92.255.23 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 11 12:22:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 182.92.255.23 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/182.92.255.23 RESULT:
182.92.255.23 IP add...
this IP hacker is a problem. attacks happen several times per day for week on end. the problems need to be resolved. who can take corrective action?...
198.136.62.51 - HackAttack: [SPI:Illegal connection state attack]
May 29 02:25:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.62.51 to 80.220.22.74
Jun 11 05:07:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
198.136.55.110 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 11 04:02:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.55.110 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/198.136.55.110 RESULT:
198.136.55.110 IP...
188.227.173.140 - HackAttack: [SPI:Illegal connection state attack]
Jun 4 16:28:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.227.173.140 to 80.220.22.74
Jun 11 03:33:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
209.62.45.34 - Some little faggot thinks hes special or something. lol
Probably likes to masturbate to abnormal porn. Also has an affinity for the numbers 9 and 11, fuckin weirdo, lost, weak, little, loser..loool, probably a member of one of those stupid retarded ass cul...
91.213.203.203 - Abuse
fragment_out-of-order 9956
i have the report in my Intrusion Detection.
\"IDS scan parser : tcp syn scan: 91.213.203.203 scanned at least 20 ports at xxx.xx.xxx.x (1 of 1) : 91.213.203.203 xx.xx...
166.147.96.206 - Fin Scan Alert
We received 14 alerts re: this IP address attempting a fin scan on our home computer via port scan.
We will track and update as required.
Thanks...
174.253.29.240 - Fin Scan attempt
We received multiple alerts re: this IP address attempting a fin scan on our home computer via port scan. We will also report to Telus and will keep monitoring as needed
Thank you...
166.147.80.44 - Fin Scan alert
We received multiple alerts re: this IP address attempting a fin scan on our home computer via port scan. We will also report to Telus and will keep monitoring as needed
Thank you...
85.115.248.105 - Fin Scan
We received two alerts re: this IP address attempting a fin scan on our home computer via port scan. We will also report to Telus and will keep monitoring as needed
Thank you...
166.147.67.6 - Fin Scan attempt
We received two alerts re: this IP address attempting a fin scan on our home computer via port scan. We will also report to Telus and will keep monitoring as needed
Thank you...
41.6.130.197 - Fin scan attempts
We received two alerts re: this IP address attempting a fin scan on our home computer via port scan. We will also report to Telus and will keep monitoring as needed
Thank you...
176.224.254.56 - Fin Scan attempt
We received two alerts re: this IP address attempting a fin scan on our home computer via port scan. We will also report to Telus and will keep monitoring as needed
Thank you...
90.84.144.250 - Fin Scan Alert
We received two alerts re: this IP address attempting a fin scan on our home computer via port scan
We will also report to Telus and will keep monitoring as needed
Thank you...
166.147.111.220 - Fin Scan Alert
We received two alerts re: this IP address attempting a fin scan on our home computer
We will also report to Telus and will keep monitoring as needed
Thank you...
46.133.149.201 - Fin Scan Alert
We received two alerts re: this IP address attempting a fin scan on our home computer
We will also report to Telus and will keep monitoring as needed
Thank you...
174.234.83.85 - FIN SCAN ALERT
We received two alerts re: this IP address attempting a fin scan on our home computer
We will also report to Telus and will keep monitoring as needed
Thank you...
213.205.224.94 - Fin Scan alert
We received two alerts re: this IP address attempting a fin scan on our home computer
We will also report to Telus and will keep monitoring as needed
Thank you...
166.147.82.16 - Fin scan alert
We received two alerts re: this IP address attempting a fin scan on our home computet
We will also report to Telus and will keep monitoring as needed
Thank you...
207.219.69.207 - Fin Scan
received to alerts re: this IP address attempting a fin scan - out-on-207.wireless.telus.com
We will also report to Telus and will keep monitoring as needed
Thank you...
58.218.199.147 - attacking my firewall
This user has been trying to hack my firewall all day using a variety of methods including port scanning, I wonder how they would feel if I returned the favour? block this user!...
50.115.119.14 - HackAttack: [SPI:Illegal connection state attack] + INFO
Feb 6 21:31:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.14 to 80.220.22.74
Jun 9 06:03:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
67.169.24.19 - HackAttack: [SPI:Illegal connection state attack]
Jun 9 00:41:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.169.24.19 to 80.220.22.74
Jun 9 00:41:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
221.192.199.49 - 221.192.199.49 attack name:portscan application:/mach-kernel
Why is Norton advising 2/3 times a day that vulnerability has been blacked on the above? What more can be done to eliminate? Is there something more that can be done to remove this? ...
58.218.199.227 - Router log of attacks
Jun 6 14:12:06 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attack detected from 58.218.199.147 117
Jun 6 14:12:07 (none) user.alert kernel: LANDATTACKIN=ppp_0_38_1 OUT= MAC= attack ...
98.137.88.84 - Attempted User Privilege Gain
Snort (Intrusion Detection System) on Smoothwall has recorded 2 connection privilege gain attempts in the last two months coming from the Yahoo domain.
The first was on May 9, 2012. The IDS log from ...
50.115.119.2 - HackAttack: [SPI:Illegal connection state attack]
Jun 1 16:41:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.2 to 80.220.22.74
Jun 6 09:34:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Jun 4 02:06:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Jun 6 00:51:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
203.91.121.70 - scanning for open web servers
scanning for webserver vulernabilities on port 80 . . . . . . . . . . . . . . . . . . . . ...
62.80.225.180 - HackAttack: [SPI:Illegal connection state attack]
Jun 5 10:15:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 62.80.225.180 to 80.220.22.74
Jun 5 10:15:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
207.46.206.46 - HackAttack: [SPI:Illegal connection state attack]
Jun 5 07:53:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 207.46.206.46 to 80.220.22.74
Jun 5 07:53:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
193.66.251.210 - HackAttack: [Trojan Scan]
Jun 5 00:24:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 193.66.251.210:80 to 80.220.22.74:54320
Jun 5 00:24:13 HackAttack: [Trojan Scan] TCP packet from [nas0] 193.66.251.210:80 to 80.220.2...
157.124.22.10 - HackAttack: [Trojan Scan] + INFO
Jun 4 13:53:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 157.124.22.10:443 to 80.220.22.74:1243
Jun 4 13:53:31 HackAttack: [Trojan Scan] TCP packet from [nas0] 157.124.22.10:443 to 80.220.22...
192.168.1.1 - Help
I wan on my computer and then my bullguard gave me a warning about that ip addres try to attack my network.
can yea tell what does it mean ...
82.98.86.163 - Attempted connection
Blocked by MalwareBytes for some reason unbeknownst to myself. It may or may not be something to be concerned about, perhaps, maybe. It\'s all very interesting anyway!...
176.31.147.53 - risky ip
This ip was blocked by my firewall, because he or she tried to connect to my router and that\'s why i would like this person reported...
91.222.0.65 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 3 22:55:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 91.222.0.65 to 80.220.22.74
Jun 3 22:55:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
82.98.86.163 - Making connections to my computer
getting outbound connections from this IP. Blocked by my antivirus but I\'m still worried. I\'m getting these connections from several IP\'s but my antivirus can\'t find whatever is doing this.. ...
176.109.192.2 - HackAttack: [SPI:Illegal connection state attack] + INFO
Jun 3 21:10:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.109.192.2 to 80.220.22.74
Jun 3 21:10:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
222.186.24.13 - illegal access
my computer antivirus software detects illegal access from this IP address. Please check if this is a bot net attack or not. It has attacked my computer twice...
59.34.198.253 - HackAttack: [SPI:Illegal connection state attack]
Jun 2 23:10:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 59.34.198.253 to 80.220.22.74
Jun 3 03:44:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
58.218.199.58 - Send in the SEALS
Send in the SEALS to take care of this f*cker! The Cyber War is on biatch!!
Send them in and fuck his hardware up, then dump him in the ocean next to Osama....
95.211.10.39 - [client 95.211.10.39] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
See subject, during the day a lot of attempts from this address with the same message:
[client 95.211.10.39] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.IS...
58.218.199.227 - Triggered IDS log on firewall, keeps doing it and firewall keeps logging - will add to recommended list for ddos
IDS Log
Num Source IP Destination IP Protocol Port Duration Time Time Remaining
1 58.218.199.227 n/a n/a n/a 86400 84964
2 58.218.199.147 n/a n/a n/a 86400 64127
3 58.218.199.58 n/a n/a n/a 8640...
59.34.198.253 - HackAttack: [SPI:Illegal connection state attack]
Jun 1 19:12:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 59.34.198.253 to 80.220.22.74
Jun 1 19:44:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
24.173.185.134 - 24.173.185.134, 1, mail.onxlti.com
24.173.185.134, 1, mail.onxlti.com a user behind this NAT\'d IP address has had successive attempts at logging into services behind our firewall as well as scanning the network using a TCP Xmas Tree s...
87.248.122.122 - Hacking
Me too. It can be completely blocked under banned IP adress.
Command \"Whois\" says:
inetnum: 87.248.122.0 - 87.248.123.255
netname: YAHOONET
descr: Yahoo! Europe
country: CH
admin-c: ...
175.181.35.103 - IP Address Attacks for 4 days straight
175.181.35.103 has been attacking three of our servers for the past 4 days. They have attacked each one at least 150 times a day. This comes to about 1800 attacks in 4 days. This must be stopped!...
74.63.197.178 - HackAttack: [SPI:Illegal connection state attack]
Jun 1 01:04:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 74.63.197.178 to 80.220.22.74
Jun 1 02:21:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
May 30 05:42:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
May 31 16:34:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
74.63.197.178 - HackAttack: [SPI:Illegal connection state attack]
May 31 11:54:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 74.63.197.178 to 80.220.22.74
May 31 21:21:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
59.34.198.253 - HackAttack: [SPI:Illegal connection state attack]
May 31 08:23:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 59.34.198.253 to 80.220.22.74
May 31 20:03:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
50.115.119.2 - HackAttack: [SPI:Illegal connection state attack]
May 31 02:39:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.2 to 80.220.22.74
May 31 02:56:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
61.91.88.47 - HackAttack: [SPI:Illegal connection state attack]
May 30 14:41:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 61.91.88.47 to 80.220.22.74
May 30 14:41:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
222.191.251.156 - Meu firewall detectou sua entrada
Meu firewall detectou a entrada deste ip em meu pc 222.191.251.156. E logo que fui verificar o ip, o pc desligou e antes apareceu uma tela azul. com algumas informações que ...
209.152.158.13 - hundreds of attempts to access my network
this appears in my router log every five minutes and I have developed an unstable internet connection since this message first started to appear.
[Service blocked: ICMP_echo_req] from source 209.152....
111.74.239.27 - HackAttack
May 30 01:42:59 FIREWALL icmp check (1 of 2): Protocol: ICMP Src ip: 111.74.239.27 Dst ip: 77.54.127.188 Type: Echo Reply Code: 0 Icmp Flood:ype: Echo Reply Code: 0 Icmp Flood:...
188.241.44.167 - ICMP Flooding Attacks
This IP is constantly attacking my pc. Please stop it! Please stop it! Please stop it! Please stop it! Please stop it! Please stop it!...
68.68.22.103 - HackAttack: [SPI:Illegal connection state attack]
May 29 09:45:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.22.103 to 80.220.22.74
May 29 15:23:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
58.218.199.250 - 58.218.199.250
I think they have connection to facebook, maybe they don\'t like my anonymouse mask on FB????
Do they get infos from FB or are they just working for an other company.......
58.218.199.250 - Remote IP address: 58.218.199.250
Remote IP address:
58.218.199.250
Keep getting this in my personal firewall. Looks like they want to push thru my personal firewall eset keeps reporting attacks dozen a day. \'\'detected port scannin...
198.136.62.51 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 14 07:40:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 198.136.62.51 to 80.220.22.74
May 28 03:18:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
111.74.239.27 - HackAttack: [SPI:Illegal connection state attack]
May 27 17:34:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 111.74.239.27 to 80.220.22.74
May 27 18:40:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.68.22.103 - HackAttack: [SPI:Illegal connection state attack]
May 8 11:11:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.22.103 to 80.220.22.74
May 27 15:00:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
202.103.52.147 - SIP Scanning
May 28 06:22:17 snort[24704]: [1:2011766:5] ET SCAN Modified Sipvicious User-Agent Detected (sundayddr) [Classification: Attempted Information Leak] [Priority: 2] {UDP} 202.103.52.147:5060 -> xx.x...
selling fresh cc,dumps, fullz, paypal, bank login,wu trf and bank to
bank trf,shop
Cvv,fullz,banklogins,dumps+pin,track1/2+pin,bank Transfer,wu
Transfer,shop admin, etc
contact me now real_hacke...
50.23.38.184 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 27 03:02:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.23.38.184 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.23.38.184 RESULT:
50.23.38.184 IP addre...
46.45.153.39 - HackAttack: [SPI:Illegal connection state attack]
May 26 16:37:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 46.45.153.39 to 80.220.22.74
May 26 16:57:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
37.59.160.242 - Intermintent attacks
This ip Address is attacking me everyday. My connections are made by phone. A dumb phone with a chip and/or a smart one with another chip. My main APN is zap.vivo.com.br....
116.50.142.27 - Scan ports
[INFO] Sat May 26 16:49:25 2012 Blocked incoming TCP connection request from 116.50.142.27:1622 to 109.173.114.61:12
[INFO] Sat May 26 16:49:16 2012 Above message repeated 2 times
[INFO] Sat May 26 16...
116.50.142.30 - Scan ports
[INFO] Sat May 26 15:52:49 2012 Blocked incoming TCP connection request from 116.50.142.30:28779 to 109.173.114.61:9
[INFO] Sat May 26 15:52:40 2012 Above message repeated 2 times
[INFO] Sat May 26 15...
116.50.142.29 - Scan ports
[INFO] Sat May 26 15:47:46 2012 Blocked incoming TCP connection request from 116.50.142.29:18105 to 109.173.114.61:4
[INFO] Sat May 26 15:47:45 2012 Blocked incoming TCP connection request from 116.50...
116.50.142.28 - Scan Ports
[INFO] Sat May 26 15:34:56 2012 Blocked incoming TCP connection request from 116.50.142.28:62481 to 109.173.114.61:10
[INFO] Sat May 26 15:34:47 2012 Blocked incoming TCP connection request from 116.5...
178.33.224.175 - HackAttack: [SPI:Illegal connection state attack]
May 17 00:22:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 178.33.224.175 to 80.220.22.74
May 26 08:46:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
217.132.54.10 - HackAttack: [SPI:Illegal connection state attack]
May 25 23:12:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 217.132.54.10 to 80.220.22.74
May 25 23:12:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
111.74.239.27 - HackAttack: [SPI:Illegal connection state attack]
May 25 18:56:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 111.74.239.27 to 80.220.22.74
May 26 06:57:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
188.122.91.29 - HackAttack: [SPI:Illegal connection state attack]
May 25 18:50:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.122.91.29 to 80.220.22.74
May 25 18:52:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
85.25.236.142 - Scan ports
[INFO] Sat May 26 03:41:24 2012 Blocked incoming TCP packet from 85.25.236.142:80 to 109.173.114.61:439 as SYN:ACK received but there is no active connection
[INFO] Sat May 26 03:41:12 2012 Blocked in...
176.31.238.126 - Scan ports
[INFO] Sat May 26 03:46:31 2012 Blocked incoming TCP packet from 176.31.238.126:80 to 109.173.114.61:854 as SYN:ACK received but there is no active connection
[INFO] Sat May 26 03:45:43 2012 Blocked i...
178.33.227.167 - Scan ports
[INFO] Sat May 26 03:47:15 2012 Blocked incoming TCP packet from 178.33.227.167:80 to 109.173.114.61:77 as SYN:ACK received but there is no active connection
[INFO] Sat May 26 03:44:23 2012 Blocked in...
50.30.32.176 - Scan ports
[INFO] Sat May 26 03:51:37 2012 Blocked incoming TCP packet from 50.30.32.176:80 to 109.173.114.61:439 as SYN:ACK received but there is no active connection
[INFO] Sat May 26 03:51:25 2012 Blocked inc...
79.131.253.215 - no contact please
do not contact me you have got nothing to do with me... if you do you know my telephone number and call me. stop please...
188.122.91.29 - why contact i do not know you
do not contact me you have got nothing to do with me... if you do you know my telephone number and call me. stop please...
188.130.251.77 - screen sharing attempts
This IP has been trying to acces via VNC to my computer. I haven\'t authorized this acces in any way, so it smells bot to me....
208.91.197.101 - risky connection
The IP address is trying to connect to my computer and I don\'t know who he/she is. It could be malware or a hacking system....
95.211.58.114 - Attempt to hack my site
Hello. I have several messages per day from my firewall plugin that i have installed on my website that through this ip is trying to hack my site. Please do something. Thanks!...
50.115.119.13 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 23 11:49:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.13 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.115.119.13 RESULT:
50.115.119.13 IP add...
68.168.212.202 - Script attack
One of my firewalls has reported 6 attacks from this address in a 30 minute period. The attacks were stopped and logged. I am currently investigating where this address is to stop this from happening....
72.21.194.32 - McAfee blocked this ISP
I just recieved a warning message from McAfee that they blocked ISP 72.21.194.32. The message indicated it was coming from Yahoo Messenger. Please fix this....
91.212.162.75 - Screen Sharing attemps
This IP address should not be trying to login to my computer. This is an attempt to gain unlawful access to my computer. What to do?...
91.212.162.78 - Screen Sharing Attempts
This address has been trying to use screen sharing to access my computer. It is out of country and should not be trying to connect....
188.130.251.77 - screen sharing attempts
This IP address is trying to connect to my VNC server and should not be. This has been going on for weeks from about 4 different ip addresses out of country....
95.32.50.186 - HackAttack: [SPI:Illegal connection state attack]
May 21 19:46:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.32.50.186 to 80.220.22.74
May 21 19:46:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
222.187.222.64 - HackAttack: [SPI:Illegal connection state attack]
May 21 11:14:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 222.187.222.64 to 80.220.22.74
May 21 14:45:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
188.241.44.167 - ICMP FLOODING
This IP is constantly attacking my pc, Nod32 keeps blocking it so it is safe for now, still I don\'t want this attacks to grow....
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
May 10 06:13:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
May 21 07:45:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
173.231.29.73 - HackAttack: [SPI:Illegal connection state attack]
May 20 18:37:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 173.231.29.73 to 80.220.22.74
May 20 18:43:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
222.187.222.64 - HackAttack: [SPI:Illegal connection state attack]
May 20 16:07:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 222.187.222.64 to 80.220.22.74
May 20 17:28:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
46.39.2.22 - Botnet
this IP address tried to connect to me and the software that reported it said it was botnet on dancer llc from russia. tried connecting on UDP then tried to ping me then hasnt tried again....
95.57.219.230 - HackAttack: [SPI:Illegal connection state attack]
May 19 18:34:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.57.219.230 to 80.220.22.74
May 19 18:34:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
50.97.97.41 - HackAttack: [SPI:Illegal connection state attack]
Apr 29 08:38:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.97.41 to 80.220.22.74
May 19 09:04:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
50.115.119.2 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 19 02:46:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.2 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.115.119.2 RESULT:
50.115.119.2 IP addre...
69.64.52.69 - HackAttack: [SPI:Illegal connection state attack]
Apr 22 03:32:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.64.52.69 to 80.220.22.74
May 18 21:00:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
58.218.199.250 - 5 times now
this site has been trying to hack my pc IT HAS BEEN FIVE NOW AND I AM GETTING VERY SICK OF THIS ON GOING PROBLEM WITH THE DAM CHINESEFB...
208.91.197.134 - Risk
Mcaffe blocked the un-needed conection which was belong to this ip,without using any broweser at that specific time ,that was mean attack or forced conection!...
178.33.224.175 - Continuous ICMP ping id-0 to all our public facing IP Addresses
[00001] 2012-05-14 18:09:02 [Root]system-critical-00441: ICMP ping id=0! From 178.33.224.175 to 66.20.195.70, proto 1 (zone Untrust, int ethernet0/2). Occurred 1 times.
[00002] 2012-05-14 18:08:34 [Ro...
60.217.235.5 - Repeats attempt to log into firewall
Repeats attempt to log into firewall. Firewall sees numerous attempts to log in from this location. This is not coming from a welcommed user....
108.170.22.186 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 16 13:58:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.22.186 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.170.22.186 RESULT:
108.170.22.186 IP ...
95.211.153.68 - HackAttack: [SPI:Illegal connection state attack]
May 9 08:38:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.211.153.68 to 80.220.22.74
May 16 08:29:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
76.93.105.16 - HackAttack: [SPI:Illegal connection state attack]
May 16 07:24:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.93.105.16 to 80.220.22.74
May 16 07:24:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
222.165.47.82 - HackAttack: [SPI:Illegal connection state attack]
May 16 00:46:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 222.165.47.82 to 80.220.22.74
May 16 00:46:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
188.130.251.77 - Попытки входа в ÑиÑтему по VNC
ÐеÑколько дней регул&...
58.218.199.250 - Detect Port Scanning attack
Had 1 attack today 16. 05.2012
Had 1 attack today 16. 05.2012 Had 1 attack today 16. 05.2012 Had 1 attack today 16. 05.2012 Had 1 attack today 16. 05.2012 ...
188.127.236.164 - Continual port scanning at intervals of 3-10 minutes
[INFO] Tue May 15 00:50:31 2012 Blocked incoming TCP packet from 188.127.236.164:2106 to 109.173.114.61:50803 as SYN:ACK received but there is no active connection
[INFO] Tue May 15 00:47:15 2012 Bloc...
85.17.31.78 - HackAttack: [SPI:Illegal connection state attack]
May 15 08:47:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 85.17.31.78 to 80.220.22.74
May 15 09:53:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
178.33.224.175 - HackAttack: [SPI:Illegal connection state attack]
May 15 00:09:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 178.33.224.175 to 80.220.22.74
May 15 00:24:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
64.188.63.33 - HackAttack: [SPI:Illegal connection state attack]
May 14 23:32:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 64.188.63.33 to 80.220.22.74
May 14 23:33:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
184.173.245.180 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 14 13:29:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.173.245.180 to 80.220.22.74
May 14 16:43:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
118.249.45.211 - Gmail Alert, Unauthorized to access my email
Aloha,
I would lile to report the IP Address 118.249.45.211 for trying to access my personal email. I received an account alert from gmail, that someone with that IP address in China is trying to ac...
178.33.224.175 - HackAttack: [SPI:Illegal connection state attack]
May 14 08:08:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 178.33.224.175 to 80.220.22.74
May 14 08:28:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
218.93.205.110 - Being picked up by Malware bytes and blocked on outbound
Being picked up by malware bytes and blocked for outbound -- unable to find infection. Malware bytes is unable to find any problem -- Symantec anti-virus unable to find problem...
2.40.206.255 - Port Scan
FIREWALL replay check (1 of 1): Protocol: ICMP Src ip: 2.40.206.255 Dst ip: 00.000.000.73 Type: Destination Unreachable Code: Port Unreacheable
FIREWALL replay check (1 of 10): Protocol: ICMP Src ip:...
70.31.58.2 - HackAttack: [SPI:Illegal connection state attack]
May 13 12:21:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 70.31.58.2 to 80.220.22.74
May 13 12:21:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
184.82.176.162 - HackAttack: [SPI:Illegal connection state attack]
May 10 22:57:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.82.176.162 to 80.220.22.74
May 12 21:20:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.67.159.206 - Risky Connection blocked by McAfee
Just a little freaky to see that this \"Risky Connection Blocked\" by McAfee. Maybe the future will be the demise of the computer and people will get back to living life in \"Real Time...
91.196.216.64 - 91.196.216.64 Sudden Pop Up on AV
Tasks: Playing WoW & Listening to \"Dream On - Aerosmith\" on YouTube (video which itself acts odd itself in comparison to all the other videos. Absolutly no other site or program opened...
147.52.41.82 - Tried to hack my network through my firewall.
