Port Scanning
175.143.147.157 - Malaysia IP keeps scanning me
12/14/2012 10:50:07 PM Detected Port Scanning attack 175.143.147.157:53607 192.168.0.190:40271 TCP
12/14/2012 10:37:57 PM Detected Port Scanning attack 175.143.147.157:63838 192.168.0.190:46247 TCP...
64.31.29.61 - 64.31.29.61
Constant port scanning attack from this dns. Has been going on for weeks now.
Attempts to break into computer. my anti-virus software and firewall identify this
source of attack....
58.218.199.227 - Port Scanning Detected
IP: 58.218.199.227 scanned my ports trying to infiltrate my system on Friday 14, 2012 at 1:38 PM and may have found an open port or tried to open remote access
Im not the only one....
58.218.199.227 - Port Scanning Detected
IP: 58.218.199.227 scanned my ports trying to infiltrate my system on Friday 14, 2012 at 1:38 PM and may have found an open port or tried to open remote access
Im not the only one....
2.19.251.87 - Port Scan
This address did a Port Scan at 14/12/2012 for about 5 mins reported by my symantect firewall
heard weird things about akamai sniffing around
thx rgds...
69.162.105.18 - ports
69.162.105.18 54321
69.162.105.18 8118
69.162.105.18 36081
69.162.105.19 54321
69.162.105.19 8118
69.162.105.19 36081
64.31.14. 110 54321
64.31.14. 110 8118
64.31.14. 110 36081
64.31.14. 1...
69.162.105.18 - ports
69.162.105.18 54321
69.162.105.18 8118
69.162.105.18 36081
69.162.105.19 54321
69.162.105.19 8118
69.162.105.19 36081
64.31.14. 110 54321
64.31.14. 110 8118
64.31.14. 110 36081
64.31.14. 1...
58.218.199.227 - Numerous firewall entries
\"TCP Port Scan Detected\" and \"Unknown inbound session stopped\" for numerous destination ports. Have received similar firewall entries for another IP on the same subnet (58.218....
69.162.105.21 - port scanning
numerous port scans by this ip over a period of 1 month. Originating from Limestone Networks. Firewall a verified 5 port scans within the last hour alone. ...
58.218.199.250 - dangerous IP, threats for servers, exploits, fake identities