The person behind this IP address tried to log into my firewall, but he got locked after three failed attempts. The attempted attacks took place at 11:04 AM EET....
59.127.129.167 - tried to hack my network through my firewall
The person behind this IP address attempted to log in my firewall.But after three failures he was locked.this is an unethical practice by a reknowed company.STOP IT....
24.203.51.207 - HackAttack: [SPI:Illegal connection state attack]
May 9 13:25:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.203.51.207 to 80.220.22.74
May 9 13:25:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
217.199.231.221 - HackAttack: [SPI:Illegal connection state attack]
May 9 03:26:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 217.199.231.221 to 80.220.22.74
May 9 03:26:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
123.203.211.53 - Scan ports
[INFO] Wed May 09 02:03:24 2012 Blocked incoming TCP connection request from 123.203.211.53:50270 to 109.173.114.61:13500
[INFO] Wed May 09 02:03:21 2012 Blocked incoming TCP connection request from 1...
188.122.91.29 - HackAttack: [SPI:Illegal connection state attack]
May 7 23:05:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.122.91.29 to 80.220.22.74
May 8 01:21:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
50.97.43.162 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 7 20:45:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.43.162 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.97.43.162 RESULT:
50.97.43.162 IP addre...
188.122.95.81 - HackAttack: [SPI:Illegal connection state attack]
Mar 6 08:07:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.122.95.81 to 80.220.22.74
May 7 16:18:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
178.204.108.63 - HackAttack: [SPI:Illegal connection state attack]
May 6 19:51:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 178.204.108.63 to 80.220.22.74
May 6 19:51:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
May 6 10:02:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
May 7 08:06:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
174.138.169.90 - HackAttack: [SPI:Illegal connection state attack]
Apr 6 06:20:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.138.169.90 to 80.220.22.74
May 7 01:20:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
41.105.113.220 - HackAttack: [SPI:Illegal connection state attack]
May 6 17:13:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.105.113.220 to 80.220.22.74
May 6 17:13:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
May 6 15:06:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
May 6 15:06:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
98.227.19.60 - HackAttack: [SPI:Illegal connection state attack]
May 6 15:05:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.227.19.60 to 80.220.22.74
May 6 15:05:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
74.63.242.243 - HackAttack: [SPI:Illegal connection state attack]
May 6 13:29:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 74.63.242.243 to 80.220.22.74
May 6 15:25:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
222.184.232.2 - Port Scan
Every hour my firewall is warn me about this ip. Tells me it scan my ports. I hope my firewall is good enough to defend this jerk....
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
May 6 03:39:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
May 6 03:39:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
88.198.148.208 - HackAttack: [SPI:Illegal connection state attack]
May 6 02:03:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 88.198.148.208 to 80.220.22.74
May 6 11:25:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 10:08:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
May 5 21:56:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
188.122.91.29 - HackAttack: [SPI:Illegal connection state attack]
May 5 19:20:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.122.91.29 to 80.220.22.74
May 5 19:44:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
98.227.19.60 - HackAttack: [SPI:Illegal connection state attack]
May 5 10:05:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.227.19.60 to 80.220.22.74
May 5 10:05:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
98.227.19.60 - HackAttack: [SPI:Illegal connection state attack]
May 5 04:02:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.227.19.60 to 80.220.22.74
May 5 04:02:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
193.164.132.11 - HackAttack: [SPI:Illegal connection state attack]
May 4 22:46:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 193.164.132.11 to 80.220.22.74
May 4 23:48:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
91.217.178.18 - 91.217.178.18
Hubo un intento de conexión riesgoso a mi PC desde esta dirección IP, que fue detectado por McAfee Internet Security y este intento fue bloqueado por McAfee....
37.59.17.26 - HackAttack: [SPI:Illegal connection state attack]
May 4 02:52:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.17.26 to 80.220.22.74
May 4 02:52:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
50.97.32.38 - HackAttack: [SPI:Illegal connection state attack] + INFO
May 3 19:27:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.32.38 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.97.32.38 RESULT:
50.97.32.38 IP address ...
87.248.122.122 - Hacking
I get from eset smart security the a message about the firewall that says: detected covert channel exploit in icmp packet from ip 87.248.122.122...
66.150.14.86 - Intrusion Attempts from 66.150.14.86
Two intrusion attempts from 66.150.14.86 into Chrome, both blocked by firewall, one at 2/26/2012 6:59:53 PM PST and another at 2/26/2012 7:00:04 PM PST. The intrusion attempts come from users of Inte...
37.9.61.169 - Intrusion Attempt by 37.9.61.169
Intrusion attempts into Chrome by 37.9.61.169 from Switzerland and Belgium. They Suck. Attempts failed. Put The Hurt On \'Em. Here are some details regarding this loser.
inetnum: 37.9.61.0 - 3...
81.17.26.199 - Intrusion Attempt from 81.17.26.199
It Came from Russian Federation from 81.17.26.199, attempted to intrude into Internet Explorer, failed. They Suck. This is my complaint about them. Put The Hurt On \'Em....
212.117.183.19 - mailware
its fukn annoying its fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn annoyingits fukn ann...
146.185.218.147 - Blackhole Toolkit Attack
Symantec Endpoint Protection Report (2012.05.03 19:38:05) :
[SID: 25267] Web Attack: Blackhole Toolkit Website 14 attack blocked. Traffic has been blocked for this application: \\DEVICE\\HARDDISKVOLU...
190.2.39.193 - Illegal login
Get a message from my system about illegal requests to my network. That ip tries an illegal login into my system. I\'ve blocked it. Hope that entry is helpful....
109.163.230.114 - Malwarebytes
Every five of 1o minutes Malwarebytes aware IP-BLOCK 109.163.230.114 (Type: outgoing). What is this? Kind of very annoying! Juts to complete 25 words required! A bit annoying too!...
58.218.199.227 - Port scanning
Repeated port scanning from IP 58.218.199.227
Repeated port scanning from IP 58.218.199.227
Repeated port scanning from IP 58.218.199.227
Repeated port scanning from IP 58.218.199.227
Repeated port sc...
66.96.130.235 - Firewall Alert
Site has hit several users through firewall (5000+ average hits). Have blocked them from the firewall in an effort to reduce unwanted hits. This needs to stop....
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Apr 30 04:25:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
May 2 23:56:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
37.59.88.148 - HackAttack: [SPI:Illegal connection state attack]
May 2 16:21:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.88.148 to 80.220.22.74
May 2 16:51:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
37.59.88.148 - HackAttack: [SPI:Illegal connection state attack]
Apr 26 16:42:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.88.148 to 80.220.22.74
May 2 08:59:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
222.186.26.29 - 222.186.26.29
This IP address tried to connect to some unknown web site... Not the first time to do this... Some help will be great. Tnx in advance....
254.1.168.192 - Hacker
This hacker has been trying to get into my computer for months. Sometime two in a minute. Nobody seems to know what to do and I was advised to come to this site.
Thank you...
76.100.224.104 - HackAttack: [SPI:Illegal connection state attack]
May 1 21:22:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.100.224.104 to 80.220.22.74
May 1 21:23:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.218.199.227 - Port Scanning
Repeated Port Scanning from IP 58.218.149.217
Repeated Port Scanning from IP 58.218.199.147
Repeated Port Scanning from IP 58.218.199.250
Repeated Port Scanning from IP 58.218.199.227
Port Scanning-P...
74.125.79.132 - ....
My firewall has shown two times already that they\'re trying to web attack my computer. Norton Antivirus tells me the same. The last attack was today, on the first May 3:49 AM in Eastern European time...
213.115.122.97 - HackAttack: [SPI:Illegal connection state attack]
Apr 30 23:36:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 213.115.122.97 to 80.220.22.74
Apr 30 23:36:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
182.71.36.9 - Too many attempts
Firewall Alert : There will too many attempts from this IP address 182.71.36.9 and it seems trying to login to our firewall.
Please take action as soon as possible.
Regards,
NCH...
221.1.98.154 - HackAttack: [SPI:Illegal connection state attack]
Apr 29 16:58:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 221.1.98.154 to 80.220.22.74
Apr 29 16:58:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Apr 17 11:59:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Apr 29 10:56:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
95.211.153.68 - HackAttack: [SPI:Illegal connection state attack]
Apr 27 04:02:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.211.153.68 to 80.220.22.74
Apr 28 18:12:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
63.223.107.250 - web attack: malicious website accessed 2
An intrusion attempt by acfchadci.co.cc was blocked by my Norton anti virus.
This is the another day attack to my computer. What should I do to stop them....
206.161.121.4 - SVCHOST.Exe Trojan
the svchost.exe trojan i have recently acquired, just so happen to be trying to send things to this IP address. Worst part about it is that once you delete the svchost it comes right back on reboot...
91.226.212.41 - intrusive ip
Same, my firewall send me five alert for this IP adress on two days please put this adress in you database thank you very much !...
108.170.33.10 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 27 03:22:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.33.10 to 80.220.22.74
Apr 27 03:25:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
65.55.17.39 - netstat -b
to that ip, is sending information from my computer.
the name of the process that sends information is, \"sidebar.exe\". MICROSOFT Company. IS REMOTE NETSTAT -b. ...
37.59.88.148 - HackAttack: [SPI:Illegal connection state attack]
Apr 26 01:43:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.88.148 to 80.220.22.74
Apr 26 13:30:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
31.3.225.166 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 24 22:41:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 31.3.225.166 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/31.3.225.166 RESULT:
31.3.225.166 IP addres...
37.59.88.148 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 25 21:14:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.88.148 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/37.59.88.148 RESULT:
37.59.88.148 IP addres...
173.194.35.49 - detect nod32
I HAVE A PC IN DURING OF TIME WHEN I CONNECT TO WEB EVERY DAY MY ANTI VIRUS (NOD32) ALARM ME THAT THIS IP IS TRY TO PORT SCANNING YOUR COMPUTER WHITH ABOVE IP.
THANKS...
184.72.205.105 - Trying to access backend of site
I am constantly getting a warning (2000) emails from my RS Firewall for my website that this ip is trying to get into the Backend of my website....
217.164.228.142 - 217.164.228.142,217.110.97.194,
keep having random port scans and Dos attacks RST and ACK along remote access attempts. These guys are attacking ports 80,:49955 headbanging....
50.115.122.68 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 24 00:50:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.122.68 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/50.115.122.68 RESULT:
50.115.122.68 IP ad...
41.218.249.119 - port scan detected
this is the 10 attempt all begining with 41. its happening every 30 min. the first 9 were from south africa. this one is from ghana. why is this happening?...
41.242.209.38 - 9th attempt on my computer
this is the 9th attempt from south africa in the last 3 hrs. they use a diffrent ip address each time. all can be traced back to south africa. thank you....
94.245.121.253 - Iphlpsvc.dll Svchost
Bueno al parecer es una nueva forma de entrar en el pc, a traves del servicio de teredo svchost intenta conectarse a este servidor en UK que pertenece a Microsoft. Cuando esta alerta salta hay que det...
206.253.168.252 - Looking for openings
That IP 206.253.168.252
Persistently scans the ports.
Every ten or fifteen minutes.
And so it is more than a month.
It would be too much. Admonish the guy. Thanks...
70.38.12.164 - Attack on Joomla
This address has attempted to access our Joomla administration area on April 9th, 2012. it attempted to log in over 1200 times during a 25 minute period....
83.42.224.55 - Attack on Joomla
Tried to log into the Joomla admin area of our site. We have RSFirewall installed and it reported this to us four times within one minute....
67.219.36.200 - HackAttack: [SPI:Illegal connection state attack]
Apr 22 19:19:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.219.36.200 to 80.220.22.74
Apr 22 19:37:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
78.106.174.133 - DENIAL OF SERVICE
MY FIREWALL REPORTS A JOLT2 ATTACK.
JOLT2 ATTACK CONSISTING IN FLOODING ILLEGALLY FRAGMENT ICMP OR UDP PACKETS INTO MY COMPUTER. THIS CAUSES MY CPU UTILIZATION TO BE 100%...
89.28.87.114 - unotherized access
Logon Failure:
Reason: Unknown user name or bad password
User Name: gsdfgsdf
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
...
[INFO] Sun Apr 22 19:27:47 2012 Blocked incoming TCP packet from 154.35.164.12:80 to 109.173.114.61:6119 as SYN:ACK received but there is no active connection
[INFO] Sun Apr 22 19:27:04 2012 Blocked i...
58.218.199.227 - TCP Flood
TCP flood From 58.218.199.227 port:12200 To 188.222.225.115 port:808
Found this on my route firewall log, don\'t really understand it but I can guess it\'s not a good thing....
31.204.153.241 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 22 07:31:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 31.204.153.241 to 80.220.22.74
Apr 22 07:31:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.218.199.147 - my computer block an atack from 58.218.199.147
my computer block an attack from 58.218.199.147
any advice ??? I don\'t know what to do or why this is happening..
do you have any thing to help block these attacks
...
146.0.74.28 - Trying to access Joomla site
I am being notified of unauthoized access attempt to administrator end of Joomla site. Blocked by RSFirewall. Attempt every 5 minutes or less. Have been continuing for 24 hours....
37.59.198.54 - Numerous attempts from this site to install a Hack Tool Kit
SEP IDS Alerted numerous times when user was at this site, attempts to install a root kit - site does not appear to be legit and needs to be blacklisted...
94.245.121.253 - 94.245.121.253
Noticed there is no complain option named M-I-5
Computer froze, after hard reboot anti-virus/firewall was deactivated. And could not be ran, did a quick re-install of firewall and immediately 94.245....
195.97.97.219 - subject is trying to get unauthorized access
The PC with address 195.97.97.219 is constantly trying to access our network. Not only to our own network but also to 2 other affiliate of ours.
...
66.196.59.189 - HackAttack: [SPI:Illegal connection state attack]
Apr 19 12:15:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.196.59.189 to 80.220.22.74
Apr 19 12:15:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
58.218.199.87 - Random port requests
We are getting constant alerts from our firewall that this address is trying to connect. It seems to be using lots of random ports....
204.47.73.100 - spoof attack
ISA Server detected a spoof attack from Internet Protocol (IP) address 204.47.73.100. A spoof attack occurs when an IP address that is not reachable via the interface on which the packet was received....
87.112.117.222 - half-scan attack
ISA Server detected an Internet Protocol (IP) half-scan attack from IP address
ISA Server detected an Internet Protocol (IP) half-scan attack from IP address...
67.212.93.131 - HackAttack: [SPI:Illegal connection state attack]
Apr 17 15:29:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.212.93.131 to 80.220.22.74
Apr 17 15:43:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Apr 16 05:04:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Apr 17 01:53:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
184.173.195.45 - caught in the firewall logs
yeah ive got broken connection attempts in my firewall from last night without even having a pc on.... theyve been trying to login to my router for the past week and now im reporting it. i had a lady ...
184.173.195.64 - ip found in firewall
yes got an alert in my firewall from this ip as a dropped packed. i didnt have a computer on and theyre still trying to tear down the firewall.... little does he know im logging it and fixing to repor...
89.149.242.175 - Constantly attacking my Firewall from 89.149.242.175
Has been probing all my ports in my firewall whole day, and apparently is trying to get into my computer using some sort of port probe attack.
This is very annoying and its using up my CPU for nothing...
91.205.41.57 - McCafee
I dont know about you but i feel like McAfee is trying to make me buy their antivirus by scaring me with this notification, because i have 4 days left to use it for free. I have used McAfee for 3 mont...
202.166.201.118 - srx attacks
Apr 15 14:52:27 sshd[6580]: Received disconnect from 202.166.201.118: 11: Bye ByeApr 15 14:52:34 sshd[6581]: Failed password for root from 202.166.201.118 port 45834 ssh2Apr 15 14:52:35 sshd[658...
98.136.145.193 - trying to connect on port 81
4 times in 2 minutes. This is supposedly in California and started within 1 minutes of registering on ipillion. Most attacks are from apnic or lacnic areas...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Apr 13 01:32:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Apr 15 06:41:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
82.8.198.72 - HackAttack: [SPI:Illegal connection state attack]
Apr 15 04:57:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 82.8.198.72 to 80.220.22.74
Apr 15 04:57:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
206.74.204.145 - HackAttack: [SPI:Illegal connection state attack]
Apr 15 01:30:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 206.74.204.145 to 80.220.22.74
Apr 15 01:30:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
50.97.97.41 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 11 02:13:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.97.41 to 80.220.22.74
Apr 14 23:31:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
108.170.16.14 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 14 00:10:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.16.14 to 80.220.22.74
Apr 14 13:27:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
24.54.15.45 - HackAttack: [SPI:Illegal connection state attack]
Apr 14 11:35:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.54.15.45 to 80.220.22.74
Apr 14 11:35:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
89.28.105.61 - Blocked
Is yet another Starnet Communications IP blocked by Malwarebytes
Unsure why but Malwarebytes keeps blocking this and other Starnet Communication IP\'s, have been several just today...
198.228.234.76 - intrusion attempts
My Firewall F-Secure me constantly displays repetitive alerts regarding intrusion attempts from this IP: 198.228.234.76. Today April 13, 2012, I had 16 intrusion attempts. Thank you...
92.114.86.101 - HackAttack: [SPI:Illegal connection state attack]
Apr 13 22:33:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.114.86.101 to 80.220.22.74
Apr 13 22:37:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
89.28.109.193 - Blocked
By Malwarebytes and is another IP from Starnet Communications and not sure why they are blocked but alot of IP\'s from Starnet are blocked by Malwarebytes...
89.28.186.252 - Blocked
Malwarebytes is blocking this IP and am not sure why, is UK IP for Willis Group Services Ltd which does insurance so really don\'t know why they are blocked...
89.28.51.45 - Blocked by Malwarebytes
Is another IP from China and is Starnet Communications but haven\'t @ this time found why they are blocked but other Starnet IP\'s are being blocked as well...
117.21.221.91 - Blocked by Malawarebytes
Not sure why Malwarebytes blocked this IP so is why category under firewall alert
I dunno who they are or why they are blocked, and blocked several times...
87.248.186.252 - Malawarebytes blocking this
wasn\'t sure the category as not sure what this is or why is blocked.
Is Starnet Communications & have no idea who they are or why Malwarebytes blocks this......
69.64.34.170 - HackAttack: [SPI:Illegal connection state attack]
Apr 13 00:36:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.64.34.170 to 80.220.22.74
Apr 13 04:23:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
184.107.233.146 - HackAttack: [SPI:Illegal connection state attack]
Apr 12 05:02:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.107.233.146 to 80.220.22.74
Apr 12 20:19:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
58.218.199.227 - Firewall Alert
They just try to get in, which does not succeed. but the action on its own is not allowed. This makes it 25 words doe sit not?...
89.114.9.96 - outgoing
I\'m not sure exactly what is going on or what information they are trying to retrieve from the affected PC but we got an alert from our Virus Protection software, ran Malware Bytes and got the log be...
85.113.203.84 - HackAttack: [SPI:Illegal connection state attack]
Apr 12 12:04:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 85.113.203.84 to 80.220.22.74
Apr 12 12:04:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
37.157.244.122 - HackAttack: [SPI:Illegal connection state attack]
Apr 12 01:09:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.157.244.122 to 80.220.22.74
Apr 12 02:40:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
68.68.22.103 - HackAttack: [SPI:Illegal connection state attack]
Feb 20 17:20:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.22.103 to 80.220.22.74
Apr 11 13:58:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
101.12.175.39 - Half-Scan Attack
ISA Server alert: An intrusion was attempted by an external user, ISA Server detected a possible Internet Protocol (IP) half-scan attack from IP address 101.12.175.39....
199.30.80.32 - Hack attack
Why all the pathetic ass**les have activated recently?
Apr 11 10:27:40 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 199.30.80.32:80 to 77.86.194.26:39093
Apr 11 10:28:00 ...
209.15.236.190 - attempted scan from ZmEu Vulnerability Scanner
The following intrusion was observed: .
date=2012-04-07 time=03:24:22 devname=RM-CT-VPN01 device_id=FGT80C3910606182 log_id=0419016384 type=ips subtype=signature pri=alert severity=low carrier_ep=...
59.34.198.9 - DNS
We are receiving thousands of \'ANY\' queries per second in our DNS servers that coming from this IP.
This situation is in all servers at same time and tries to desynchronize them and take down the s...
95.211.166.56 - HackAttack: [SPI:Illegal connection state attack]
Apr 9 20:30:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.211.166.56 to 80.220.22.74
Apr 9 21:23:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
50.97.97.41 - HackAttack: [SPI:Illegal connection state attack]
Apr 3 12:23:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.97.97.41 to 80.220.22.74
Apr 9 10:06:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Apr 7 23:36:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Apr 9 06:58:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
200.61.40.182 - HackAttack: [SPI:Illegal connection state attack]
Apr 8 13:02:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 200.61.40.182 to 80.220.22.74
Apr 8 13:02:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
58.218.199.147 - my pc
they just tried to get into my pc through my fire wall, major attack, my eset caught it in a flash, the port scanning from the chinese sucks big time :(...
58.218.199.227 - Port Scanning Attack
Informed of port scan attack, of Chinese origin, 8.218.199.227 is in Beijing Beijing China, can this be reported to authorities, as this is the second attack caught by my firewall...
91.213.175.71 - cannot access the website.
i have invested 20$us into diamond-rain.net account for 15 days and when the invested is matured i cannot access the website the investment is from march 23 -april 7 2012 i dont know what is happening...
216.245.202.53 - HackAttack: [SPI:Illegal connection state attack]
Mar 9 05:53:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 216.245.202.53 to 80.220.22.74
Apr 8 10:26:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
207.161.39.54 - Port scanning? couple of days now
Apr 8 09:16:10 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 207.161.39.54:51111 to 77.86.194.26:63957
Apr 8 09:16:10 HackAttack: [SPI:Illegal connection state attack] TC...
174.57.0.143 - HackAttack: [SPI:Illegal connection state attack]
Apr 8 01:53:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.57.0.143 to 80.220.22.74
Apr 8 01:53:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
82.98.147.22 - trying to login
this ip is been trying to login to my website thru the backend using random passwords , i have receive about 50 intents to enter in the last 8 hours...
174.57.0.143 - HackAttack: [SPI:Illegal connection state attack]
Apr 7 23:32:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.57.0.143 to 80.220.22.74
Apr 7 23:32:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
46.201.77.97 - HackAttack: [SPI:Illegal connection state attack]
Apr 7 20:00:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 46.201.77.97 to 80.220.22.74
Apr 7 20:00:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
96.10.158.224 - HackAttack: [SPI:Illegal connection state attack]
Apr 7 11:01:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 96.10.158.224 to 80.220.22.74
Apr 7 11:01:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
174.57.0.143 - HackAttack: [SPI:Illegal connection state attack]
Apr 7 10:21:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.57.0.143 to 80.220.22.74
Apr 7 10:22:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
195.3.147.99 - 195.3.147.99
Repeated attempts to gain accesss. Blocked by Malwarebytes as malicious Website. Port 5428 Chrome.exe. Want to find out who this is and how to stop it compltely....
96.10.158.224 - HackAttack: [SPI:Illegal connection state attack]
Apr 7 10:01:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 96.10.158.224 to 80.220.22.74
Apr 7 10:01:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
96.10.158.224 - HackAttack: [SPI:Illegal connection state attack]
Apr 6 23:48:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 96.10.158.224 to 80.220.22.74
Apr 6 23:48:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
174.57.0.143 - HackAttack: [SPI:Illegal connection state attack]
Apr 6 23:38:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.57.0.143 to 80.220.22.74
Apr 6 23:38:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
195.3.147.99 - Firefox keeps trying to access this IP
Among 3 others
Malawarebytes is reporting this as a malicious website and blocks firefox from accessing it
Am trying to find out \'what\' is trying to access this......is this and 3 other IP\'s over ...
58.218.199.87 - Daily
Fri Apr 6 13:39:42 2012
=>Found attack from 58.218.199.87.
Source port is 12200 and destination port is 6515 which use the TCP protocol. Happens regularly. Getting s/w to gather more info....
24.202.23.227 - HackAttack: [SPI:Illegal connection state attack]
Apr 6 12:25:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.202.23.227 to 80.220.22.74
Apr 6 12:25:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
91.121.3.57 - HackAttack: [TCP SYN Flooding]
Apr 6 11:08:40 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.121.3.57:6664 to 80.220.22.74:6664
Apr 6 11:08:40 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 91.121.3.57:6666 to 8...
66.35.46.196 - UDP Port Attacks
I\'ve getting this UDP Port attacks with Different Ports.
Blocked incoming UDP packet from 66.35.46.196:10670
Above message repeated 9 times
Blocked incoming UDP packet from 66.35.46.196:12254
Above...
110.34.131.115 - HackAttack: [SPI:Illegal connection state attack]
Apr 5 16:54:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 110.34.131.115 to 80.220.22.74
Apr 5 17:42:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
221.192.199.49 - IP block
Incoming block form Malwarebytes. Count at least 157 attempts over the past few days. Some people are only alive today because it\'s illegal to kill...
60.190.222.185 - IP blocked
comes from China. Bloody annoying. At least 6 attempts a day. Wish they would just fuck off and do something constructive instead of annoy me...
63.223.106.17 - hacker
stop this person from trying to get in my computer, it seems like malwarebytes trying to block them but it doesnt feel safe anymore. it\'s also irritating.. please shut this IP down....
91.217.178.18 - Antivirus blocked attempt
antivirus is reporting that it is blocking a connection from this site, which is appearant that I have no desire for contact to or from it....
88.190.30.80 - Hacker!
This hacker had access to my network last saturday. See my firewall log:
[LAN access from remote] from 88.190.30.80:56134 to 10.0.0.99:81, Saturday, March 31,2012 13:07:37
I will trace you !
...
78.148.72.122 - HackAttack: [SPI:Illegal connection state attack]
Apr 4 20:42:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.148.72.122 to 80.220.22.74
Apr 4 20:42:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
78.148.72.122 - HackAttack: [SPI:Illegal connection state attack]
Apr 4 20:12:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.148.72.122 to 80.220.22.74
Apr 4 20:12:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
199.115.228.202 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 4 02:57:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 199.115.228.202 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/199.115.228.202 RESULT:
199.115.228.202...
122.226.86.84 - HackAttack: [SPI:Illegal connection state attack]
Apr 4 00:15:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 122.226.86.84 to 80.220.22.74
Apr 4 02:45:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
122.226.86.105 - HackAttack: [SPI:Illegal connection state attack]
Apr 4 02:26:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 122.226.86.105 to 80.220.22.74
Apr 4 02:37:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
176.227.211.98 - HackAttack: [SPI:Illegal connection state attack]
Apr 4 01:06:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.227.211.98 to 80.220.22.74
Apr 4 03:57:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
108.170.43.10 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 3 22:49:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.43.10 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.170.43.10 RESULT:
108.170.43.10 IP add...
108.170.42.250 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 3 19:03:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.42.250 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.170.42.250 RESULT:
108.170.42.250 IP...
93.184.216.119 - Outbound connection to 93.184.216.119
I just booted the computer, fresh start, I have been having issues with my network, it seems just too slow.. or it just doesn\'t connect at all.
So exploring the log in my router it had that as a cur...
108.170.43.2 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 3 18:43:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.43.2 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.170.43.2 RESULT:
108.170.43.2 IP addre...
176.227.211.98 - Attacks from h176-227-211-98.host.redstation.co.uk
Apr 4 01:31:42 Hack Attack: DROP ICMP packet from [nas0] 176.227.211.98 to 77.86.xxx.xxx <SPI:Illegal connection state attack>
I keep getting firewall alerts like this all the time. Started at...
176.227.211.181 - HackAttack: [SPI:Illegal connection state attack]
Apr 3 17:35:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.227.211.181 to 80.220.22.74
Apr 3 17:35:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
75.60.174.97 - HackAttack: [SPI:Illegal connection state attack]
Apr 3 11:25:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.60.174.97 to 80.220.22.74
Apr 3 11:25:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
37.59.88.209 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 3 04:50:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.88.209 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/37.59.88.209 RESULT:
37.59.88.209 IP addre...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Apr 3 02:26:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Apr 3 02:43:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
176.14.58.90 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 2 22:27:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.14.58.90 to 80.220.22.74
Apr 2 22:27:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
174.138.210.63 - HackAttack: [SPI:Illegal connection state attack]
Apr 2 12:14:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.138.210.63 to 80.220.22.74
Apr 2 12:14:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
174.49.76.73 - HackAttack: [SPI:Illegal connection state attack]
Apr 2 10:14:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.49.76.73 to 80.220.22.74
Apr 2 10:14:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
108.170.22.70 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 2 08:16:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.22.70 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.170.22.70 RESULT:
108.170.22.70 IP ad...
87.117.252.238 - HackAttack: [SPI:Illegal connection state attack]
Apr 2 04:06:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 87.117.252.238 to 80.220.22.74
Apr 2 05:50:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
176.227.211.180 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 2 00:31:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.227.211.180 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/176.227.211.180 RESULT:
176.227.211.180...
109.200.9.146 - HackAttack: [SPI:Illegal connection state attack]
Mar 28 02:22:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.200.9.146 to 80.220.22.74
Mar 29 18:46:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
101.123.34.123 - HELP PLEASE
MY COMPUTER IS MAKING WEIRD NOISES. AND EVERY 5 MINUTES SECURITY ALERT COME UP WITH THE IP # 101.123.34.123
I DON\'T KNOW WHERE THIS IS COMING FROM BUT PLEASE HELP ME...
91.226.78.130 - IP Address - 91.226.78.130
McAfee continues to give warnings that it has blocked this IP address from making a connection to my computer - happens 2 to 4 times a week....
61.128.162.4 - NETWORK ATTACK
THIS IP ADDRESS ATTACK TO MY COMPUTR BUT BLOCK KIS 2012
DETAIL BELOW
Intrusion.Win.MSSQL.worm.Helkern Undefined 4/2/2012 2:08:48 AM
PLEASE HELP ME
WHAT IS THIS VIRUS OR HACKER
JAGJEEWAN YADAV IN UP...
93.114.46.158 - 93.114.46.158 complaint
This IP (lh17590.limehost.ro) tried to remote dedktop to my computer for no apparrent reason. This may be an accident but I though\'t I would notify you....
176.227.211.181 - HackAttack: [SPI:Illegal connection state attack] + INFO
Apr 1 01:02:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.227.211.181 to 80.220.22.74
Apr 1 18:58:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
31.3.225.146 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 31 23:26:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 31.3.225.146 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/31.3.225.146 RESULT:
31.3.225.146 IP addr...
Please banned this IP as they are trying to hack our Firewall and Network.
Message meets Alert condition
time april 01 2012 19:32 to april 01 2012 20:42
system,error,critical login failure for user ro...
183.64.202.67 - Trying to login
This adress is trying to acces our network firewalls. i have this from our zywall.
146 2012-03-31 23:35:06 alert User Failed login attempt to ZyWALL from ssh (incorrect password or inexistent usernam...
173.212.195.174 - Brandon Beachy Jersey
http://www.bravesproshop.com/24-phil-niekro-jersey Phil Niekro Jersey
http://www.bravesproshop.com/19-diaz-matt-jersey Diaz Matt Jersey
http://www.bravesproshop.com/16-dale-murphy-...
66.35.46.196 - Constant UDP Port Attacks
I have been getting constant UDP port attacks by IP\'s 66.35.46.196 and 66.35.46.197 , today there has been over 3300 port attempts
FWIN,2012/03/30,20:46:32 -4:00 GMT,66.35.46.197:15210,173.176.20.1...
108.170.9.122 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 30 23:54:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.9.122 to 80.220.22.74
Mar 30 23:55:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
82.192.92.65 - HackAttack: [SPI:Illegal connection state attack]
Mar 25 10:31:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 82.192.92.65 to 80.220.22.74
Mar 28 21:58:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Mar 30 04:51:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 30 17:07:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.218.199.147 - Constant port scan attemps
This ip constantly attemps port scans. 58.218.199.147 Never stops over and over, From what I found origin china. MUST BE STOPPED, DANGEROUS, NOT SAFE, VERY AGGRIVATING, ENOUGH IS ENOUGH!!!!...
208.79.211.11 - Fri 2012-03-30 17:49:59 TCP flood From 208.79.211.112 port:60597 To 78.149.69.134 port:6881
I have many flood warnings in my firewall log. Can you please have a look into this for me please. Thanks very much ...
217.118.24.95 - SSH
multiple attempts to SSH on to all available IP addresses from loft2293.serverloft.com (217.118.24.95) - unsuccessful this time . . . . . . . . . . ....
206.161.121.4 - access blocked - "malicious website" warning
Have been experiencing repeated alerts that say something about access to malicious website (206.161.121.4) being blocked. Other alerts for 89.114.9.97 alternate. Would like to know if there is a cu...
175.36.104.11 - HackAttack: [SPI:Illegal connection state attack]
Mar 30 09:21:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 175.36.104.11 to 80.220.22.74
Mar 30 09:21:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
78.138.97.122 - HackAttack: [SPI:Illegal connection state attack]
Mar 30 01:34:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.138.97.122 to 80.220.22.74
Mar 30 05:14:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
174.97.155.41 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 22:08:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.97.155.41 to 80.220.22.74
Mar 29 22:08:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
184.173.232.14 - HackAttack: [SPI:Illegal connection state attack] +INFO
Mar 29 20:04:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 184.173.232.14 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/184.173.232.14 RESULT:
184.173.232.14 IP...
2.120.167.166 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 16:33:27 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 2.120.167.166 to 80.220.22.74
Mar 29 16:33:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
195.175.240.98 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 16:05:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 195.175.240.98 to 80.220.22.74
Mar 29 17:22:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
09.114.9.97 - virus?
This IP address is being block by my walware bytes. I revieved it after going to look for hotels on priceline.com in the washington area...
24.125.160.148 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 15:18:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.125.160.148 to 80.220.22.74
Mar 29 15:18:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
174.97.155.41 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 14:34:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.97.155.41 to 80.220.22.74
Mar 29 14:34:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
24.125.160.148 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 12:09:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.125.160.148 to 80.220.22.74
Mar 29 12:09:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
174.97.155.41 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 11:39:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.97.155.41 to 80.220.22.74
Mar 29 11:39:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
76.93.48.132 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 10:56:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.93.48.132 to 80.220.22.74
Mar 29 10:56:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
76.93.48.132 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 09:55:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.93.48.132 to 80.220.22.74
Mar 29 09:55:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
24.125.160.148 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 09:51:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.125.160.148 to 80.220.22.74
Mar 29 09:51:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
190.194.65.237 - 190.194.65.237
I wish to submit a complaint about this IP address which sent a virus to my computer yesterday at about midday. I have now deleted the e-mail. The owner of this address seems to be Prima SA and the ...
174.97.155.41 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 09:19:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.97.155.41 to 80.220.22.74
Mar 29 09:19:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
76.93.48.132 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 05:43:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.93.48.132 to 80.220.22.74
Mar 29 05:43:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
24.125.160.148 - HackAttack: [SPI:Illegal connection state attack]
Mar 29 01:49:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.125.160.148 to 80.220.22.74
Mar 29 01:49:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
24.125.160.148 - HackAttack: [SPI:Illegal connection state attack]
Mar 28 23:31:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.125.160.148 to 80.220.22.74
Mar 28 23:31:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
92.48.74.32 - HackAttack: [SPI:Illegal connection state attack]
Mar 28 22:35:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.48.74.32 to 80.220.22.74
Mar 28 22:59:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
174.97.155.41 - HackAttack: [SPI:Illegal connection state attack]
Mar 28 22:23:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.97.155.41 to 80.220.22.74
Mar 28 22:23:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
174.97.155.41 - HackAttack: [SPI:Illegal connection state attack]
Mar 28 11:47:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.97.155.41 to 80.220.22.74
Mar 28 11:47:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
91.217.66.245 - HackAttack: [SPI:Illegal connection state attack]
Mar 28 05:09:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 91.217.66.245 to 80.220.22.74
Mar 28 05:09:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
109.230.216.211 - HackAttack: [SPI:Illegal connection state attack]
Mar 27 23:24:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.230.216.211 to 80.220.22.74
Mar 27 23:56:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
221.192.199.49 - hackers?
Somebody is scanning your computer.
Your computer\'s TCP ports:
27977, 1080, 8085, and 8008 have been scanned from 221.192.199.49..
This is a firewall log. It happens every 2 hours...
109.200.9.146 - HackAttack: [SPI:Illegal connection state attack]
Mar 27 15:09:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.200.9.146 to 80.220.22.74
Mar 27 15:26:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
218.240.23.102 - NAS attack
After installation of IP camera from dealextreme to internal LAN, my NAS recorded a lot of access to administrator account. Finally automatically blocked by IP filtering. Don\'t use the same account ...
173.236.50.235 - complaint hig alert from I.P. 173.236.50.235
Above I.P. attacked my computer targeting files. Attempt overted by security software. Malicious tool kit. Please shut them down. Thank you very much for your time. ...
183.203.11.199 - HackAttack: [SPI:Illegal connection state attack]
Mar 26 15:57:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 183.203.11.199 to 80.220.22.74
Mar 26 15:57:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
176.227.221.2 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 26 08:04:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.227.221.2 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/176.227.221.2 RESULT:
176.227.221.2 IP ad...
41.138.179.52 - Attack
This IP address (41:138.179.52) is constantly attacking my computer and attempting to hack into my system. The last attack on my system was made today monday march 26, 2012 at 6.39pm...
94.200.165.242 - RDP cracking
This arse wipe has been trying to crack an account on our RDP server for bast part of two weeks now. scumbag rectum flaps - 25 words....really?...
188.87.38.178 - HackAttack: [SPI:Illegal connection state attack]
Mar 25 23:56:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.87.38.178 to 80.220.22.74
Mar 25 23:56:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
109.73.76.216 - HackAttack: [SPI:Illegal connection state attack]
Mar 25 18:20:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.73.76.216 to 80.220.22.74
Mar 25 19:24:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
109.200.9.146 - HackAttack: [SPI:Illegal connection state attack]
Mar 23 05:48:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.200.9.146 to 80.220.22.74
Mar 25 13:35:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
173.236.50.235 - Web Attack: Malicious Toolkit Website 9
Got this flagged from Norton. It said the traffic from this address matches the signature of a known attack. It also said the attack was resulted from \\DEVICE\\HARDDISKVOLUME2\\PROGRAM FILES (X86)\...
94.245.121.253 - FIrewall
FIrewall has gone off its head constantly advising this IP is trying to make a connection
Protocol UDP Source IP: 94.245.121.253:3544
FIrewall has gone off its head constantly advising this IP is ...
58.218.199.147 - It's a proxy
This IP is a transparent proxy. You think it\'s one dude, but it\'s a ton of innocent folks connecting behind this very same proxy.
And 26....
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Mar 24 04:38:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 24 22:51:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
37.59.160.242 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 24 14:36:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 37.59.160.242 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/37.59.160.242 RESULT:
37.59.160.242 IP ad...
64.15.147.48 - Received a notification from Malware Bytes
Received a notification from Malware Bytes that the IP 64.15.147.48 has been blocked because of malicious activity on my computer.
Please send details of website to gaurav.agarwl@gmail.com...
206.161.121.5 - 206.161.121.5
malicious website is trying to access your computer...that is the message that I get. I am so tired of it. It has been doing this all night. Please stop...
72.90.75.34 - Service Blocked ICMP echo req
Here is the info for the ip adress
IP Address: 72.90.75.34
IP Address Country: United States (US)
IP Address Region: NY New York
IP Address City: Liverpool
IP Postal Code 13088
IP Address Area Code...
24.52.74.197 - Service Blocked ICMP ech req
reporting this ip adress here is it\'s info IP Address: 24.52.74.197
IP Address Country: United States (US)
IP Address Region: OH Ohio
IP Address City: Toledo
IP Postal Code 43614
IP Address Are...
58.218.199.250 - Attempted connection
This one tried more than once to hook-up with my ip address, attack on my computer trying to scan my ports... im not happy about this...
176.9.140.35 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 23 21:26:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.9.140.35 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/176.9.140.35 RESULT:
176.9.140.35 IP addres...
174.123.254.66 - HackAttack: [SPI:Illegal connection state attack]
Feb 21 14:29:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.123.254.66 to 80.220.22.74
Mar 23 12:05:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
61.235.46.146 - They Just want to hack but couldnt !
I ve been attacked By one computer or more (I dont know ) But thanks God I was using Kaspersky and it did the Best as usual and I have to say keep using that and keep it update Too !! Take care Guys ...
94.245.121.253 - Constant request from this IP
FIrewall has gone off its head constantly advising this IP is trying to make a connection
Protocol UDP Source IP: 94.245.121.253:3544
FIrewall has gone off its head constantly advising this IP is t...
206.161.121.3 - 206.161.121.3
It seems this is a constant malware threat that keeps being blocked by my firewall. It is tagged as an outgoing message. Seems to be in my system....
67.22.130.17 - HackAttack: [SPI:Illegal connection state attack]
Mar 22 23:45:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.22.130.17 to 80.220.22.74
Mar 22 23:45:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
173.214.160.48 - 173.214.160.48
Silencer Trojan Horse \"attempted to access internet\" message received from Norton. According to a search for the ip on Google, the ip is located in New Jersey, USA....
109.200.9.146 - HackAttack: [SPI:Illegal connection state attack]
Mar 22 17:04:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.200.9.146 to 80.220.22.74
Mar 22 18:22:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
58.218.199.227 - Router alert
There are multiple alert entries like that:
kernel: Intrusion -> IN=ppp_1_32_1 OUT= MAC= SRC=58.218.199.227 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 DF PROTO=TCP SPT=12200 DPT=8080 WINDOW=8192 RES...
58.218.199.227 - port scanning from 58.218.199.227
I\'ve been seeing port scans from this ip address hitting my router. It says their source port is 12200. I\'m seeing attempted destination port scans ranging from 80 to 27977....
128.9.160.132 - Network Attack Notification
43 attempts from this ip address in 7 hour period today alone.
Following Info in firewall log:
Notice Network Access ICMP packet dropped due to policy 128.9.160.132, 869, X1 ICMP Echo, Code: 0 ...
192.168.1.6 - a girl
a boy sayd mani bad things abut mi famili and said bad words of me and tell me that go to have sex with me :(...
190.144.55.163 - a boy
he tall much bad words about mi mother and mi father this is the problem that i have now i need 100 millions ...
148.243.142.18 - help!!!!
Hi there,
How can u help? After installing ZoneAlarm I realized that most of the attacks or knock on my door are from telecoms, or huge Internet companies \'round the world.
I wonder how can this b...
58.218.199.227 - ABUSE FROM 58.218.199.227
For weeks now, someone from this address has been probing my network, attempting to compromise my firewall, dmz machines and penetrate my LAN.
Incidents have been occurring hourly for over two weeks....
66.185.85.155 - Outgoing Access To this IP from svchost.exe
For some reason I cannot trace this IP back to a host such as microsoft, but I do know svchost.exe network services is trying to connect to here. I know I could be mistaken, but this is strange. I saw...
206.161.121.3 - My system is trying to contact this IP address
I\'ve noticed that I have had a runaway svchost.exe for a time and in trying to stop it I\'ve purchased several programs. It seems that something on my system is trying to contact these people and my...
173.192.170.85 - HackAttack: [SPI:Illegal connection state attack]
Mar 18 17:43:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 173.192.170.85 to 80.220.22.74
Mar 18 17:43:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
61.235.46.146 - Stop it.
Network attack Intrusion.Win.MSSSQL.worm.Helkern on local port 15454.
1 attempt on my desktop, another 5-7 attempts on my laptop. =.=
Looks like China have the most time on hacking..... -.-...
64.212.114.89 - attempted unauthorized connection
A user at 64.212.114.89 broke through my routers firewall and was blocked when he/she tried to access my laptop it is possible the user in question broke into my home server as it is not currently ru...
68.44.141.222 - HackAttack: [SPI:Illegal connection state attack]
Mar 17 08:49:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.44.141.222 to 80.220.22.74
Mar 17 09:29:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Mar 14 02:37:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 17 10:14:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
58.218.199.147 - 58.218.199.147
port scanning attack, that is all I know , I have recieved two alerts from my security system that this same IP has tried to break through my fire wall...
91.217.178.18 - multiple attempts to log into my network
someone from this address is trying to get in to my server and this ip address is unknown to me. there were multiple attempts to get into my system...
109.120.156.200 - Scan Ports
[INFO] Wed Mar 14 10:16:41 2012 Blocked incoming TCP connection request from 109.120.156.200:56599 to 109.173.114.61:13500
[INFO] Wed Mar 14 10:16:39 2012 Blocked incoming TCP connection request from ...
60.217.235.5 - attacks to our server
This IP is trying to brut force its way through our ssh servers. This ip was blocked by our firewall. I wonder why the providers don\'t just close this suckers services......
61.235.46.146 - Kaspersky Internetsecurity meldet Netzwerkangriff
Netzwerkangriff auf lokalen Port 1434 von der IP-Adresse 61.235.46.146
wurde verboten: intrusion.Win.MSSSQL.worm.Helkern
Datum: 14.03.2012 Uhrzeit: 10:54
Von China kommen immer wieder solche Netzwerk...
71.194.98.98 - HackAttack: [SPI:Illegal connection state attack]
Mar 13 22:38:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 71.194.98.98 to 80.220.22.74
Mar 13 22:38:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
98.221.72.31 - HackAttack: [SPI:Illegal connection state attack]
Mar 13 22:18:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.221.72.31 to 80.220.22.74
Mar 13 22:18:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
71.194.98.98 - HackAttack: [SPI:Illegal connection state attack]
Mar 13 17:39:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 71.194.98.98 to 80.220.22.74
Mar 13 17:39:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
98.221.72.31 - HackAttack: [SPI:Illegal connection state attack]
Mar 13 17:30:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.221.72.31 to 80.220.22.74
Mar 13 17:30:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
206.161.121.5 - Complaint web site attacking my computer
206.161.121.2
206.161.121.4
206.161.121.5
this site bombards my computer all day and nite, my firewall stops the intrusion this is very annoying i do not know what they want or what they are trying t...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Mar 12 22:04:32 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 13 03:10:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
93.89.92.20 - HackAttack: [TCP SYN Flooding]
Mar 13 00:05:21 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 93.89.92.20:6663 to 80.220.22.74:6663
Mar 13 00:05:21 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 93.89.92.20:6664 to 8...
58.218.199.227 - Portscan Attempt
Been getting scanned every 5 minutes or so, really annoying. Antivirius detects and prevents the scan but still could be dangerous. Could be spies also :)
...
68.68.29.204 - HackAttack: [SPI:Illegal connection state attack]
Mar 12 19:29:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.29.204 to 80.220.22.74
Mar 12 20:43:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
189.73.205.184 - HackAttack: [SPI:Illegal connection state attack]
Mar 12 16:16:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 189.73.205.184 to 80.220.22.74
Mar 12 16:16:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
189.73.205.184 - HackAttack: [SPI:Illegal connection state attack]
Mar 12 09:43:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 189.73.205.184 to 80.220.22.74
Mar 12 09:43:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
202.228.239.196 - SSH password probe
sshd[50656]: Failed password for root from 202.228.239.196 port 41228 ssh2
sshd[42420]: Failed password for root from 202.228.239.196 port 41111 ssh2
sshd[29342]: Failed password for root from 202.22...
61.253.249.157 - SSH login attempt
Failed password for root from 61.253.249.157 port 42455 ssh2
Failed password for root from 61.253.249.157 port 42455 ssh2
Failed password for root from 61.253.249.157 port 42455 ssh2
(3 Attempts total...
206.161.121.5 - 206.161.121.5 and 67.29.139.253 attact at the same time
73.236.56.93 (Type: outgoing)
2012/03/11 10:05:35 -0400 IP-BLOCK 206.161.121.3 (Type: outgoing)
2012/03/11 10:05:37 -0400 IP-BLOCK 206.161.121.4 (Type: outgoing)
2012/03/11 10:05:38 -0400 IP-BLO...
189.1.162.6 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 11 11:15:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 189.1.162.6 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/189.1.162.6 RESULT:
189.1.162.6 IP address l...
176.9.113.49 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 11 03:04:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.9.113.49 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/176.9.113.49 RESULT:
176.9.113.49 IP addre...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Mar 7 19:09:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 11 00:50:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
213.180.92.129 - tcp data on syn segment
Same complaint by me.
From recent log:
Mar 9 20:49 GMT.
IDS proto parser : tcp data on syn segment (1 of 1) : 213.180.92.129 x.x.x.x 0060 TCP 50674->8827 [S.....] seq 224067651 win 32120...
216.245.200.20 - HackAttack: [SPI:Illegal connection state attack]
Mar 10 10:18:48 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 216.245.200.20 to 80.220.22.74
Mar 10 14:41:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
202.98.29.19 - trying to hack...
Mar 9 21:55:04 fw sshd[27452]: Invalid user oracle from 202.98.29.19
Mar 9 21:55:07 fw sshd[27489]: Invalid user oracle from 202.98.29.19
Mar 9 21:55:11 fw sshd[27491]: Invalid user oracle from 202...
117.243.250.249 - try it multiple times...
Mar 7 02:53:16 fwsshd[19425]: Invalid user shelluser from 117.243.250.249
Mar 7 02:53:21 fwsshd[19437]: Invalid user maxion from 117.243.250.249
Mar 7 02:53:26 fwsshd[19451]: Invalid user shelluser...
58.218.199.147 - Log report
58.218.199.147 - - [09/Mar/2012:12:25:24] \"GET /judge.php HTTP/1.1\" 401 739 \"\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\"
58.218.199.147
58.218.199.147 -...
58.218.199.250 - Still at it !
Log entry :
58.218.199.250 - - [09/Mar/2012:09:09:27] \"GET /me/proxyheader.php HTTP/1.1\" 401 739 \"\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\"
58.218.19...
173.192.176.155 - HackAttack: [SPI:Illegal connection state attack]
Mar 8 09:02:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 173.192.176.155 to 80.220.22.74
Mar 9 10:21:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
94.23.213.102 - HackAttack: [TCP SYN Flooding]
Mar 9 17:25:06 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 94.23.213.102:6662 to 80.220.22.74:6662
Mar 9 17:25:06 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 94.23.213.102:6664 ...
213.180.92.129 - tcp data on syn segment
IDS proto parser : tcp data on syn segment (1 of 1) : 213.180.92.129 81.228.154.22 0060 TCP 36083->14272 [S.....] seq 3031957571 win 32120
...no need of this!!...
58.218.199.227 - "#$$%#%#"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 58.218.199.227
IP destination address : 76.227.65.191
Number of attempts ...
31.170.161.183 - Intrusion Attempt
Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Addre...
58.218.199.227 - "Can't Get Enough"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 58.218.199.227
IP destination address : 76.227.65.191
Number of attempts ...
64.31.63.116 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 8 18:16:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 64.31.63.116 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/64.31.63.116 RESULT:
4.31.63.116 IP address...
95.67.191.189 - HackAttack: [SPI:Illegal connection state attack]
Mar 8 12:38:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 95.67.191.189 to 80.220.22.74
Mar 8 12:38:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
58.218.199.227 - Port scanner
He has done this to me today as well, multipal times.
Its rather annoying but he is being blocked each time.
Tried changing IP that didnt work, any other suggestions?...
65.97.63.247 - Constant pinging
IP keeps pinging port 52730 over and over again for the last hour. Seems to really want through for some reason. Anyone else have this issue? ...
Went to a site unrelated to this and this ip tried to access my computer. Malwarebytes blocked it, but the ip is continually trying to access my computer. It has so far attempted to access my comput...
208.43.15.198 - HackAttack: [SPI:Illegal connection state attack]
Mar 4 21:20:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 208.43.15.198 to 80.220.22.74
Mar 7 14:49:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
69.64.36.29 - IP Block 69.64.36.29
HELP!!!! I need to get rid of this!! It is a pain and i have tried everything! Is there a solution!!?
IP Block 69.64.36.29
Type: outgoing
Port: 59196
Process: chrome.exe
...
195.216.243.184 - IP block 195.216.243.41
The same problem! how can i get it to stop or eliminate whatever its causing it!??? It\'s a real pain! Help!!!
IP-BLOCK 195.216.243.41, Type: Outgoing, Port: 59298, Process: chrome.exe...
208.115.226.212 - HackAttack: [SPI:Illegal connection state attack]
Mar 7 20:14:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 208.115.226.212 to 80.220.22.74
Mar 7 20:59:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
69.23.112.164 - HackAttack: [SPI:Illegal connection state attack]
Mar 7 19:09:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.23.112.164 to 80.220.22.74
Mar 7 19:09:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
86.21.14.209 - HackAttack: [TCP SYN Flooding]
Mar 7 17:32:07 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 86.21.14.209:1096 to 80.220.22.74:8118
Mar 7 17:32:17 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 86.21.14.209:1092 to...
149.255.37.55 - HackAttack: [TCP SYN Flooding]
Mar 6 20:14:55 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 149.255.37.55:58152 to 80.220.22.74:3127
Mar 6 20:14:55 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 149.255.37.55:5683...
78.29.15.137 - 78.29.15.137 Trying to hack my Joomla sites
The ip address, 78.29.15.137 keeps trying to hack my backend Administrator on my Joomla websites. What can be done about this? I am using RSFirewall and get constant emails of the attempts....
61.235.46.146 - MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT
2/6/12 7:34 AM MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT 61.235.46.146
2/8/2012 1:28 AM MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT 61.235.46.146
2/9/2012 1:25 PM MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT 61.2...
218.75.49.242 - MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT
These assholes have been trying to hack my customers. Here is part of the security log from one of them.
2/8/2012 9:20 AM MS02-039_SQL_SERVER_RESOLUTION_EXPLOIT 218.75.49.242
2/19/2012 2:57 PM MS02-...
173.236.50.235 - web attack
I had a warning Web attack malicious tool kit website 9 detected from IP address 173.236.50.235. This happened about 6 days ago. please look into it...
144.232.24.202 - HackAttack: [SPI:Illegal connection state attack]
Mar 6 14:56:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 144.232.24.202 to 80.220.22.74
Mar 6 15:10:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
188.122.95.81 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 01:47:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.122.95.81 to 80.220.22.74
Feb 22 13:06:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
108.170.21.186 - HackAttack: [SPI:Illegal connection state attack] +INFO
Mar 6 04:17:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.170.21.186 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/108.170.21.186 RESULT:
108.170.21.186 IP...
173.255.132.86 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 6 02:48:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 173.255.132.86 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/173.255.132.86 RESULT:
173.255.132.86 IP...
61.235.46.146 - Hey hey
I don\'t give a damn.. fuck you yellow people that are trying to get to my comp.. Guess you fucking burn in hell you tiny dicks.....
176.31.230.90 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 5 18:29:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 176.31.230.90 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/176.31.230.90 RESULT:
176.31.230.90 IP add...
98.237.149.87 - HackAttack: [SPI:Illegal connection state attack]
Mar 5 09:01:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.237.149.87 to 80.220.22.74
Mar 5 09:02:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
77.210.5.151 - scanning ports
Somebody is scanning your computer.
Your computer\'s TCP ports:
9415, 2479, 3246, and 7212 have been scanned from :
1 03/05/2012 15:27:13 Port Scan Incoming TCP 58.218.199.250
2 03/05/2012 16:13...
78.29.15.137 - Trying to hack my Site
Has tried to log into admin area six times without permission. We are sad to see he is doing this with other sites. Whats a jerk
...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Mar 4 19:14:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 5 04:04:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
78.29.15.137 - Firewall Alert
This ip: 78.29.15.137 is tring to hack into my server. I received reports that this ip has been trying unsuccessfully to login to two domains on my server. ...
46.247.246.227 - HackAttack: [SPI:Illegal connection state attack] + INFO
Mar 4 02:56:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 46.247.246.227 to 80.220.22.74
http://www.ip-adress.com/ip_tracer/46.247.246.227 RESULT:
46.247.246.227 IP...
188.227.181.69 - HackAttack: [SPI:Illegal connection state attack]
Feb 21 01:19:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.227.181.69 to 80.220.22.74
Mar 4 06:19:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
208.91.197.27 - malaware
My computer gets directed to 208.91.196.27.wpad.dat before I even open the browser. It doesn\'t get past the firewall, but continues to try as long as the computer is on...
46.19.37.32 - Silencer trojan horse
I received a Norton message stating an alert was created pertaining to the \"silencer trojan horse\" from the ip 46.19.37.32 about 10 minutes ago (12:25pm Central Time). I\'ve never seen a ...
78.29.15.137 - brute forcing my joomla site.
someone needs to take some serious action against this person(s) who are at this ip address.. I am getting more and more attempts from someone trying to access my site back end.
...
174.36.158.244 - 174.36.158.244
My fire wall is blocking stream of packets going to flynoc.com (under this ip address 174.36.158.244 port 16331). under svchost process
cpu fan is running continuously. I am trying to find the virus.....
149.7.241.51 - unauthorised connection
ip addres was connected to my lan from 192.168.0.102:49156 (printer ip ? ) to : 149.7.241.51 over port 49156
(accidently found out with a netstat -a wjhen my computer was acting funny)...
221.192.199.49 - "Chinese Government Sponsored Hacking"
This IP is working in collaboration with the IP 58.218.199.227
They are scanning for any & all open ports, then they come in with
spam, redirects, virus\'s and try to steal your personal inf...
58.218.199.227 - "Chinese Goverment Sponsored Hacking"
This IP is working in collaboration with the IP 211.192.199.49
They are scanning for any open ports then they come in with
spam, redirects, virus\'s and try to steal your personal information.
...
4.69.148.178 - HackAttack: [SPI:Illegal connection state attack]
Feb 21 17:09:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 4.69.148.178 to 80.220.22.74
Mar 2 17:16:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Feb 9 10:22:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Mar 2 21:49:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
140.113.13.101 - SSH root access
Made more than 200 attempts, 1 per minute to gain access to my server via SSH by trying username root and various passwords before being added to the blocked ip list. Due to the failed attempts and fo...
50.115.119.11 - HackAttack: [SPI:Illegal connection state attack]
Feb 4 04:11:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.11 to 80.220.22.74
Mar 1 02:42:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
117.243.250.249 - This IP is trying to hack our Firewall.
Please banned this IP as they are trying to hack our Firewall and Network.
Message meets Alert condition
date=2012-03-01 time=17:53:07 devname=FG100C3G11600411 device_id=FG100C3G11600411 log_id=010403...
85.90.32.54 - detection of filtering policy
On Feb 29 between 17:27 GMT and 17:31 GMT.
About a dozen attempts of filtering policy detection reported on my firewall. (This is port 33435)...
31.31.77.24 - HackAttack: [TCP SYN Flooding]
Feb 28 19:07:38 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 31.31.77.24:6665 to 80.220.22.74:6665
Feb 28 19:07:38 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 31.31.77.24:6666 to 8...
50.22.69.92 - HackAttack: [SPI:Illegal connection state attack]
Feb 28 04:24:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.22.69.92 to 80.220.22.74
Feb 28 04:24:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
192.41.11.210 - HackAttack: [SPI:Illegal connection state attack]
Feb 27 19:19:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 192.41.11.210 to 80.220.22.74
Feb 28 20:19:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
91.226.78.129 - "LLC Komplit Plyus" IP 91-226-78-138
McAfee continues to give warnings that it has blocked this IP address \"from making a connection\" to my computer - happens usually 2x per day - but not every day....
193.107.16.156 - spy
Tray to get into my computer. The firewall stop it. The allert come from one in one minute. Take care of this ! Don\'t let in...
58.218.199.87 - port 12200
constant pinging on port 12200 from IP 58.218.199.87 from china in my firewall log on my router. Added it to a blacklist in the firewall....
218.241.236.109 - Hacker from china
Hacker from china
218.241.236.109
FWIN,2012/02/26,17:32:42 -5:00 GMT,218.241.236.109:13390,00.00.00.00:22,TCP (flags:S)
Same thing happend to me and iam pretty sure it\'s the same guy on port 12200 ip...
198.111.167.162 - Hacker from United States
Firewall alert
Hacker from United States
198.111.167.162
Ssh Detection from my zonealarm firewall
FWIN,2012/02/26,17:32:42 -5:00 GMT,198.111.167.162:51904,00.00.00.00:22,TCP (flags:S)
Well this is an...
68.67.159.206 - outgoing connection blocked by mcafee
Outgoing connection blocked by McAfee. This has happened twice before. What is this IP address up to: Malware, trojan, or the likes? This is the 2nd stopped connection...
2.18.114.110 - all port scan attack
We receive several all port scan attacks from this (and not only this) ip address. Akamai seem to somehow be keen to get inside our network. Not sure why a company like Akamai would want to lower thei...
4.53.42.58 - HackAttack: [SPI:Illegal connection state attack]
Feb 22 02:27:52 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 4.53.42.58 to 80.220.22.74
Feb 27 12:56:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from...
91.217.153.88 - pp alexy klimenko 91.217.153.88
monday 27 th february 2012 0658 lt
this adress were stopped by antimalwaresbyte and the firewall.
adre4ss whois in ukraine. tried 2 times . It seems that they try to make
very bad acces to other comp...
94.236.93.234 - Website admin access 625 times
Description: There was an unsuccessful attempt to login into the backend section of your website using an unknown username.
Date of event: 27.02.2012 06:02:45
User IP: 94.236.93.234...
221.192.199.49 - "Closing"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
218.18.232.218 - "Gang of Thieves"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 218.18.232.218
IP destination address : 76.227.65.191
Number of attempts : 3
Time at last attempt : 2/27/12 03:26:20 AM
IP b...
115.89.24.180 - "Previous Post Mistake"
My Immediately preceding post is meant for another IP, Sorry bout that! No current problems with 115.89.24.180 Thanks! And in closing I\'d just like to say it\'s a jungle out there!...
115.89.24.180 - "Gang of Thieves"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 218.18.232.218
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "AssHole Chink Fuck"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Continuous Harrassment"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
94.72.95.2 - ICMP Attack
Eset has detected an ICMP Attack on my computer from this adress. He is from Lublin in Poland from Marsoft S.A. Be aware of them!...
221.192.199.49 - "Saki Haki"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Haki Saki"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Hacky SakI"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
8.26.213.253 - ??
????? ???? ????? ?? ?? ????? ?????? ? ? ???????? ?? ??? ??? ???? ???? ?? ?????? ?????? ?? ??????? ??? ?????? ??????? ?? ?????? ?? ?????? ??????? ??? ????? ??????? ?? ?????...
184.173.195.64 - "Rats Nest"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Awww Yeah"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Hmmm"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Rats Nest"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Stirring"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
121.10.134.100 - "Stirring"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 121.10.134.100
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "China Connection"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
192.168.1.5 - problem with acout
I want to sign injand i cant i dont know whats going on with my acout
can you reply my acount and pasworld to my email :atzalaproduce@gmail.com...
184.173.195.64 - "Continous FlyBys"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
58.53.147.114 - "Rats Nest"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 58.53.147.114
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Again"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
75.126.141.159 - "Again"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 75.126.141.159
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Again"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
Number of attempts : 1
Time at last attempt : 2/25/12 0...
75.126.141.159 - "Possible Connection"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 75.126.141.159
IP destination address : 76.227.65.191
Number of attempts ...
184.173.195.64 - "Port Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
IP destination address : 76.227.65.191
Number of attempts ...
182.113.173.145 - "In League with"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 182.113.173.145
Number of attempts : 3
Time at last attempt : 2/24/12 ...
221.192.199.49 - "ScanMaster"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 3
Time at last attempt : 2/24/12 1...
68.37.246.196 - telnet attempt into my pc
telnet into my machine attempt telnet into my machine attempt telnet into my machine attempt telnet into my machine attempt telnet into my machine attempt telnet into my machine attempt ...
221.192.199.49 - "Intruder Alert"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 1
Time at last attempt : 2/24/12 1...
221.192.199.49 - "Trying to climb down the Chimney"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
91.226.78.129 - 91.226.78.129
Received an alert that a Russian IP address, 91.226.78.129, was attempting to access my computer. Thankfully it was blocked.
General IP Information
IP: 91.226.78.129
Decimal: 1541557889
Hostname: 9...
58.218.199.147 - Firewall probing
I have several firewalls reporting this IP address probing them on several different ports. Here is a list of some of the ports that this IP address tried access.
8085/tcp
socks/tcp 1080
7212/tcp
81...
221.192.199.49 - "Ass Wipe"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 87
Time at last attempt : 2/22/12 ...
187.126.121.81 - Many alerts
from multiple IPs
Tue Feb 21 17:04:18 2012
=>Found attack from 187.126.121.81.
Source port is 2335 and destination port is 36649 which use the TCP protocol. ...
58.218.199.87 - 58.218.199.87 firewall alerts
Tue Feb 21 17:02:45 2012
=>Found attack from 58.218.199.87.
Source port is 12200 and destination port is 6515 which use the TCP protocol.
Tue Feb 21 17:08:25 2012
=>Found attack from 58.218...
46.22.239.167 - =>Found attack from 46.22.239.167. Source port is 12049 and destination port is 36649 which use the TCP protocol. Tue Feb 21 17:25:24 2012
will not stop..about every 3 to 4 min
Tue Feb 21 17:15:36 2012
=>Found attack from 46.22.239.167.
Source port is 12049 and destination port is 36649 which use the TCP protocol.
Tue Feb 21 17:2...
65.191.122.40 - HackAttack: [SPI:Illegal connection state attack]
Feb 21 21:49:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 65.191.122.40 to 80.220.22.74
Feb 21 21:50:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
200.221.136.146 - HackAttack: [SPI:Illegal connection state attack]
Feb 21 14:50:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 200.221.136.146 to 80.220.22.74
Feb 21 15:02:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
68.68.22.133 - HackAttack: [SPI:Illegal connection state attack]
Feb 21 04:53:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.68.22.133 to 80.220.22.74
Feb 21 05:51:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
204.93.180.2 - TCP Intrusion from 204.93.180.2
TCP from 204.93.180.2 to local port 80 Denied: Intrusion.Generic.WebApp.DirTravers.exploit
21-02-2012 01:19:33(IST)
caught by kaspersky internet security.
Repeated Directory traverse exploit.
More ...
77.247.177.45 - outgoing attempt by IP 77.247.177.45
I have Malwarebytes running and every morning I receive an alert informing me that it has blocked IP 77.247.177.45, Process Skype.exe. Googled this IP address and it is showing up as from the Netherl...
188.116.55.243 - HackAttack: [TCP SYN Flooding]
Feb 20 00:45:01 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 188.116.55.243:6664 to 80.220.22.74:6664
Feb 20 00:45:01 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 188.116.55.243:666...
95.168.173.155 - 95.168.173.155
OUT GOING ? does this mean spyware is trying to phone home ?
2012/02/19 19:25:53 -0500 PAT- IP-BLOCK 94.100.30.163 (Type: outgoing, Port: 49328, Process: dragon.exe)
2012/02/19 19:25:54 -0500 PAT-...
91.205.41.57 - McAfee Risky connection blocked
I received a risky connection blocked message regarding the IP address 91.205.41.57. This occured during the night while no one was on the computer....
221.192.199.49 - 221.192.199.49
How can we attack this guy and his ISP?
Unless this is State supported hacking we ought to be able to make life difficult for him....
95.180.90.144 - port scanning atac detected
attacks from this ip address detected more than once a day for a while now, please block it if possible, I have eset smart 5 but I want to be sure
...
121.45.143.189 - HackAttack: [SPI:Illegal connection state attack]
Feb 17 22:46:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 121.45.143.189 to 80.220.22.74
Feb 17 22:46:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
Date Time Message
[INFO] Wed Feb 15 10:18:41 2012 Blocked incoming TCP connection request from 86.38.10.105:35151 to 86.*.*.*:23
[INFO] Thu Feb 16 22:42:45 2012 Blocked incoming TCP connection request...
85.17.24.101 - ATACK
THIS IP WOS DETECTED ATACK MY COMPUTER IT ATACK MY COMPUTER I WANT BE SURE THAT IP DONT ATACK AGAIN MY COMPUTER NOT NOW AND NOT IN THE FUTURE I HOPE TO REZOLVE YOU THIS SITUATION...
58.218.199.147 - Stay to hell out of my computer
My computer tell me this ip keeps trying to break in.Shut it down or my people will destroy that system.this is the only and final warning....
58.218.199.227 - Port Scan Detected
Multiple port scans which were blocked from this remote IP address. These are happening many times daily over a couple of months. adding words just to get past 25....
88.190.227.122 - Trying to connect to servers
This IP is trying to Ssh to our Servers.
*Jun 20 17:30:01.268: %SEC-6-IPACCESSLOGP: list FILTRA-IN denied tcp 88.190.227.122(29553) -> 66.175.xxx.xxx(22), 1 packet
*Jun 20 17:30:08.876: %SEC-6-IP...
184.173.195.64 - "Constant Aggressor"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 184.173.195.64
Number of attempts : 2
Time at last attempt : 2/15/12 0...
208.73.210.29 - Hacking
Keep getting a firewall intrusion report from IPs that come from Oversee.net. Since these firewall intrusions have come up my pc has been slowed down and I am finding more and more malware....
50.22.0.186 - HackAttack: [SPI:Illegal connection state attack]
Feb 15 09:32:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.22.0.186 to 80.220.22.74
Feb 15 09:33:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
218.19.175.252 - Terminal Server initiation attempt
Constant Terminal server session attempts. Firewall detected constant requests for non encrypted Terminal Server session from IP Address 218.19.175.252. The IP has beed reported for port scanning in t...
89.36.160.154 - ICMP flooding attack
I have communicate from firewall with this ip about ICMP flooding attack. What it\'s mean? What to do? Is it danger for my computer if firewall see it?...
109.236.87.119 - Tentative d'intrusion détectée
Tentative d\'intrusion détectée : NULL scan (TCP flag set)
Heure : 08/02/2012 20:49:44
Direction : Entrant
Protocole : tcp
Services : TCP High Ports in
Adresse distante : 1...
85.17.48.106 - HackAttack: [SPI:Illegal connection state attack]
Feb 15 00:09:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 85.17.48.106 to 80.220.22.74
Feb 15 00:09:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
50.115.119.10 - HackAttack: [SPI:Illegal connection state attack]
Feb 5 18:47:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.10 to 80.220.22.74
Feb 13 19:00:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
218.75.49.242 - "Slammer" worm to compromise a Microsoft SQL Server.
Block external access to the MS SQL services on port 1433 and 1434 if possible.
Patches from Microsoft are available that fix this vulnerability. The patches are available from www.microsoft.com/tech...
94.78.137.200 - Network Intrusion
I just received a network intrusion from ip addres: 94.78.137.200.
It\'s addrees is the following:
STREAM COMMUNICATIONS Spółka z o.o.
Al. 29 Listopada 130
31-406KrakÃ&sup...
188.116.4.167 - HackAttack: [TCP SYN Flooding]
Feb 13 10:48:23 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 188.116.4.167:6661 to 80.220.22.74:6661
Feb 13 10:48:23 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 188.116.4.167:6664 ...
50.115.119.10 - HackAttack: [SPI:Illegal connection state attack]
Feb 5 18:47:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.10 to 80.220.22.74
Feb 13 19:00:15 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
219.71.67.218 - HackAttack: [SPI:Illegal connection state attack]
Feb 13 02:44:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 219.71.67.218 to 80.220.22.74
Feb 13 02:45:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
83.133.119.155 - german krauts keep trying to hack my pc
83.133.119.155
leads to some asshole kraut in germany in a shack somewhere trying to hack my pc with a dialup connection. when will these losers realize that they suck and to stop trying to hack into ...
76.16.103.199 - HackAttack: [SPI:Illegal connection state attack]
Feb 12 02:15:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.16.103.199 to 80.220.22.74
Feb 12 02:15:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
108.163.192.227 - HackAttack: [SPI:Illegal connection state attack]
Jan 6 00:23:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 108.163.192.227 to 80.220.22.74
Jan 6 19:05:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
212.117.177.110 - try to contact
Firewall Alert:
try to contact with one application lsass.exe on my system (Port: 500). I had any connection with this server bevore.
Warning! Attantion on this server, Fraud possible....
188.116.55.243 - HackAttack: [TCP SYN Flooding]
Feb 10 02:47:45 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 188.116.55.243:6665 to 80.220.22.74:6665
Feb 10 02:47:45 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 188.116.55.243:666...
50.115.119.14 - HackAttack: [SPI:Illegal connection state attack]
Feb 9 20:39:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.14 to 80.220.22.74
Feb 10 02:22:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.168.119.10 - HackAttack: [SPI:Illegal connection state attack]
Feb 1 22:35:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.168.119.10 to 80.220.22.74
Feb 9 02:05:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Feb 8 05:10:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Feb 9 06:22:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
76.10.222.26 - "Multiple Hits"
First time seeing this IP address, hope he\'s not planning to stay long.
Security alert type : IP Subnet Broadcast Amplification
IP source address : 76.10.222.26
Number of...
188.227.184.184 - HackAttack: [SPI:Illegal connection state attack]
Jan 11 22:34:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.227.184.184 to 80.220.22.74
Jan 29 01:42:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
180.76.5.54 - 180.76.5.0 / 255.255.255.0
This IP range keeps trying to guess a session for an installer on my server each 30 seconds, eventually switching IPs.
Here\'s a list of the main IPs with the count of attempts in the last few days:...
46.105.124.26 - TCP SYN-FLOOD
2012 Feb 6 11:41:13 [Firewall Floriana] [kernel] SYN-FLOOD IN=WAN OUT=LAN SRC=46.105.124.26 DST=78.133.124.103 PROTO=TCP SPT=6665 DPT=6665
2012 Feb 6 11:41:13 [Firewall Floriana] [kernel] SYN-FLO...
10.80.18.75 - Getting hammered
Constanlty getting hammered 24/7 by this IP on different ports. Maybe part of a botnet? UDP ...
8.33.7.45 - sniffer
This finok is pocking around TCP:S port 65533
Leave people alone, you\'ll live longer. ...
124.239.195.131 - Hacker
Cut China off the internet!
ET DROP Dshield Block Listed Source
GPL SQL Slammer Worm propagation attempt
...
60.190.222.143 - Hacker
Cut china off the internet!
Fire wall allert, Blocked TCP
ET CIARMY Collective Intelligence Security Poor Reputation IP (TCP) ...
199.254.56.254 - Hacker
Known delinquent
Blocking TCP connection
ET CIARMY Collective Intelligence Security Poor Reputation IP (UDP)
...
46.105.124.26 - HackAttack: [TCP SYN Flooding]
Feb 7 13:51:11 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 46.105.124.26:6662 to 80.220.22.74:6662
Feb 7 13:51:11 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 46.105.124.26:6666 ...
94.75.215.26 - tcp nullport
Report firewall. IDS proto parser : tcp null port (1 of 1) : 94.75.215.26 81.228.154.22 0040 TCP 0->59047 [..AR..] seq 0 ack 1218583930 win 0...
46.105.124.26 - firewall attack
why firewall attack.why firewall attack.why firewall attack.why firwhy firewall attack.ewall attack.why firewall attack.why firewall attwhy firewall attack.ackwhy firewall attack..why firewall attack....
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 08:48:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
Feb 7 08:57:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 07:56:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
Feb 7 07:56:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 03:14:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
Feb 7 03:14:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
70.83.33.13 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 02:55:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 70.83.33.13 to 80.220.22.74
Feb 7 02:55:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
99.250.64.62 - HackAttack: [SPI:Illegal connection state attack]
Feb 7 02:53:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 99.250.64.62 to 80.220.22.74
Feb 7 02:54:29 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
98.221.73.207 - HackAttack: [SPI:Illegal connection state attack]
Feb 6 16:29:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.221.73.207 to 80.220.22.74
Feb 6 16:29:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
61.235.46.146 - Network Attack
Kaspersky reports Intrusion.Win.MSSQL.worm.Helkern. That\'s one of attack today. Next one was from 124.239.195.131. What\'s goin\' on? What\'s profit from this attack? Who else had this attack?...
8.33.7.45 - Same Clown Different IP Address
Had problems with this Fool before, He\'s back and up to his old tricks. The change of IP address is not the least bit convincing. His local has not changed any more than his foolhardiness. Keeping...
Kaspersky has denied an network intrusion attack from this IP address. Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434
IP Address: 124.239.195.131
IP Address Country: ...
124.239.195.131 - Repeated Network Attack On My PC Over Several Days
IP Address: 124.239.195.131
IP Address Country: China (CN)
IP Address Region: 22 Beijing
IP Address City: Beijing
IP Postal Code
IP Address Area Code 0
IP Metro Code 0
IP Address Latitude: 3...
98.221.73.207 - HackAttack: [SPI:Illegal connection state attack]
Feb 6 13:13:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 98.221.73.207 to 80.220.22.74
Feb 6 13:13:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
175.45.25.51 - Hacking
This IP has been trying to infiltrate my computer for the past 2 weeks! this is getting to be very annoying, the IP 175.45.25.51 please deal with it soon....
218.75.49.242 - Attempt of intrusion
UDP from 218.75.49.242 to local port 1434 Intrusion.Win.MSSQL.worm.Helkern tried to attack my computer 05/02/2012 at 19:19:22 but was stopped by KASPERSKY
The IP-address seems to be from China...
218.75.49.242 - Worm
A dedection by my Computer, comes from China ?:
UDP from 218.75.49.242 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern 05/02/2012 19:11:55
[Querying whois.apnic.net]
[whois.apnic.net]
% ...
58.218.199.147 - Dangerous scan
Hard scan ,i dont like this,fuck,fuck,fuck,fuck china people.They eat shit.Yelow monkey,eat shit. and lck mi balls.Eat shit,shit shit,shit,fuck,fuck,fuck, each other,yelow monkey.Motherfucker,eat shit...
91.205.41.180 - HackAttack: [SPI:Illegal connection state attack]
Feb 5 04:17:29 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 91.205.41.180:80 to 80.220.22.74:11561
Feb 5 04:18:08 HackAttack: [SPI:Illegal connection state attack] TCP p...
50.115.119.10 - HackAttack: [SPI:Illegal connection state attack]
Feb 5 03:06:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.115.119.10 to 80.220.22.74
Feb 5 03:45:30 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.67.159.206 - risky connection
Caught numerous times by McAfee. Arin shows this IP address as originating in New York, yet this site shows the address in Anaheim, Ca??? Makes me very suspicious....
193.107.16.156 - 193.107.16.156 Attacking
This IP has been trying to access to my laptop for days.
Started with \"DNS cache poisoning attack\" 10-20 at a time.
Then Malwarebytes started to block this IP address.
Says \"Potentia...
176.65.154.43 - Trojan
2 different trojans try to connect to this IP on several different ports, trojan appears for example as 2 different processes called 0000.exe and 30D.exe under Windows 7, seams to spread fast....
174.138.172.138 - HackAttack: [SPI:Illegal connection state attack]
Feb 2 20:18:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.138.172.138 to 80.220.22.74
Feb 2 22:36:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
68.67.159.206 - Outgoing connection blocked by Mcafee
Outgoing connection blocked by Mcafee. This has been happening a few time from my PC. Is there a way to figure out if this is malware, trojan or the likes?...
89.28.85.29 - Malwarebytes Anti-malware
Malwarebytes Anti-malware
17:07:40 computer IP-BLOCK 89.28.85.29 (Type: incoming)
17:07:43 computer IP-BLOCK 89.28.85.29 (Type: incoming)
17:07:49 computer IP-BLOCK 89.28.85.29 (Type: incoming)
17:07...
109.73.78.210 - HackAttack: [SPI:Illegal connection state attack]
Jan 13 01:34:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 109.73.78.210 to 80.220.22.74
Jan 31 16:58:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
94.156.248.190 - HackAttack: [SPI:Illegal connection state attack]
Jan 20 02:32:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.156.248.190 to 80.220.22.74
Jan 20 11:28:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
121.29.187.225 - Yuan Lee Sculpture Plant
Yuan Lee Sculpture Plant produces a variety of professional Roman Statue Greek Statue marble carvings. Including Western figures, animals, fountains, fireplaces, columns, flower pots Garden ornaments...
109.163.230.114 - MalwareBytes Anti-Malware
MalwareBytes Anti-Malware IP-BLOCK 109.163.230.114 (Type: outgoing)
IP-BLOCK 109.163.230.114 (Type: outgoing)
IP-BLOCK 109.163.230.114 (Type: outgoing)
IP-BLOCK 109.163.230.114 (Type: outgoing)
IP...
62.213.100.140 - MalwareBytes Anti-Malware
MalwareBytes Anti-Malware IP-BLOCK 62.213.100.140 (Type: outgoing)
IP-BLOCK 62.213.100.140 (Type: outgoing)
IP-BLOCK 62.213.100.140 (Type: outgoing)
IP-BLOCK 62.213.100.140 (Type: outgoing)
IP-BLO...
212.117.177.190 - MalwareBytes
MalwareBytes Anti-Malware souspicios IP-BLOCK 212.117.177.190 (Type: outgoing)
IP-BLOCK 212.117.177.190 (Type: outgoing)
IP-BLOCK 212.117.177.190 (Type: outgoing)
IP-BLOCK 212.117.177.190 (Type: o...
61.235.46.146 - Kaspersky reports Intrusion
Detected: Intrusion.Win.MSSQL.worm.Helkern reported attak by kapersky firewall
ilyfy uf ufy uyf u ufuot f uofyo uf uof ou ou fouyf fof f uyyu fou foufy yu fyo u oufy uo fyfo o u fou...
124.239.195.131 - MS SQL Server 2000 Resolution Service Attack
MS SQL Server 2000 Resolution Service Attack
124.239.195.131
happened today Jan 31, at 5:29:47 PM
Application: /match_kernel
I\'m currently located in virginia if that makes a difference.
blocked by m...
173.245.60.117 - Constant hijacking
My antivirus has been blocking this ip address constantly.
It is unknown what it is attempting to do, but it has not stopped trying for over 12 hours now.
I cannot seem to stop the attacks......
80.93.62.130 - malware
malware, trying to send to a specific port. Looked at different wallpapers, during this I firewall alert came up stating that 80.93.62.130 was trying to connect. spam spam spam....
124.239.195.131 - Attack
Fuck chineses. Shit people, shit culture, shit products...you are all shit! Why you do not attack your own idiot brothers... Why you have to invade our computers, countries, etc...Blood hell!...
188.72.201.33 - 188.72.201.33.80
My friend\'s Nod 32 Firewall blocked this IP: 188.72.201.33.80 with the following address: blood4.cu.cc/in.cgi?2
Was visiting botanoo.com website.
After that, the site come partly, and permanently una...
58.218.199.147 - attack on port
firewall keeps saying attack on port from ip 58.218.199.147 many times ten or more in 5 minutes , every time i turn on pc it says attack nutralized from this ip address...
89.28.94.71 - Incoming UDP firewall alert
we are receiving a continue firewall and malware UDP alert blocked by our malware blockers. This is going on since many weeks and months...
208.115.218.154 - HackAttack: [SPI:Illegal connection state attack]
Jan 29 18:51:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 208.115.218.154 to 80.220.22.74
Jan 29 20:42:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
200.162.212.245 - HackAttack: [SPI:Illegal connection state attack]
Jan 29 15:21:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 200.162.212.245 to 80.220.22.74
Jan 29 15:21:17 HackAttack: [SPI:Illegal connection state attack] ICMP packer...
204.12.247.53 - Intrusion attempts by 204.12.247.53
Multiple intrusion attempts from this IP address, blocked by Norton. This is Malicious Toolkit Software. Owner is Alistair Meney of Kansas City. Get a Life, you Subhuman!...
68.173.138.115 - HackAttack: [SPI:Illegal connection state attack]
Jan 29 00:31:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.173.138.115 to 80.220.22.74
Jan 29 00:31:20 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
75.131.113.145 - HackAttack: [SPI:Illegal connection state attack]
Jan 28 22:53:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.131.113.145 to 80.220.22.74
Jan 28 22:53:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
124.239.195.131 - attack UDP
This attack is a Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434, at 29/01/2012, 08:19 AM.
Kaspersky stop this attack. This is the first attack (when i use for the first m...
86.107.193.212 - ICMO Flood Atack
Nimic de spus, is obisnuit cu floodoorile de pe servere ca asta. Dar nu ar trebui sa fie asa. Ce bine ca am un antivitus bun....
41.200.142.109 - HackAttack: [SPI:Illegal connection state attack]
Jan 26 21:47:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.200.142.109 to 80.220.22.74
Jan 26 21:47:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
206.161.121.4 - Malwarebytes alert
Malwarebytes continues popping up this notification. FYI I just cleaned my pc of a really annoying trojan that hid all my files/folders and faked hard drive corruption. This is the MWB notification:
...
193.107.17.86 - McAfee Risky Connection attempt
Received alerts that this IP and another within the adjacent subnet tried to connect via Chrome and SYSTEM. IP lookup seemed to imply links to Russian hosts....
221.192.199.46 - China port probing
I have to reformat all the time...my computer gets taken over by someone in China. I\'m not computer smart but , if I type anything even close to the word China..my firewall gets probed...
58.218.199.147 - 58.218.199.147
I have noticed a few times today this IP trying to connect to my computer. what should I do? can I stop him some how? ...
124.239.195.131 - Network attack
2nd Time this IP adress attacked me, firewall reports possible ip-spoofing.
Rapport: intrusion.win.mssql.worm.helkern
Would be nice to see him taken out of action before he harms anyones belongings....
68.67.159.206 - Attempted risky connection
IP Address: 68.67.159.206
IP Address Country: United States (US)
IP Address Region: CA California
IP Address City: Anaheim
IP Postal Code
IP Address Area Code 714
IP Metro Code 803
IP Addres...
61.235.46.146 - VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium
lert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 61.235.46.146, 4433, lert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity,...
82.116.76.146 - 82.116.76.146
Please log this as a complaint against the owner of the ip. Multiple user name login attempts were loggedfrom this ip address especially RDP ...
188.122.95.81 - HackAttack: [SPI:Illegal connection state attack]
Jan 22 15:14:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 188.122.95.81 to 80.220.22.74
Jan 24 23:52:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
61.235.46.146 - Kaspersky detected network attack
I keep getting Network attack reports from KAV av from this ip http://61.235.46.146/
Please let me know what is going on and shut it down somehow...
129.82.138.38 - ICMP Packet Blocked by firewall
I have for a long time, recieved ICMP Packet\'s on Port:42193
It could be nice if it could be stopped.
I have no interrest of getting on known trafik at my Network.
An spammer should not be allowd on ...
204.12.247.53 - Intrusion Prevention
[SID: 24089] Web Attack: Malicious Toolkit Website 9 detected.
Traffic has been blocked from this application: C:\\Program Files\\Internet Explorer\\iexplore.exe
Symantec detected attempted intrusion...
124.239.195.131 - 124.239.195.131 tried to intrude into my computer
The ip address124.239.195.131 tried to intrude into my computer, but was blocked by my antivirus software. please block their network.
Details Are : Denied: Intrusion.Win.MSSQL.worm.Helkern UDP from ...
68.168.119.10 - HackAttack: [SPI:Illegal connection state attack]
Jan 13 11:19:58 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.168.119.10 to 80.220.22.74
Jan 17 06:30:46 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
178.74.94.245 - Blocked incoming TCP connection request from 178.74.94.245
[INFO] Sun Jan 22 12:05:06 2012 Blocked incoming TCP connection request from 178.74.94.245:4916 to 109.173.114.61:37178
[INFO] Sun Jan 22 11:50:20 2012 Blocked incoming TCP connection request from 178...
94.142.134.238 - Failed Login Attempts
I have Blocked this IP Address because of the following: This IP Address made 16 Failed Login Attempts to my website\'s Admin section. obvious attempt to hack a website....
94.100.30.164 - outgoing
Malware bytes blocks this as outgoing. What I want to know is what and where the item that is in my computer that is sending this out. Any ideas?...
208.83.20.130 - "Persistent Attacks"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 208.83.20.130
IP destination address : 76.227.65.191
Number of attempts ...
58.218.199.147 - 58.218.199.147
58.218.199.147 has been poping up every day on my firewall. Fuck off you sick fucks. Really go screw yourself. Im tired of dealing with you people....
204.12.247.53 - Cadegory 9 Web Hazard
Was playing a kids game. Norton360 gave me an alert. It said high alert and very dangerous. I asked an ask website and it said it was the NSA, but I\'m not buying that :/...
64.40.8.200 - Firewall Alert server me
2012-01-20 05:10:20 DROP UDP 64.40.8.200 109.230.244.125 20000 61022 128 - - - - - - - RECEIVE
2012-01-20 05:10:20 DROP UDP 64.40.8.200 109.230.244.125 20000 61024 128 - - - - - - - RECEIVE
2012-01-20...
95.168.173.155 - Malware antivirus blocked it
Malware anti virus said it blocked it and it wa soutgoing, what ever this mean?
I keeptyping as I need 25 words but I don\'t have anything else to say ...
210.118.80.41 - intrusion
UDP from 218.75.49.242 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern 20/01/2012 05:36:57
UDP from 218.75.49.242 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern 17/01/2012 1...
204.12.247.53 - intrusion from this ip address 204.12.247.53
i am receiving multiple intrusion attack from this address and ok5015 .com reported by norton i think there trying to hack in to my comp but the can haha liv my shit alone bitches ...
58.218.199.147 - Network attack.
I believe this is the second time this person has tried to Network attack me. I don\'t have any private documents or anything of the source but my privacy is being invaded....
125.45.109.166 - access
Well it looks like they are back at it. I get several alerts a day they are trying to access my computer. Norton did not stop but the paid version of Malwarebytes did. Why the 25 word thing ?...
222.189.238.121 - access
This is another ip address my firewall blocked. There are several from Beijing. What is up with this? i don\'t need 25 words people ok!...
208.83.20.130 - access
this ip is trying to get into my computer everyday! Who are they and can they be shut down?This is to get 25 words jeez....
69.16.190.26 - HackAttack: [SPI:Illegal connection state attack]
Jan 18 03:33:53 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.16.190.26 to 80.220.22.74
Jan 18 21:58:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
46.105.124.26 - HackAttack: [TCP SYN Flooding]
Jan 18 17:21:04 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 46.105.124.26:6666 to 80.220.22.74:6666
Jan 18 17:21:04 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 46.105.124.26:6665 ...
61.235.46.146 - Network Attack
18/01/2012 14:43:06. Detected:Intrusion.Win.MSSQL.worm.Helkern UDP from 61.235.46.146 to local port 1434. Attack blocked by Kaspersky. To me it is terrible. What to me to do? Help me!
...
140.192.249.203 - something new?
From my router log: Found attack from from this address. 140.192.249.203 Use the ICMP protocol. Have a couple more from different universities popping up all of the sudden....
141.212.113.178 - something new?
From my router log: Found attack from from this address. 141.212.113.178 Use the ICMP protocol. Have a couple more from different universities popping up all of the sudden....
192.42.83.250 - something new??
From my router log: Found attack from from this address. 192.42.83.250. Use the ICMP protocol. Have a couple more from different universities popping up all of the sudden....
192.42.83.251 - Something new??
Found attack from from this address. 192.42.83.251 Use the ICMP protocol. Have a couple more from different universities popping up all of the sudden....
208.83.20.130 - Repetitive blocked trials to acces my computer
This IP has been trying to get into my computer with astounding frequency during this weed. This is today\'s Malwarebytes log:
2012/01/17 10:06:47 +0100 IP-BLOCK 208.83.20.130 (Type: incoming)
2012/0...
83.133.124.245 - Malware Bytes blocking 83.133.124.245
My commuter is trying to communicate to 83.133.124.245 when browser is open.
This attempt is blocked by Malware Bytes. I suspect that this is a Trojan....
86.107.193.212 - Citeste!
Ai grija cu ii dai flood, bucuresteanule, internetul e mare, gaseste pe altcineva, stai cumva pe strada doamnei pe la jupiter groups ori ceva de genu! iti trimit o surpriza, te gasesc stai linistit!...
175.45.25.83 - Alert
my Firewall alerted of the following -:
Somebody is scanning your computer.
Your computer\'s TCP ports
have been scanned from 175.45.25.83.
I am geting this attack on my virus software
Please block...
212.113.36.83 - cant open my yahoo and many sites
Cannot access microsoft.com , linkedin, yahoo, way2sms . Keeps opening a page full of ads. Malwarebytes keeps showing this ip: 212.113.36.83 when i try to connect. ...
83.133.122.116 - Malware bytes blocks this - I did not set to go here
Malware bytes blocks this as it attempts an outgoing access to ip address.
How do I get rid of this and clear my PC? ...
95.169.186.93 - malware - trying to access website but is blocked
Malware bytes blocks this - cannot get off my machine. How do I get this
to stop? My machine should not be trying to access a Russian website.
...
218.75.49.242 - Intrusion Prevention
Alert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 218.75.49.242, 40076, X1 ***.***.*.*, 1434, X* Alert Intrusion Prevention IPS Prevention Alert...
31.128.209.139 - Blocked incoming TCP connection request from 31.128.209.139
[INFO] Mon Jan 16 00:29:16 2012 Blocked incoming TCP connection request from 31.128.209.139:4062 to 109.173.114.61:32461
[INFO] Mon Jan 16 00:29:10 2012 Blocked incoming TCP connection request from 31...
208.83.20.130 - "Persistent Alerts"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 208.83.20.130
IP destination address : 76.227.65.191
Number of attempts ...
117.228.56.204 - detecting port scanning attack
could u take care of my pc by hiding my ip as some one trying to intrude into my pc plx kindly do me a favour...
208.83.20.130 - Repeated malicious incoming attempts
208.83.20.130 numerous attempts of a malicious nature logged as attempted intrusions to access my computer. Will someone ably do something about this conduct?...
208.83.20.130 - "Constant Aggresion"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 208.83.20.130
IP destination address : 76.227.65.191
Number of attempts ...
208.83.20.130 - 208.83.20.130
208.83.20.130 has been trying to access my computer multiple times. Does anyone know who they are they and why are they trying to get in my computer?? ...
208.83.20.130 - "Unkown Attack"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 208.83.20.130
IP destination address : 76.227.65.191
Number of attempts ...
111.22.170.178 - Intrusion Prevention
01/14/2012 06:00:21.272 Alert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 111.22.170.178, 4395, X1 ***.***.*.*, 1434, X3 01/14/2012 06:00:21.272...
95.169.186.166 - Chrome.exe
Malwarebytes protection is showing chrome.exe (Google Chrome web browser) repeatedly trying to connect to this website through progressive port numbers, in order. Calls are being blocked by Malwareby...
219.94.195.21 - Accessed email account
This site accessed my gmail acct. at 12:16 am CST on 01/13/2012. Alerted by host. Purpose unknown. No previous attempts from this server. Changed password....
82.73.85.241 - HackAttack: [SPI:Illegal connection state attack]
Jan 12 23:15:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 82.73.85.241 to 80.220.22.74
Jan 12 23:15:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
58.218.199.227 - Attempted hacking.
Attempted connections on multiple service ports. Mostly probing, but obviously trying to find vulnerable services.
IRDMI (tcp/8000)
RADAN-HTTP (tcp/8088)
HTTP-ALT (tcp/8080)
(tcp/6588)
(tcp/8090)
(tc...
193.106.172.172 - 193.106.172.172
Malwarebytes is currently blocking this site. It belongs to warez-bb.org and probably they have received a copyright complaint. I would suggest adding it to your ignore list. I would rather control my...
195.216.243.184 - malware bytes log alert
Same problem as above person:
this site keeps showing up in my malware bytes log. The whole day my pc has been trying to send info to this ip. I suspect keyloggers
IP-BLOCK 195.216.243.151 (Type: ou...
62.45.191.252 - Alert from Malwarebytes for IP 62.45.191.252
Alert from Malwarebytes on jan 12th for IP 62.45.191.252 Skype.exe on port 2968, outgoing connection. Also reported other application outgoing activity on different ports. ...
195.216.243.42 - keyloggers ?
Alert from Malware bytes for jan 11th kept happening throughout the day, could this be an attempt at keylogging ?
IP-BLOCK 195.216.243.42 (Type: outgoing, Port: 50199, Process: firefox.exe)...
193.109.247.46 - keyloggers ?
log from Malware bites, received 6 times in the last 2 hours. Could this be an attempt at keylogging ?
IP-BLOCK 193.109.247.46 (Type: outgoing, Port: 59321, Process: firefox.exe)
...
61.235.46.146 - hacking attent
Intrusion from IP 61.235.46.146(3875) at 12-01-2012 at 11.31 london time.
Norton internet security blocked the attent on MS SQL Stack BO at door ms-sql-m(1434)...
[INFO] Wed Jan 11 02:20:48 2012 Blocked incoming TCP connection request from 95.111.158.52:58648 to 109.173.114.61:32461
[INFO] Wed Jan 11 02:20:43 2012 Blocked incoming UDP packet from 95.111.158.52:...
195.216.243.44 - keyloggers ?
this site keeps showing up in my malware bytes log. The whole day my pc has been trying to send info to this ip. I suspect keyloggers
IP-BLOCK 195.216.243.44 (Type: outgoing, Port: 50741, Process: fi...
195.216.243.151 - keyloggers ?
this site keeps showing up in my malware bytes log. The whole day my pc has been trying to send info to this ip. I suspect keyloggers
IP-BLOCK 195.216.243.151 (Type: outgoing, Port: 51142, Process: f...
this site keeps showing up in my malware bytes log. The whole day my pc has been trying to send info to this ip. I suspect keyloggers
IP-BLOCK 195.216.243.151 (Type: outgoing, Port: 51142, Process: f...
75.138.117.138 - Detected unexpected data in protocol
my Smart security 5 eset Detected unexpected data in protocol sevral times from that ip whats that is it dangerous pls can u help what sould i do
...
68.168.119.10 - HackAttack: [SPI:Illegal connection state attack]
Jan 3 09:08:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.168.119.10 to 80.220.22.74
Jan 4 14:55:34 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
174.127.92.233 - HackAttack: [SPI:Illegal connection state attack]
Jan 9 02:52:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 174.127.92.233 to 80.220.22.74
Jan 9 12:01:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
108.60.144.58 - Gmail accessed by Talktone
Google Gmail warned me that my account had been compromised by this ip address by 108.60.144.62, 108.60.144.58, 108.60.144.59. I found that on another site that the IP/S were linked to Talktone serv...
199.254.56.254 - Blocked incoming TCP packet
[INFO] Mon Jan 09 09:45:01 2012 Blocked incoming TCP packet from 199.254.56.254:53 to 109.173.114.61:51923 as SYN:ACK received but there is no active connection
[INFO] Mon Jan 09 09:09:41 2012 Blocked...
69.4.230.26 - Attack on my Youtube account
I was on my Youtube account and then for a brief second Nortan said.
Attack by iklunix.net (69.4.230.26.80)
This person has done it most then just once.
I even think that this guy has been hacking ...
71.249.189.128 - The following critical firewall event was detected
Message meets Alert condition
The following critical firewall event was detected: Critical Event.
2012-01-08 17:23:44 device_id=FGT60B3908668135 log_id=0104032002 type=event subtype=admin pri=alert vd...
74.117.56.131 - Tried to gain acces to our router/network harddisk
Someone behind this IP-address tried to gain access (without our permissions) to our router and network allocated storagedevice.
After 3 attempts the IP was blocked. ...
41.105.115.114 - HackAttack: [SPI:Illegal connection state attack]
Jan 6 22:14:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.105.115.114 to 80.220.22.74
Jan 6 22:14:44 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
69.4.230.26 - Attacked me!
This IP address attempted to hack my computer, but it was blocked by my anti-virus software. They may have also planted numerous Trojans (at least 3)...
Malware bytes siftware is blocking outgoing message... i dont know them.. i did not send anything..
it happens when computer comes out of sleep mode or after start up...
193.106.172.172 - Added itself to my Malware Bytes ignore list
No idea what for or what it does, It added itself to my Malware Bytes ignore list within the last 12 hours - while I was sleeping....
206.161.121.5 - ip address
We had a virus on our pc and were working on cleaning it up. We installed malwarebytes and it kept popping up a message saying our pc was trying to send information to this ip address. I did a searc...
61.235.46.146 - UDP from 61.235.46.146 to local port 1434 Denied: Intrusion.Win.MSSQL.worm.Helkern 1/5/2012 7:43:52 PM
I have received this message from Kaspersky Internet Security 2012 from the same IP address more than once (at least 3 times) in the the last 24 hours....
182.148.111.184 - Danger
It keeps attacking all the way...I\'m afraid he is hacking into my system...what can I do to protect my self from it? I wish I have such an answer otherwise I will stop chatting in QQ......
61.235.46.146 - Kaspersky reports Intrusion.Win.MSSQL.worm.Helkern
2012-01-05 04:00:46
UDP from 61.235.46.146 local port 1434
Intrusion.Win.MSSQL.worm.Helkern
Just block it alreddy.I\'m getting pist off right now. How hard can it be? Is there enything else you want...
31.128.203.86 - Persistent hacking attempts on port 32461
Persistent hacking attempts on port 32461.
Thu Jan 05 04:07:18 2012 Blocked incoming TCP connection request from 31.128.203.86:4414 to 109.173.114.61:32461
Thu Jan 05 04:07:12 2012 Blocked incoming T...
206.161.121.4 - phishing attacks
Firewall blocks but bogs down computer. Not sure what they are doing but they are causing all kinds of issues. Stop these people now. Please....
58.218.199.147 - Attack
This happens everyday and is a real pain something needs to be done about them so that this is stopped and you do not have to continue dealing with the attacks...
80.238.233.198 - HackAttack: [SPI:Illegal connection state attack]
Jan 4 10:44:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 80.238.233.198 to 80.220.22.74
Jan 4 10:44:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
124.239.195.131 - Notice from Kaspersky that worm attempted from this IP address
Attempting a work from this IP address but said it could be spoofed..same message as given below on 11/15/2011 by another reporter...Helkern UDP to local port 1434 etc...
31.128.200.138 - Frequent attacks on port 32461
Frequent attacks on port 32461. In the log router periodically writes:
Blocked incoming TCP connection request from 31.128.200.138:3427 to My router IP:32461
Blocked incoming TCP connection request fr...
77.74.36.116 - internet attack
I am receiving a continuous warning from my internet monotoring software about an attack from the address 77.74.36.116. Please stop this attack or we will take an official position....
69.4.230.26 - Web Attack
For a week now I\'ve been getting alerts that my computer is being attacked with malicious toolkit website 9 from this IP address. I\'m not sure if they\'ve succeeded in hacking my computer or not, bu...
220.181.125.44 - Blacklist IP Address
We are getting hit hard by an IP address out of China 220.181.125.44
They are constantly trying to hack into our server and are attempting to enter on every path possible.
Can you please blacklist t...
69.168.140.218 - HackAttack: [SPI:Illegal connection state attack]
Jan 2 22:34:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.168.140.218 to 80.220.22.74
Jan 2 22:34:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
50.23.212.96 - HackAttack: [SPI:Illegal connection state attack]
Jan 1 04:22:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 50.23.212.96 to 80.220.22.74
Jan 1 16:31:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
26.134.134.21 - attack of some sort
A program is trying to exploit Windows security holes!
Passwords and sensitive data may be stolen!
Attack from: 26.134.134.21 port 26392
Attacked port: 7783
Threat: Email-Worm.VBS.Peach
...
69.4.230.26 - Access Processing data (Denied)
Recent attempts have been happening a lot recently. Didn\'t download anything and other attacks say it\'s been from this address. This leads me to believe they have tried to hack my computer but faile...
192.168.1.100 - Attempted to connect to my computer somehow
See firewall alert:
Category: Firewall - Network and Connections
Date & Time,Risk,Activity,Status,Recommended Action,Category
12/31/2011 11:26 AM,Info,\"Protecting your ...
69.4.230.26 - Attacks
I keep getting notices from my Norton Internet Security about this IP attacking my PC repeatedly. It states Web Attack: Malicious Toolkit Website 9, and attacking computer as crystmassoft3.net (69.4.2...
124.239.195.131 - Alert
12/31/2011 14:08:44.512 Alert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 124.239.195.131, 3177, X1 **.***.*.* 1434, X312/31/2011 14:08:44.512 Al...
69.4.230.26 - Norton: Web Attack
I keep getting notices from my Norton Internet Security about this IP attacking my PC repeatedly. It states Web Attack: Malicious Toolkit Website 9, and attacking computer as crystmassoft3.net (69.4.2...
68.168.119.10 - HackAttack: [SPI:Illegal connection state attack]
Dec 27 18:05:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.168.119.10 to 80.220.22.74
Dec 30 17:58:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
66.35.46.195 - unauthorized connects
.195 through .199, multiple port connects reported active this AM, including an FTP port. Am I correct in that the ISP FORTRUST hosts this site?...
91.202.61.170 - "Back Again"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 15
Time at last attempt : 12/30/11 ...
58.218.199.227 - Continuous alerts
Alert Report from router:
kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=58.218.199.227 DST=123.243.136.217 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 DF PROTO=TCP SPT=12200 DPT=9090 WINDOW=8192...
221.194.46.176 - Alert
Report from router:
kernel: Intrusion -> IN=ppp_0_8_35_1 OUT= MAC= SRC=221.194.46.176 DST=123.243.136.217 LEN=40 TOS=0x00 PREC=0x00 TTL=108 ID=256 DF PROTO=TCP SPT=12200 DPT=6588 WINDOW=8192 RES=...
94.45.91.179 - Frequent attacks from the address 94.45.91.179 on port 32461
Frequent attacks from the address 94.45.91.179 on port 32461. Attack the port with an interval of 30-40 seconds.
Firewall: Blocked incoming TCP connection request from 94.45.91.179:1110 to My router I...
69.31.121.130 - HackAttack: [SPI:Illegal connection state attack]
Dec 28 14:18:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.31.121.130 to 80.220.22.74
Dec 29 05:28:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
86.122.87.165 - Unauthorized Remote Administration
I wish to report an internet address that is constantly accessing my router since the beginning of December. The internet address is 86.122.87.165 that is linked to michael.starhost.ro. They are...
95.133.83.197 - Attempted hack of network
Ukraine IP has been attacking our network. the IP has attempted to penetrate our server numerous times in one day using name \"veritas\". the attacks are being blocked by the firewall. ...
76.125.124.158 - http://www.backupduty.com/register
Spamming my computer. Every time I open my computer it appears on the lower right nad corner. I have no use for it at all...
221.194.46.176 - Firewall Alarm
\"** Unauthorized HTTP Access ** <IP/TCP> 221.194.46.176:12200 ->> My_IP:8000\"
I found this message very often recently in the log file of my Router. I do not know the meaning ...
61.235.46.146 - I'm see reports on my firewall that 61.235.46.146 is attacking with DoS MS-SQL Slammer Worm.
I\'m see reports on my firewall that 61.235.46.146 is attacking with DoS MS-SQL Slammer Worm. I\'m see reports on my firewall that 61.235.46.146 is attacking with DoS MS-SQL Slammer Worm....
61.235.46.146 - Intrusion.Win.MSSQL.worm.Helkern
26.12.2011 17:23:35 AM Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 61.235.46.146 to local port 1434 Absent Attack blocked by Kaspersky Attack blocked by Kaspersky Attack blocked by Kaspersky ...
24.125.160.148 - HackAttack: [SPI:Illegal connection state attack]
Dec 25 15:52:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.125.160.148 to 80.220.22.74
Dec 25 15:52:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
75.82.165.133 - HackAttack: [SPI:Illegal connection state attack]
Dec 25 13:32:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.82.165.133 to 80.220.22.74
Dec 25 13:32:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
92.126.66.65 - Attack on the port
Attack on the port:
[INFO] Mon Dec 26 02:56:28 2011 Blocked incoming TCP connection request from 92.126.66.65:50208 to My router IP:32461
[INFO] Mon Dec 26 02:56:22 2011 Blocked incoming UDP packet fr...
61.235.46.146 - Not Authorized Intrussion
A user from using this IP was trying to hack into our Network. This has been registred by our system as a consistent and constant attack. ...
75.82.165.133 - HackAttack: [SPI:Illegal connection state attack]
Dec 25 10:31:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.82.165.133 to 80.220.22.74
Dec 25 10:31:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
75.82.165.133 - HackAttack: [SPI:Illegal connection state attack]
Dec 25 05:52:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 75.82.165.133 to 80.220.22.74
Dec 25 05:52:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.168.119.10 - HackAttack: [SPI:Illegal connection state attack]
Dec 23 17:59:18 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.168.119.10 to 80.220.22.74
Dec 24 22:57:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
209.18.47.61 - tried to connect
just adding to the report on this ip. my zone alarm keeps hitting on it once in a while jn;awioghgh3oighhjpjfpijgjgjdjg[jagj9ugoptjgpug9rugjrpo...
69.209.73.13 - attacks
100 attacks tried but blocked with wp firewall. This is not the only time someone has tried to attack my site and was blocked. Almost every day this happens. Not from the same ip though....
46.249.57.79 - HackAttack: [SPI:Illegal connection state attack]
Dec 22 08:39:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 46.249.57.79 to 80.220.22.74
Dec 22 14:25:28 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
109.235.55.11 - Torrent Tracker IP and port
This is a pirate bay \\ torrentbay tracker ip and port
http://reverseinternet.com/backlinks/domainlinks/torrentbay.to
Your BT client is probably what is connected to it.
I saw it blocked on PeerBlo...
64.94.88.20 - ping every day to my router
ping every day to one of my router.
ping every day to one of my router.
ping every day to one of my router.
ping every day to one of my router....
58.218.199.227 - 58.218.199.277
For two days this IP has been trying to crack into my system. Home PC ... My Norton Firewall is blocking it and reporting on it....
201.66.149.238 - HackAttack: [SPI:Illegal connection state attack]
Dec 19 20:39:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 201.66.149.238 to 80.220.22.74
Dec 19 20:39:38 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
Computer was infected with malware (Windows XP Pro Antivirus 2012). After running malwarebytes to clean the computer. I was unable to run anything on my computer and Symantec kept blocking communica...
209.66.64.46 - HackAttack: [SPI:Illegal connection state attack]
Dec 18 21:32:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 209.66.64.46 to 80.220.22.74
Dec 18 22:56:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
174.36.105.208 - Facebook LikeJacking Attack 9
[SID: 24476] Web Attack: Facebook LikeJacking Attack 9 attack blocked. Traffic has been blocked for this application
The client will block traffic from IP address 174.36.105.208...
69.91.1.195 - HackAttack: [SPI:Illegal connection state attack]
Dec 18 06:21:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 69.91.1.195 to 80.220.22.74
Dec 18 06:21:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer fro...
58.218.199.227 - tried to hack my mac
This joker tried to hack into my mac using web sharing and port scanning.
Norton stopped it for now!
Can\'t anything be done about these ip ranges - like blocking them!...
91.190.87.74 - tried to hack my mac
This account tried to initiate web sharing several times on my Mac.
Tried through web sharing and secure web sharing.
Norton flashed a warning and blocked it (I hope)!...
74.53.2.87 - 74.53.2.87
Constantly being attacked by this IP address. Almost every five minutes. See report below.
74.53.2.87 Host blocked for 5 min SCAN (45254, 47046, 48070, 51398, 52166, 53702, 55238)
...
46.19.141.247 - Telenet
Hitting TELENET port repeatedly when there is no valid reason to try and connect to that on my network. The contact information is :
person: CRISTINA CASTRO
addre...
58.218.199.227 - log to webserver
several attempts to login on webserver over the last days until firwall disconnect the internet connection. Probabyl port scanning, but no proof for it. ...
93.109.180.119 - Port Scanning for the past 2 days
Wed Dec 14 16:53:35 2011
=>Found attack from 93.109.180.218.
Source port is 53621 and destination port is 63903 which use the TCP protocol.
Wed Dec 14 16:54:05 2011
=>Found attack from 93.10...
202.21.176.41 - HackAttack: [SPI:Illegal connection state attack]
Dec 16 01:26:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 202.21.176.41 to 80.220.22.74
Dec 16 01:26:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
221.194.46.176 - Kernel intrusion
Noticed many intrusions recently after turning on the routers syslog, however I understand that the router is doing it\'s job well, since every attempt has failed, who ever this is in China they can k...
202.21.176.41 - HackAttack: [SPI:Illegal connection state attack]
Dec 14 18:05:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 202.21.176.41 to 80.220.22.74
Dec 15 19:27:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
61.138.254.63 - More as 10 times per day TCP scans at port 80 5000
More as 10 times per day TCP scans at port 80 5000 How can I protect my self. On trying to accesing adress server responded radware...
202.102.153.70 - More as 10 times TCP scans at port 80 5000
More as 10 times per day TCP scans at port 80 5000 How can I protect my self. On trying to accesing adresses its an server login screen radware....
209.66.64.46 - HackAttack: [SPI:Illegal connection state attack]
Dec 15 12:58:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 209.66.64.46 to 80.220.22.74
Dec 15 15:10:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
94.100.30.165 - possable redirect blocked my malewarebites
this ip has attempted to redirect to its pages, this may be a us government tracker as ive been montered by the FBI for the last 2 months...
58.218.199.227 - attack
attempted to attack my computer, asest security did block it, but it comes up couple of times a day, what is this i don\'t know...
Getting a lot of network attacks from this IP.
Making my network run VERY slow and almost shutting me down at times. This is very annoying, how do I make them stop?...
114.182.76.238 - HackAttack: [SPI:Illegal connection state attack]
Dec 14 01:11:50 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.182.76.238 to 80.220.22.74
Dec 14 01:11:54 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
64.92.209.226 - Attempted Admin sign on
this ip 64.92.209.226 tried to access my Joomla Admin sign on for www.sportsstarphotos.com. there were 3 attacks from3 different IP addresses and I have blocked all 3 in the cpanel security ip blocke...
50.2.43.37 - Port scan attack me
My antivirys program personal wirewall is alert me that 50.2.43.37 is port scan attack me. someone is trying to hack me?
what shoud i do? im i protecded? ...
92.241.164.211 - Intrusion Attempt
Norton Blocked Intrusion Attempt X 2 on my computer from this IP Address also traces to Russia. This is the second month in a row this IP has attempted to get into my computer files...
124.239.195.131 - Intrusion.Win.MSSQL.worm.Helkern
Intrusion MSSQL worm Helkern Intrusion MSSQL worm Helkern Intrusion MSSQL worm Helkern Intrusion MSSQL worm Helkern Intrusion MSSQL worm Helkern Intrusion MSSQL worm Helkern worm Helkern...
61.235.46.146 - Intrusion.Win.MSSQL.worm.Helkern
Intrusion Win MSSQL worm Helkern kaspersky gave following alert in network attack category:-
\"Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 61.235.46.146 to local port 1434\"
Attack...
69.162.85.98 - uyarı
yavşaklar internetime saldırıyorlarr zarar vercekler di İNSAI RAHATSIZ ETME SANA YAKIŞMAZ it it it tu tu tu tu tu tu tu tu tu tunk yok yok yok...
124.239.195.131 - Network Attack
09-12-2011 16:42:12 Unknown Denied: Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434
IP Address: 124.239.195.131
IP Address Country: China (CN)
IP Address Region: 22 B...
64.125.26.254 - HackAttack: [SPI:Illegal connection state attack]
Dec 9 02:54:41 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 64.125.26.254 to 80.220.22.74
Dec 9 04:03:57 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
61.235.46.146 - Me
Network Attack from UDP 61.235.46.146 to local port 1434. 12/08/2011 06:15:40PM México Time. Denied: Intrusion.Win.MSSQL.worm.Helkerm. Blocked network attacks by Kaspersky. These attacks...
75.77.189.110 - Attack
Alert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 75.77.189.110, 3240, X1, 75.77.189.110.nw.nuvox.net ***.**.*.**, 1434, Alert Intrusion Preventi...
68.67.159.189 - Risky Connections
McAfee is closing this connection, i don\'t know how many time, maybe 2 o 3..i\'ve not only McAffe working but also Dr Web i hope to close this connection..i think that i will search for it personally...
221.194.46.176 - 221.194,46.176, 58.218,199,227, 58.218.199..250, 61.164.68.150
>Nortons Alerts >unused port blocking has blocked communications from (the above IP addresses all in China), local servers ports 9090, 5390, 2301, 8080, 8000, 3246, 7212 (and more)....continuou...
195.5.163.214 - RFI Attack
Hi,
This IP adress is trying to script attack our web server (195.5.163.214). This ip adress is known by many security websites as a RFI Attack server. Unfortunately, we are forced to deny access to ...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 6 23:05:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 6 23:05:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 6 18:23:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 6 20:17:36 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 6 11:51:25 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 6 11:51:33 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 5 21:38:00 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 5 23:49:22 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
221.194.46.176 - Many log entries of 221.194.46.176:12200 in my router activity log.
Getting a lot of activity from this notorious ip. Isn\'t there some way that we can just have ANY unrequested internet activity coming from China blocked by default?...
68.67.159.189 - risky IP address
I received this 3 times in two days. McAfee blocks it what is it and is it dangerious. Is someone trying to hach into my system...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 4 23:16:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 4 23:16:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 4 22:46:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 4 22:46:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
68.37.246.196 - HackAttack: [SPI:Illegal connection state attack]
Dec 4 13:17:47 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 68.37.246.196 to 80.220.22.74
Dec 4 13:48:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
91.226.212.41 - intrusive ip
My computer was attacked by an intrusive ip and my firewall sand me an alert. Thanks to report that fact and to add in your database....
124.239.195.131 - Network attack
Getting many attacks form china...this is just 1 of the ip addresses.Intrusion to local port 1434.Denied : Intrusion.win.mssql.worm.helkern .Any possible way to completely prevent this form happening?...
109.236.87.119 - Intrusion Alert
Intrusion attempt has been detected: NULL (no TCP flag set) scan
Inbound direction
Protocol: tcp
Remote Address: 109.236.87.119
Remote Port: 1935
Firewall has blocked this traffic so many times....
58.218.199.250 - Multiple scans denied
My ip log shows this ip from china trying over and over, way too many to count trying to open my router port. Why do they do this? What\'s their point?...
115.238.252.196 - "Multiple Hits"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 115.238.252.196
Number of attempts : 4
Time at last attempt : 12/2/11 ...
188.127.228.44 - Attack stopped by Norton
This site attempted to hijack my computer, Norton 360 disabled and stopped it. Beware! This is abviously some malware or malicious attack site.Thanks, that is all....
180.149.135.35 - HackAttack: [SPI:Illegal connection state attack]
Nov 28 10:54:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 180.149.135.35 to 80.220.22.74
Nov 28 11:19:39 HackAttack: [SPI:Illegal connection state attack] ICMP packer ...
94.69.17.255 - DoS:Smurf packets according to Netgear router
Router reported:
[DoS attack: Smurf] attack packets in last 20 sec from ip [94.69.17.255], Wednesday, Nov 30,2011 03:14:24
No one here using any computers at that time of night.
...
Kaspersky generates the following report, at least twice a day on every machine (35 machines).
Intrusion Win MSSQ1.worm.Helkern! IP address 219.148.1.91 UDP on local 1434 port...multiple times ever...
89.187.53.235 - Intrusion Prevention
My symantec Endpoint protection notified me of this IP Address trying to make a TCP connection to my system. Luckily Symantec stopped them from gaining access...
58.218.199.227 - It try several time to connec t to my computer
It try several time to connec t to my computer. How can i stop him to attack me? My panda soft ware tell me every time I use my computer.
It slow down my computer....
61.235.46.146 - got a message from kaspersky
got a message from kaspersky :
29-Nov-11 1:49:31 PM Unknown Denied: Intrusion.Win.MSSQL.worm.Helkern UDP from 61.235.46.146 to local port 1434
Found people with similar problems. Kindly block this i...
72.39.237.153 - HackAttack: [SPI:Illegal connection state attack]
Nov 27 23:48:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 72.39.237.153 to 80.220.22.74
Nov 27 23:48:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer f...
66.197.195.85 - Facebook
Some one tried to access my about form that ip address ?one week ago some tried to login on a kiosk from DC. Help me...
61.235.46.146 - win.mssql.worm.hellern
today 20 47 pm kaspersky found a worn helkern and blocked it from this i p address seems this is a regular accurance from this i p address
can any thing be done to stop this rat computer ?????...
196.29.120.74 - Melicious IP
Kaspersky is getting network attack alert from this ip I am gonna complaint about this.This ghana ip is hacking computers!!!!.Everybody who got this message from your firewall please complaint...
209.66.64.46 - HackAttack: [SPI:Illegal connection state attack]
Nov 26 03:11:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 209.66.64.46 to 80.220.22.74
Nov 26 03:17:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer fr...
63.209.69.107 - Danger
I was forwarded here after opening up FireFox. I think a Virus was also download in the form of a .JAR file cause Java started running and promted me to allow Explorer firewall outbound access on XP P...
208.109.94.237 - 208.109.94.237 is attempting to login via ssh to our server
Time: Sat Nov 26 00:22:54 2011 +0100
IP: 208.109.94.237 (US/United States/ip-208-109-94-237.ip.secureserver.net)
Failures: 5 (sshd)
Interval: 300 seconds
Blocked: Permanent Block
Log entri...
212.148.1.91 - Intrusion fail
This adress attack my PC at 22:48:51
That\'s the second intrusion on my PC but Kaspersky block him.
I will know what I can do to stop it plz ...
Sorry but I speak english very well....
46.109.167.139 - Network Attacks
My Firewall Just send me a notification, and said that this ip address 46.109.167.139
is attacking your computer network
i don\'t feel so good ....
thanksss very much....
eset nod 32 is deticting port scan attack from 31.7.59.144 several times a day.. whats is it and how can i protect my pc. pls help me...
124.239.195.131 - kill this fucker.
IP Address: 124.239.195.131
IP Address Country: China (CN)
IP Address Region: 22 Beijing
IP Address City: Beijing
IP Postal Code
IP Address Area Code 0
IP Metro Code 0
IP Address Latitude: 39.92890...
210.21.221.156 - port scans and TCP_WAITS
seems like this IP is doing illegal stuff: port-scans, smtp-spamming, finger scans etc. Connactions sometimes appears to be used by proxy servers or TOR network...
79.212.208.21 - HackAttack: [TCP SYN Flooding]
Nov 22 13:53:05 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 79.212.208.21:26353 to 80.220.22.74:5909
Nov 22 13:53:05 HackAttack: [TCP SYN Flooding] TCP packet from [nas0] 79.212.208.21:2635...
219.148.1.91 - attack
n e t w o r k a t t a c k h a s b e e n blocked on my computer, computer attacked...
212.104.86.94 - worm
stop trying to load a worm on to my computer. this is starting to become a weekly event please. kaspersky internet sceurity denied intrusion.win.mssql.worm.helkern so sick of getting this. how can ...
58.218.199.250 - TCP scanned port list, 2301, 8118, 8008, 8088, 7212
TCP scanned port list, 2301, 8118, 8008, 8088, 7212 constant pinging of network. regular reporting of this addrwss in the firewall logs. thre attacks started today ...
58.218.199.147 - Getting lots Firewall alerts relating to this IP
=>Found attack from 58.218.199.147.
Source port is 12200 and destination port is 27977 which use the TCP protocol.
Mon Nov 21 16:43:48 2011
=>Found attack from 58.218.199.147.
Source port is 122...
I got tired of banning 180. but it keep change ip addresses many times for keep visiting my website and making me feel not comfort.. Where can I stop 180 from seeing my website and block google?
Her...
219.148.1.91 - firewall alert
dude lost vs. kaspersky, tries this bullshit for quite some time, get lost fucker, seriously.
this line is to screw the 25 word thing beep boop...
68.67.159.189 - Risky Connection Blocked
McAfee blocked my PC from making a potentially risky connection. This has been happening after I start my computer (not sure if it is only after I access the internet) as of 11/19/11.
IP address: 6...
68.67.159.189 - PC trying to establish connection
My PC was trying establish connection to this IP Address. Good thing my firewall prevented it.
This has happened 3x since last night. ...
68.67.159.189 - Risky Connections attempted
My home computer\'s macafee software stopped 4 \'risky connections attempted.\' Error message on report is \'run a dll as an app.\' Coming from IP 68.67.159.189
I can not access any internet without ...
94.245.121.253 - 94.245.121.253
Constant request from this IP 94.245.121.253
Enough already!
It appears to from Microsoft UK but have no idea what its trying to do. FIrewall has gone off its head constantly advising this IP is tryi...
91.202.61.170 - "E's still with us"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 8
Time at last attempt : 11/18/11 1...
219.148.1.91 - intrusion attempt: MS SQL Stack BO
02:12 Alert Intrusion: MS SQL Stack BO.
Intruder: 219.148.1.91(1224)
Risk level: High
Protocol: UDP
Attacked port: ms-sql-m(1434)
This is the first time my computer blocked an attack attempt from this...
92.37.36.28 - HackAttack: [SPI:Illegal connection state attack]
Nov 15 10:01:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.37.36.28
Nov 15 10:01:03 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.37.36...
66.57.29.170 - HackAttack: [SPI:Illegal connection state attack]
Nov 15 09:53:51 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.57.29.170
Nov 15 09:53:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.57.2...
92.37.36.28 - HackAttack: [SPI:Illegal connection state attack]
Nov 15 09:42:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.37.36.28
Nov 15 09:42:09 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.37.36...
66.57.29.170 - HackAttack: [SPI:Illegal connection state attack]
Nov 15 06:26:08 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.57.29.170
Nov 15 06:36:02 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.57.2...
66.57.29.170 - HackAttack: [SPI:Illegal connection state attack]
Nov 15 02:42:11 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.57.29.170
Nov 15 02:42:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 66.57.2...
92.10.102.31 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 23:58:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.10.102.31
Nov 14 23:58:49 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.10.1...
92.10.102.31 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 22:58:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.10.102.31
Nov 14 22:58:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 92.10.1...
41.105.37.101 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 22:52:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.105.37.101
Nov 14 22:52:06 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 41.105...
77.72.56.247 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 22:51:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 77.72.56.247
Nov 14 22:51:13 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 77.72.5...
78.15.25.114 - HackAttack: [SPI:Illegal connection state attack]
Nov 14 19:34:31 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.15.25.114
Nov 14 19:34:35 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.15.2...
118.122.188.27 - HackAttack: [SPI:Illegal connection state attack]
Nov 13 14:15:40 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 118.122.188.27
Nov 13 14:19:10 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 118.122...
173.212.194.92 - HackAttack: [SPI:Illegal connection state attack]
Nov 11 17:24:13 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 173.212.194.92
Nov 11 19:22:43 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 173.212...
222.187.221.28 - Firewalled
Intrusion detected: McAfee. Successfully blocked.
Why do we have to write twenty five words for it to show up on this page? I just explained it in five!...
80.67.160.70 - Intrusion / Attack tried from this IP Address
According to my internet security program the IP Address 80.67.160.70 tried an intrusion on my computer, which was fortunately blocked. The intrusion try was on November 6, 2011....
124.239.195.131 - Attack From this IP adress.
Unknown Denied: Intrusion.Win.MSSQL.worm.Helkern .UDP from 124.239.195.131 to local port 1434
IP Address: 124.239.195.131
IP Address Country: China (CN)
IP Address Region: 22 Beijing
IP Address Cit...
221.194.46.176 - Chinese address is attacking my network...
Nov/15/2011 23:01:26 Drop TCP packet from WAN 221.194.46.176:12200 24.98.28.254:6588 Rule: Default deny
Nov/15/2011 23:01:26 Drop TCP packet from WAN 221.194.46.176:12200 24.98.xx.xxx:8123 Rule: Def...
124.239.195.131 - Atack
11/15/2011 04:40:21.496 Alert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 124.239.195.131, 2305, X1 ***.**.*.**, 1434, X3 11/15/2011 04:40:21.496...
219.148.1.91 - Attack
11/15/2011 10:01:52.624 Alert Intrusion Prevention IPS Prevention Alert: VIRUS SQL Slammer Activity, SID: 1870, Priority: Medium 219.148.1.91, 1224, X1 ..........., 1434, X* 11/15/2011 10:01:52.624 Al...
88.244.239.216 - hacking
I got alert that IP(88.244.239.216) trying to access my site, I dont\' know if there somebody need to hack my website.
Thanks & best regards
Gamal Hammad
gamal_hammad@hotmail.com...
109.235.55.11 - Help ban it
Identified as a malicious website by MalwareBytes
Type: outgoing
Ports: dynamic/private
Process :uttorrent.exe
Identified as a malicious website by MalwareBytes
Type: outgoing
Ports: dynamic/priv...
93.174.94.8 - malwarebyte allert
18:10:42 Erika IP-BLOCK 93.174.94.8 (Type: outgoing, Port: 54546, Process: firefox.exe)
18:10:42 Erika IP-BLOCK 93.174.94.8 (Type: outgoing, Port: 54589, Process: firefox.exe)
18:10:50 Erika IP-BLOCK ...
209.85.169.132 - DOS Attack
I am getting these all the time,, the other address\'s also come from 74.*.*.*... I am getting them on a regular basis.. Is this a problem??? or just a normally occurring event? They all say, [w...
109.235.55.11 - Keeps being blocked
really annoyed by it now, everyday it tries outgoing and malware byte keeps blocking it.
it also uses IP Switch and keeps attacking Full malware log:
02:36:15 USER1 MESSAGE Scheduled update executed...
169.254.83.178 - 169.254.83.178 Who is this trying to access my computers
169.254.83.178
Who is this trying to access my computers. What are they doing? They do not resolve to a URL or give any IP information...
70.85.140.250 - pls help
object : udp from 70.85.140.250 to local port 1434
result : denied:intrusion.win.mssql.worm.helkern
pls help. its frequent and i dont know whether i\'m safe or not and what is that asshole trying to ...
221.194.46.176 - Multiple attacks over days
This IP address, along with two others have been very intently trying to do port scans on my system for the last three days. ...
94.245.121.253 - Requesting incoming connection from this IP.
IP 94.245.121.253 blocked by ZoneAlarm. Requesting incoming connection from this IP.
Request made 11-06-2011 Protocol UDP Source IP: 94.245.121.253:3544
IP 94.245.121.253 blocked by ZoneAlarm. Reques...
184.154.90.138 - Constant attacks and recieved malware
I want this server removed, this is unacceptable, i have been receiving multiple attacks from different ip addresses from this location in Chicago Illinois and arlington heights...
69.31.111.133 - MALWARE AND FIREWALL ATTACKING
for 3 days multiple ips all from this specific area in Chicago Illinois and Arlington heights please shut DOWN. this is irritating, constant alerts, also had to remove malware...
64.37.231.135 - ATTACKING MY PC
PEople from this ip is attacking my pc, also all firewall alerts are from multiple ips that are all tracked back to Chicago Illinois and Arlington heights...
72.246.184.13 - Land Attack
FNBT.COM BANK is recieving a Land Attack from 72.246.184.13, we are getting alerts from the IP Address and have been for over 2 hours ...
74.63.243.194 - alert
I get repeated attacks from this direction.
I think the firewall prevents attacks but are very common.
Not how to avoid this....
208.76.54.68 - Web Attack: Malicious Exploit Kit Website
\"Network traffic from 208.76.54.68 matches the signature of a known attack. Network traffic from zveds.info/7htsp56x/?1 matches the signature of a known attack.\"
This message from newest ...
109.235.55.11 - blocked blocked blocked
do complaints make any difference, can\'t this IP address be blocked or investigated ? it gets blocked every time but is very annoying. seems like something should be done about this....
94.245.121.253 - Multiple requests on my mchaine from this IP address..see example
udp Incoming 94.245.121.253 3544 192.168.0.110 50297 05/11/2011 17:47:25
udp Incoming 94.245.121.253 3544 192.168.0.110 50297 05/11/2011 17:47:17
udp Incoming 94.245.121.253 3544 192.168.0.110 50297 ...
74.52.60.162 - MyDoom Virus Activity
Cisco IPS is reporting this IP several times today
time: nov 03, 2011 12:47:12 UTC offset=60 timeZone=GMT+01:00
signature: description=MyDoom Virus Activity id=3135 version=S105 type=vuln...
208.73.210.125 - 208.73.210.125 being accessed
when connected to the network, some program, trojan is trying to access 208.73.210.125.
i would love to know what piece of software is doing this...
70.85.140.250 - attack from 70.85.140.250
Same as above, and same internet adress, also an attack on the lokal port 1434 but just one try..do I have a virus on my computer that tries to communicate or did Kaspersky stop an attack?...who the h...
76.10.205.167 - HackAttack: [SPI:Illegal connection state attack] ICMP packer
Nov 1 23:09:43 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.10.205.167
Nov 2 04:02:55 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 76.10....
95.8.197.31 - Tried to access admin area of my Website
This ip tried to hack into my admin area of my website. I am getting tired of these twits from Turkey.
Is there a way to block all traffic from Turkey. The local authorities won\'t do anything so blo...
221.194.46.176 - Port scanning
Dear Sir
I got this messege form my firewall \" Detected Port Scanning attack from 211.194.46.176\"
I would like to know more about this attack
thanks and regards ...
109.235.55.11 - Hacking threat
This IP was caught attacking my ports. I received the warning from Malwarebytes, and modified the ports, but the IP continues to attack my network....
69.73.188.251 - attack
My Router firewall is reporting that this IP address has been trying to access my ports. for what purposes I do not know but I want it stoppped Please....
91.202.61.170 - "Continuous Campaign"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 8
Time at last attempt : 10/27/11 0...
91.202.61.170 - "My my, What a Busy Hacker"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 10
Time at last attempt : 10/27/11 ...
91.202.61.170 - "Constant Hacking"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 9
Time at last attempt : 10/27/11 0...
70.85.140.250 - complaints about 70.85.140.250
This is an another complain 70.85.140.250 I was lucky my kaspersky stop
the attack. I got a question to you guys does anyone of you have (vuze) installed I got malwarebytes and it stop vuze from conn...
91.202.61.170 - Persistent Hacker
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 19
Time at last attempt : 10/25/11 ...
91.202.61.170 - "New Tennant"
Well, he\'s not going away. Been kicking the firewall since my last post. Very persistent behavior. Would like to see him off the network, the Chinese hackers are going to like some else plucking t...
91.202.61.170 - IDS proto parser from 91.201.61.170
Warning 15 days 01:58:45 (since last boot) IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 XXXXXXXX 0140 TCP 80->22622 [S.A...] seq 84049046 ack 2075994375 win 512
Warning ...
91.202.61.170 - "Multiple Attempts"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 91.202.61.170
Number of attempts : 12
Time at last attempt : 10/24/11 ...
70.85.140.250 - Who are these people who attack my computer?
I regularly get attacks like this, how do I know where they come from? Are the IP address is actually one my antivirus detects? Thank you in advance for your answers....
94.100.30.164 - Out going
I am getting the same thing as the previous post.
A message pops up once in a while saying it blocked outgoing from this IP on Port 62859...
70.85.140.250 - worm slammer
it try to get in my pc! A worm slammer. this is 10/20/11 on port 1234 my kaspersky did stop it the ip is 70.85.140.250 ...
63.118.252.131 - Alert
10/20/2011 01:57:18.288 Alert Intrusion Prevention IPS Detection Alert: BAD-FILES Malformed PLS File, SID: 7040, Priority: Low 63.118.252.131, 80, Xx xxx.xxx.xxx.xxx, 28750, x
2 10/20/2011 01:5...
58.218.199.227 - 58.218.199.227
Firewall alert. This IP has been attemping several times a minute to scan my computer. This appears on our stealth mode log. ...
222.45.235.77 - Access Alert
We had numerous firewall access attacks from IP 222 45 235 77 over the last twenty four hours, we will report any other attempts ...
61.235.46.146 - Network Attack
Network Attack. Kaspersky detected. No other complaint. No other complaint. No other complaint. No other complaint. No other complaint. No other complaint. No other complaint....
68.87.71.230 - Detected port sniffing by firewall
Detected port sniffing by firewall ESET Smart Secutiry 5. Got a message out of the sudden warning that an intrusion was detected fom the ip address....
8.5.1.39 - complaint about 8.5.1.39
I am noticing several unwanted 443 connections from my machine to this host. INFECTED SERVER WITH MALICIOUS VIRUSES&MALWARE REPORTED AND BLOCKED BY MALWAREBYTES...
Security alert type : IP Subnet Broadcast Amplification
IP source address : 61.147.73.146
China China, Always China, Night & Day, Day & Nighrt China China China Chi...
58.218.199.147 - syn flood
I\'ve got firewall alert with this IP on port 12200. The firewall alert tells me this IP adress is doing SYN flood attack on my router....
61.61.20.132 - Attacks
Malwarebytes and McAfee blocks this ISP attack multiple times everyday and several times an hour. Has been happening for a couple weeks. How do I block this ISP?...
83.222.124.249 - Malwarebytes blocking this IP
My MalwareBytes Antimallware software is blocking this IP (IP-BLOCK 83.222.124.249) (Type: outgoing). It happened 3 times since i installed it: on 13. October 2011: at 00:54, 1:50, and at 5:48. I chec...
213.190.51.234 - 213.190.51.234
Keeps scanning my firewall with: IDS proto parser : tcp null port (1 of 1) : 213.190.51.234 xx.xx.xx.xx 0048 TCP 0->445 [S.....] seq 3351388781 win 65535...
58.218.199.147 - massive port attack...
I keep getting hit by this ip address from their port 12200 to my (http) port 80....
annoying. I am really getting tired of Chinese cyber-terrorist attacks....
58.218.199.147 - Pings my Router
Received Security alert from my router, I\'m not sure what is happening but it seems suspicious. It may be connected to unusual telephone calls I\'ve received. An Asian sounding person says that there...
174.36.241.116 - "Very Determined"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 174.36.241.116
IP destination address : 76.227.65.191
Number of attempts ...
193.105.210.81 - "Executable File Upload Attack."
WordPress Firewall has detected and blocked a potential attack!
Web Page: www.osx64.com//wp-content/plugins/1-flash-gallery/upload.php?action=uploadify&fileext=php
Warning: URL may contain dang...
174.36.241.116 - "Seems quite eager"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 174.36.241.116
IP destination address : 76.227.65.191
Number of attempts ...
118.139.184.14 - Attack
Alert Intrusion Prevention IPS Prevention Alert: WEB-CLIENT Obfuscated JavaScript Code 4, SID: 5206, Priority: Medium 118.139.184.14, 80, X1, ip-118-139-184-14.ip.secureserver.net ***.***.***.**, 2880...
193.105.210.81 - Wordpress Firewall Alert
Plugin not installed.
WordPress Firewall has detected and blocked a potential attack!
Web Page: http://*******.com/wp-content/plugins/1-flash-gallery/upload.php?action=uploadify&fileext=php...
221.194.46.176 - port scanning
As is explained by the person below, Im receiving frequent multiport tcp requests from this chinese address, as well as tcp requests from Limestone network in TX....
38.105.9.164 - illegal downloading
From: Sony Pictures Entertainment [mailto:specopyright2@mc.mediasentry.com]
Sent: Saturday, October 01, 2011 12:54 PM
To: Abuse
Subject: Case ID 1233353013 - Notice of Claimed Infringement
Saturday,...
69.181.252.195 - Port Scanning
My port is attacked by the above IP Adress whic is notified by ESET Personal Firewall. Iam from India and I dono why this IP has been continously attempt to scan my port....
93.114.40.92 - Slows down netowrk connection
computer is using iexplorer.exe for an outgoing on different ports (simillar to a port scan but it\'s outgoing) to this IP adress. is used by an infected webtv program to simulate legitmate connection...
219.148.1.91 - 01.10.2011 19:26:55 Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 219.148.1.91 to local port 1434
01.10.2011 19:26:55 Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 219.148.1.91 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 219.148.1.91 to local port 1434 Abse...
64.74.223.39 - McAfee Net Guard Blocked IP 64.74.223.39
When I access http://filmessegundaguerra.blogspot.com/ and my McAfee Total Protection (Firewall Net Guard) say \"IP 64.74.223.39\" isn´t secure and it was blocked.
Anybody know...
122.224.5.45 - potentially malicious site
malwarebytes anti malware has reported that several attemtps have been made by this potentially malicious website to access my system request take necessary action to prevent further attemtp by this s...
193.107.16.156 - potentially malicious site
my fire wall malwarebytes antimalware blocked innumerable attempts to access my laptop and reported that the sameis a potentially malicious website. hence request take necessary action to block this i...
109.235.55.11 - fire wall alerted that a malacious attempt is being made
My firewallhas alreted that there has been a malacious attempt to access my laptop.almost every attempt has been blocked my malwarebytes antimalware software kindly take necessary action to prevent an...
192.168.1.114 - 192.168.1.114
This ip keeps trying to access my wireless router. every 5 to 10 minutes. I have him blocked, but I am not sure this is enough. i need help...
We have this alerts on our firewall every 20 minutes: \'Smurf Amplification Attack Dropped\' , from IP Adress 129 . 82 . 138 . 38...
219.148.1.91 - Attack
28/09/2011 12:39:13 Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 219.148.1.91 to local port 1434
--------------------------------------------------------------------------
27/09/2011 21:27:45 ...
64.94.107.54 - IP 64.94.107.54 Internap Network Services Corporation
This IP attempted unauthorized entry
IP Address:
64.94.107.54
IP Address Country:
United States (US)
P Address Region:
CA California
IP Address City:
Pasadena
IP Postal Code
IP Address Area Code
626
...
58.218.199.147 - Detected port scanning
Every 5 min my internet firewall shows a blocked attack from this ip address. The attack is happening even if i am on a dynamic ip address. Although my firewall blocks it but the annoying pop ups are ...
58.218.199.147 - Firewall alert
Firewall alert Many time Everyday idont know y from the seame ip from china
i dont know if this hacker attack or normal things that happen every day to peoples or it was a mistake from the host intern...
67.88.220.21 - 67.88.220.21
Dear Team,
I am from Germany and somebody was scanning my notebook from this IP adress...67.88.220.21.
Please investigate as soon as possible.
Make sure it does not happen....
208.93.85.155 - HackAttack: [SPI:Illegal connection state attack]
Sep 19 17:35:01 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 208.93.85.155
Sep 19 17:35:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 208.93...
67.192.106.155 - WTF?
I dont know why but this IP keeps trying to connect to my PC...My firewall always blocks it but it still can not be good....
83.167.227.32 - HackAttack: [SPI:Illegal connection state attack]
Sep 16 16:50:26 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 83.167.227.32
Sep 17 01:26:05 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 83.167...
116.228.188.162 - Firewall Alert for this ip address.
Firewall Alert for this ip address. Hacker tried to login into server several times with no success. I see this ip address in several of my logs from Sept 12....
24.5.175.215 - HackAttack: [SPI:Illegal connection state attack]
Sep 14 19:45:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.5.175.215
Sep 14 19:45:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.5.1...
204.11.109.23 - IP 204.11.109.23
My firewall reported attempt to enter my computer on 9/15/2011 around 6:30 pm. IP 204.11.109.23. Reported by Mcaffee. Why is there a character minimum. Wow, this is like.......
165.193.42.72 - send all the time alart
Time: Thu Sep 15 14:40:38 2011 +0300
IP: 165.193.42.72 (US/United States/at1-scan006.scanalert.com)
Hits: 11
Blocked: Temporary Block
Sample of block hits:
Sep 15 14:40:23 israel10 kernel:...
109.235.55.11 - Outgoing blocked by Malwarebytes everytime IE8 is close
This appears to have associated with IE and it is blocked every time the browser is closed. Is there any resolution for removal. Thus far a full scan by Malwarebytes and by AVG 2012 have not isolate...
204.11.109.23 - 204.11.109.23 from oakland calif. just tried to connect to my pc...blocked by mcafee
204.11.109.23 from oakland calif. just tried to connect to my pc...blocked by mcafee. who is this? please investigate this user and shut down any illegal activity....
218.206.31.132 - SSH access atempts
This IP address keeps trying to gain access to our systems since weeks via ssh brute force. The IP is beeing automatically blocked by our firewall.
...
68.188.81.252 - SSH access atempts
This IP address keeps trying to gain access to our systems since weeks via ssh brute force. The IP is beeing automatically blocked by our firewall.
...
222.122.13.156 - SSH access atempts
This IP address keeps trying to gain access to our systems since weeks via ssh brute force. The IP is beeing automatically blocked by our firewall.
...
60.217.235.5 - SSH access atempts
This IP address keeps trying to gain access to our systems since weeks via ssh brute force. The IP is beeing automatically blocked by our firewall....
78.15.41.86 - HackAttack: [SPI:Illegal connection state attack]
Sep 11 01:40:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.15.41.86
Sep 11 01:40:12 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 78.15.41...
140.239.191.10 - wtf is xo communications and why do i see it on my computer...
subject says it enough at at at at at at at at at at at at at at at at at at at at at at at at ...
204.11.109.23 - McAfee blocked 'Risky Connection'
Do not know what they are trying to do....?
Messaged their contact us form to see what their deal is.
Why is there a character minimum? a...
221.1.220.185 - Persistent port scanning
Hundreds of port scans coming off this IP daily. Stopped for about a week when I reset my address but it\'s back with vengeance. It locks up the firewall and knocks me out of whatever I am doing.
...
58.218.199.227 - attempts to connect
several attempts in a row to connect to my computer through different ports (2479, 7212, 5390, 8080 - in that order) from 58.218.199.227:12200 were blocked by my firewall. ...
216.245.196.122 - attempt port attack
had this going on for about 5 days now, good thing my firewall is catching the
ip and letting me know . just wish someone do something about it , cause I
talked to one of the people there, name Austin...
94.188.21.147 - firewall alert
Unknown Denied: Intrusion.Win.MSSQL.worm.Helkern UDP from 94.188.21.147 to local port 1434 , on 02 09 2011 , ,,,,, , ,, , , , , , , , , ,...
192.168.1.114 - N/A
This address keeps connecting to my network. This has been going on for several days now. It is a computer from outside of my home network...
210.61.79.212 - "Constant Alerts"
Attacks from this Address coinciding with attacks from 58.53.128.193
Security alert type : IP Subnet Broadcast Amplification
IP source address : 210.61.79.212
Number of at...
58.53.128.193 - "Constant Alerts"
Multiple attempts recorded of security breaches, Security alert type : IP Subnet Broadcast Amplification
IP source address : 58.53.128.193
Number of attempts ...
220.178.16.98 - 5060
Blocked incoming UDP packet from 220.178.16.98:5060 to 75.128.2.198:5060
Blocked incoming UDP packet from 220.178.16.98:5060 to 75.128.2.198:5060
Blocked incoming UDP packet from 220.178.16.98:5060 to...
216.245.196.122 - ALL THE TIME
Thu Sep 01 02:15:03 2011 Blocked incoming TCP connection request from 216.245.196.122:12200 to 75.128.2.198:8123
[INFO] Thu Sep 01 02:15:03 2011 Blocked incoming TCP connection request from 216.245.19...
210.4.170.180 - 210.4.170.180
Blocked incoming UDP packet from 210.4.170.180:21919 to 75.128.2.198:20726
Blocked incoming UDP packet from 210.4.170.180:21919 to 75.128.2.198:20726
Blocked incoming UDP packet from 210.4.170.180:219...
222.187.221.28 - intrusion
while using firefox, browsing medical sitegot a pop up :This IP (222.187.221.28) was trying to connect to my PC, detected by McAfee on 8/31/2011...
72.3.230.24 - 72.3.230.24 HIGH LEVEL ATTACKON PORT 80
IP Address: 72.3.230.24
IP Address Country: United States (US)
IP Address Region: TX Texas
IP Address City: Fort Worth
IP Postal Code
IP Address Area Code 817
IP Metro Code 623
IP Address Latitude:...
31.3.246.80 - TCP Syn/Fin packet dropped
Not sure what is going on but this joker keeps hitting my firewall. He hasn\'t made it in, but he sure is persistant
31.3.246.80, 0, WAN, h31-3-246-80.host.redstation.co.uk...
192.147.69.84 - Unwanted gifts
This bugger is sending trojan programmes in with a quasi government e-mail in the hope that there are enough unsuspecting people out there to fall for it....
IP 204.11.109.23 from Oakland, Calif just attempted unauthorised entry.
IP 204.11.109.23 from Oakland, Calif just attempted unauthorised entry.
IP 204.11.109.23 from Oakland, Calif just attempted una...
58.218.199.147 - Actively scanning
- Probably a compromised host with a random ip attack pattern
- what\'s interesting is that it\'s always from the same IP on multiple posts
Aug 29 10:06:56 <home_net_gwt> kernel: [hammer] : IN=...
58.218.199.227 - 58.218.199.227
I am getting dozens of warnings from Malware Bytes that this address is being blocked as potentially harmful. I had been hacked a couple weeks ago and spam was sent to everyone on my email contact lis...
208.76.54.68 - Intrusion attempt, High risk
Norton told me this ip was trying to intude my hard drive and crash the computer but the attempt was blocked. So I hoped this helped and i also hope you can stop this person.
P.S - This crased the pl...
94.212.230.212 - HackAttack: [SPI:Illegal connection state attack]
Aug 26 23:16:56 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.212.230.212
Aug 26 23:16:59 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 94.21...
114.45.178.86 - HackAttack: [SPI:Illegal connection state attack]
Aug 26 21:26:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.45.178.86
Aug 26 21:26:14 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 114.45...
173.89.32.255 - HackAttack: [SPI:Illegal connection state attack]
Aug 26 16:57:07 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 173.89.32.255
Aug 26 16:57:10 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 173.89...
219.84.228.251 - HackAttack: [SPI:Illegal connection state attack]
Aug 26 16:56:42 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 219.84.228.251
Aug 26 16:56:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 219.8...
59.93.113.107 - HackAttack: [SPI:Illegal connection state attack]
Aug 25 15:42:23 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 59.93.113.107
Aug 25 15:42:24 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 59.93...
58.218.199.250 - Intrusive behaviour
This website 58.218.199.250 keeps trying to get into my computer throught the skype port 80. Fortunately my anti-malware keeps it out, but it is an invasive nuisance and an ongoing security threat.
Un...
68.94.156.1 - named: dropped malicious resp from 68.94.156.1
rtp: RTCPGetReports: Use symmetric owd
many blocked fw connections.
INF 2011-08-23T08:30:18-05:00 rtp: RTCPGetReports: Use symmetric owd
INF 2011-08-23T08:36:08-05:00 rtp: Previous log entry...
209.123.113.226 - 209.123.113.226 from Morris Plains, New Jersey, USA
Above IP, 209.123.113.226 from Morris Plains, New Jersey, United States of America attempted unathorised entry. Above IP, 209.123.113.226 from Morris Plains, New Jersey, United States of America attem...
58.218.199.250 - Watchguard keeps blocking this IP Address
Our network has been under attack by this IP address. This is insane! how do we keep this from happening. It is shutting my firewall down ...
85.159.233.161 - Alert
08/22/2011 02:47:36.048 Alert Security Services Gateway Anti-Virus Alert: IFrame.JX (Trojan) blocked 85.159.233.161, 80, X1, s0.freeserials.com 08/22/2011 02:47:36.048 Alert Security Services Alert S...
58.218.199.147 - 5 attacks in last 2 days
I am getting the following messages from my router:
21 Aug 2011
TCP Packet - Source:58.218.199.250,12200 Destination:MyIpAddress,73 - DOS
TCP Packet - Source:58.218.199.250,12200 Destination:MyIpAddre...
89.187.53.210 - Attacking
I have recieved many attacks, intrusion attempts, from this IP adress in the last few days. As well as other IPs from the same location. Not cool. ...
68.169.92.53 - like 10 different 'malicious url' alerts
with avast when i went to bannedinhollywood.com with this ip.
so yeah. >_<
no harm done though, so everything is alright. :D
i really love avast. it blocks everything for me. <3...
115.56.123.169 - someone from this email was trying to access my network
My firewall detected someone from ip 115.56.123.169 was trying to access my network, but was blocked, also my rovio robot started to walk by itself after this, so I blocked all ports the rovio robot w...
68.169.92.53 - constant attact on my computer
ip address 68.169.92.53 is trying to get to my computer, it\'s been done countless time every day. I wonder what I can do about it. I guess this one way.
thanks...
129.82.138.38 - Unsolicited Inbound ICMP Connections
This past week i\'ve been receiving unsolicited inbound ICMP connections attempts from 129.82.138.38 to my router ip of 192.168.1.64:8, every 10 minutes. I would like it to stop....
58.218.199.147 - port scaning
port sacning almost 10 times a day. How can I put tis ip in black list? or, someone can do somthing about? Thank you very much...
109.235.55.11 - connections from
109.235.55.11 keeps trying to connect on port 6969 , firewall alerts me ,6969 is common port for gatecrasher brute force hack. might be a tracker for torrents....
190.43.245.55 - inbound connection attempt
Keep on getting inbound connection attempts from isp address 190.43.245.55 (Telefonica de Peru). Don\'t know who they are and why they keep on trying to access my computer but probably for hacking pur...
216.245.196.122 - multiple cases of Limestone Ntwk testing my firewall ports
Seing hundreds of attempts to access my computer network through opened router ports.
Unknown inbound sessions from: 208.115.219.10 & 216.245.196.122 have so far been blocked by my firewall....
109.235.55.11 - blocking alot.
My firewall has been blocking alot of connections from this ip of incoming connections. Getting really annoying now because it also lags my computer slightly....
79.16.0.135 - 79.16.0.135
Whom ever is registered to the IP address of 79.16.0.135 has repeatedly tried to gain access to my systems.
Please make whom ever cease and desist.
Thank you.
...
58.218.199.147 - 58.218.199.147
Getting numerous Firewall alerts relating to this IP
TCP Packet - Source:58.218.199.147,12200 Destination:86.23.100.87,80 - [DOS]
TCP Packet - Source:58.218.199.250,12200 Destination:86.23.100.87,80...
58.218.199.147 - 58.218.199.147
ip addresses trying to access my computer, several....several times.Being notify by norton. I am in canada. What shall I do ??? This ip is from China....
173.192.117.66 - Blackhole Toolkit
This I.P. was launching an attack via Blakchole toolkit, over an advertisment located on deviantart.com . It has been detected by symantec endpoint protection on the 8/15/2011 14:40:12...
64.4.35.253 - Its MS
This address belongs to ns1.msft.net msnhst.microsoft.com and at a guess is related to MSN messenger. Nothing to me suggests hacking activity, but I\'ve blocked it just to be on the safe side. ...
208.73.210.125 - attack
je suis francais et j\'aimerais savoir pourquoi j\'ai des tentative de conection sur plusueur port venant le ip 208.73.210.125
bloquer par malwarebytes anti-malware
type outgoing
procesuce iexplorer...
79.174.72.66 - cheap nike shox
Women are not always like to wear high heels, may know more than 7 cm high heels can damage the pelvis? So liberate your feet on it. Put on a pair nike shox r3 shoes, activate your athletic, cheap N...
my modem enters the following log file every few seconds for the last 19 hours its been switched on, this in turn causes it to slow down a lot the last address in the entry is my wan ip address provi...
118.139.184.14 - Intrusion Prevention
IPS Prevention Alert: WEB-CLIENT Obfuscated JavaScript Code 4, SID: 5206, Priority: Medium 118.139.184.14, 80, X1, ip-118-139-184-14.ip.secureserver.net i seen this ip before in my logs lurking about ...
58.218.199.250 - same as everybody!
The ip address 58.218.199.250 and the ip address 58.218.199.147 (same people I think) are trying to access my computer through different ports but mainly port 12200.
Can\'t we completely block them?...
24.44.120.248 - HackAttack: [SPI:Illegal connection state attack]
Aug 12 19:54:16 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.44.120.248
Aug 12 19:54:19 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.44...
67.169.24.19 - HackAttack: [SPI:Illegal connection state attack]
Aug 12 19:51:37 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.169.24.19
Aug 12 19:51:40 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 67.169...
60.190.223.137 - Unsolicited TCP packet sent--blocked by firewall
An unsolicited TCP packet was sent to port 65500 from remote port 6000. Incident occurred on Aug 11, 2011 @ 14:11:44 PDT (UTC -0700)....
24.35.49.133 - HackAttack: [SPI:Illegal connection state attack]
Aug 11 17:35:04 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.35.49.133
Aug 11 17:35:21 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 24.35....
24.199.16.0 - Hooked up to my computer last night
I got a message from my newly Installed Zonealarm 9.2.106.000--firewall that my computer had a new network added to it overnight, with the new IP being 24.199.16.0 or Road runner network in Californi...
221.194.46.176 - Times are GMT+2, seems a Windows machine
Aug 9 06:35:23 LOLHOST kernel: [10228544.082714] IN=eth1 OUT= MAC=00:05:1c:01:06
:92:00:0e:83:06:4c:72:08:00 SRC=221.194.46.176 DST=MY_IP LEN=148 TOS=0x0
0 PREC=0x00 TTL=43 ID=25945 DF PROTO=ICMP TYP...
221.192.199.49 - DOS
Fri, Aug 5th 2011, 3:01pm, TCP Packet, Source:221.192.199.49, DOS attack, 4 times using 4 different local ports, remote port 12200.
No noticable effect, but logged in firewall...
94.100.30.164 - out going
not sure? what it is. my malware bytes\' anti-malware keeps bring it up IP block 94.100.30.164 (type out going, not sure what this meens thank you....
91.220.0.15 - call-out
Malware bytes says my machine is trying to call out to this ip address, which is traced to same source as 91.220.0.35. Don\'t know if it is malicious or not. Not a techie....
58.218.199.147 - 58.218.199.147.
My firewall alarmed me to the fact that 58.218.199.147. is scanning my computer. How do I prevent this happening? Surely no-one has the right to access my IP address...
221.192.199.49 - attack from 221.192.199.49
several connection attempts or attacks from IP adress 221.192.199.49 on destination ports: 7212, 73, 8008, 800, 8085 all TCP from TCP source port 12200 ...
174.133.213.18 - User(s) from this IP address are trying to connect without any privilleges to our server pointed at address: 78.47.239.25
Here you have our data log (truncated):
Aug 7 03:05:14 wizardbit sshd[8416]: Failed password for invalid user julian from 174.133.213.18 port 45093 ssh2
Aug 7 03:05:14 wizardbit sshd[8417]: Received...
63.221.143.14 - high risk attack.
very often received by firewall alert about this
attacked from this ip address: 63.221.143.14.
Server rate this as high risk attacker.
i am using 2wire router. ...
111.118.165.98 - Blocked IP
Hello i am an admin for i-net and my account was blocked when i was attempting to login, because my password is fairly complex.
Then the site timed out and said my IP was blocked by firewall
Please u...
221.194.46.176 - wtf from china!?
How the hell did this ip find me all the way from fkin china?? isnt there a solution, cuz, its happening ALOT! causing spikes and stuff. i swear if china was close ill go and smash the pc on his head!...
221.194.46.176 - 221.194.46.176
Firewall has blocked over 100 tcp attempts by this IP over the last week.
Believe all were stopped yet wondering why the attacks since all of my ports are in stealth mode. Have done scans both intern...
128.9.160.132 - Network Attack notification
We experienced an alert about 128.9.160.132 showing a Network Attack Notification involving 5 unknown packets. I have received over twenty of these alerts during the last two days....
58.218.199.227 - Attempted DOS attack
Firewall blocked and logged the following :
Source IP: 58.218.199.227
Remote port: 12200
Attempted DOS attack
1 attempt on 2 August 2011
No noticable effects other than logged in external hardware f...
221.194.46.176 - Attempted DOS attack
Firewall blocked and logged the following :
Source IP: 221.194.46.176
Port: 12200
Attempted DOS attack
6 attempts, over 1.25 hours, on 2 August 2001
No noticable effects other than logged in externa...
172.183.7.81 - IS TRYING TO ATTACT MY COMPUTER OVER AND OVER AGAIN
THIS PERSON IS CONSTANTLY ATTACKING MY COMPUTER....POSSIBLY FOR CRIMINAL REASON.....I AM USING KASPER SKY AND THANKFULLY IT HAS BLOCKED ALL THE ATTACKS BY THIS ATTACKER......
BUT STILL THIS PERSON IS ...
8.5.1.43 - Malwarebytes blocking every 3 seconds
My Malwarebytes is constantly telling me its blocking this site from accessing my pc. Its getting annoying. Would love to know why some company in WA is trying to get into my PC
...
62.63.214.2 - Daily attacks showing in Firewall Alerts
Attacks to try and guess username and/or password to a server. Consistantly tries to access our servers over the course of several hours. Access is attempted almost daily in early morning hours. ...
97.64.173.21 - Daily attacks on Server
Used brute force dictonary attack to try and guess username and/or password to server. Was unable to succeed. Shows up on server log as an attempt to login to domain almost daily....
221.1.220.185 - 221.1.220.185. China Attacking again
This is becoming a daily thing. A scan for open ports from some server in china...
We need to BLACK list the China Network and let them know this criminal action is NOT allowed to continue.
...
70.37.82.196 - Seems like a large scale attack
I get hundreds of these firewall alerts everyday. Most appear to come from China... this one appears to come from Microsoft. Hmmm....
Wed Jul 27 07:27:40 2011
=>Found attack from 70.37.82.196.
S...
120.71.14.43 - Large scale attack from China
Seems to be a part of a large scale, coordinate port scan or some other type of attack. I get hundreds of these alerts everyday. Almost all of them come from China.
=>Found attack from 120.71.14....
68.94.157.1 - udb scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 68.94.157.1
Time at last attempt : 7/28/11 01:53:37 PM
Number of port...
71.225.101.91 - HackAttack: [SPI:Illegal connection state attack]
Jul 28 21:43:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 71.225.101.91
Jul 28 21:43:45 HackAttack: [SPI:Illegal connection state attack] ICMP packer from [nas0] 71.225...
85.17.92.36 - An Intrusion Attempt by waltrate.org
Received following notice from Norton: \"Network traffic from waltzate.org matches the signature of a known attack. the attack resulted from \\DEVICE\\HARDDISKVOLUME1\\PROGRAM FILES\\MOZILLAFIREF...
80.42.218.198 - Intrusion alert
This IP from United Kingsom tried to attack me twice on 22.07.2011 , but my firewall blocked it.
Attack Name:
OS Attack: MS RPCSS Attack SVE-2004-0116 2...
88.117.100.63 - Intrusion alert
This IP from austria tried to attack me twice at the same time, but my firewall blocked it.
Attack Type:
OS Attack: MS RPCSS Attack CVE-2004-0116 3...
68.109.118.31 - hacking passwords
68.109.118.31 misbehaving . This IP is hacking passwords and connecting to those accounts and accessing information from those accounts. CT Connecticut.Manchester, united States of America....
68.87.74.166 - Instrusion
Norton Security Suite noted an intrusion attempt from this IP I am not sure if this is a hack or what it is, Watch for this...
58.218.199.147 - ip addresses trying to access computer
being notified by malware bytes several ip addresses trying to access (incoming and outgoing) 221.192.199.49 , 121.125.204.239, 59.34.40.99, 89.28.71.169, 58.218.199.147, 222.69.7.3, 89.28.18.137 amon...
69.73.144.72 - 2 attempted ssh log-ins per second to my static IP address
My router keeps getting overwhelmed by attempted ssh logins from this address 69.73.144.72 It looks like it is owned by a company named \" dedicated interactive \"...
64.111.211.172 - 64.111.211.172 outgoing blocked
My anti-virus keeps on popping a message that an outgoing connection to this ip was blocked. I do not have any browser or any application open on my machine.
I have also noticed that any search result...
58.218.199.250 - 58.218.199.250
This source has been placing incoming as well as out coming alerts. Just this morning before 5:20 am EST I have seen it 5 times and now at 5:22 am Sunday July 22nd 2011, I also have:(122.224.54.49.
G...
205.209.161.156 - TCP scans
For the umpteenth time in the last two day\'s I\'ve been having TCP scans from 205.209.161.156 -:
Traffic from IP address 114.46.230.189 is blocked from 07/23/2011 23:50:56 to 07/24/2011 07:50:56.
...
109.235.55.11 - Trojan "Gatecrasher"
My firewall has found a thing called \"Gatecrasher\" which connected out of my computer using port 6969. I googled it, and it seems to be a trojan. It\'s trying to connect to this ip, 109.23...
157.55.199.236 - constant (for days) tcp probing
157.55.199.236 and 70.37.82.196 from port 12200 to various ports on destination computer sometimes a little as 6 minutes apart to 1 hour..averaging approx 30 minutes apart. Usually they probe port 27...
222.186.24.66 - alert
tried to connect to scvhost.exe. Malwarebytes stopped.tried to connect to scvhost.exe. Malwarebytes stopped.tried to connect to scvhost.exe. Malwarebytes stopped.tried to connect to scvhost.exe. Malwa...
64.111.211.172 - Google Redirecting and blocking of websites
My antivirus program Avast keeps blocking common sites like Photobucket, Imageshack, and yahoo!Answers saying that the website was blocked, and this IP address always comes up with it.
Why the **** ...
64.111.211.172 - Spam
SpaM am sick of this guy. Every website link i click on this thing keeps on popping up spam spam spam spam spam spam spam...
89.149.236.241 - computer attack
tryed to hack my computer several times but got stopped by firewall.would like to ban this ip address. not sure why it has to be 25 words but ok with it ...
64.111.211.172 - WebBrowswer Redirect
Occationally my web browser will redirect to the IP address 64.111.211.172 but then my antivirus blocks the connections. The error is reported as Inefection:URL: mal...
189.19.206.152 - how does facebook work
http://estirsa.com/images/41/live-granny-tube.html live granny tube, =-D, http://ogmfamily.com/widgets/82/busty-videos.html busty videos, =D, http://munder.org/.fp/064/sleep-disorders.html sleep dis...
189.19.206.152 - presbyterian hospital dallas
http://ogmfamily.com/widgets/82/hard-sex-tube.html hard sex tube, avdc, http://i2domain.com/plaincart/30/open-dns.html open dns, %-P, http://reddogpub.ca/assets/248/my-facebook.html my facebook, 69...
189.19.206.152 - alicia keys nude
http://chamberabbotsford.com/webalizer/812/sleazy-dream.html sleazy dream, 29507, http://just2getit.info/email/416/cooks-illustrated.html cooks illustrated, 242539, http://gymabbotsfordbc.com/images...
125.45.109.166,1 - Daily attacks from 125.45.109.166
My wireless router is reporting attacks from this address up to 20 times a day.
TCP Packet - Source:125.45.109.166,12200 Destination:82.26.192.123,3128 - [DOS] TCP Packet - Source:125.45.109.166,12...
189.19.206.152 - izod center
http://bcbusinessguide.com/_notes/471/god-life-apperal.html god life apperal, vhe, http://obamaiscommunist.com/aspnet_client/79/capitalism-is-right-wing.html capitalism is right wing, 411972, http:/...
189.19.206.152 - movies online
http://theconstitutionists.info/images/32/camp-songs.html camp songs, 8), http://theconstitutionists.com/cp/30/cia
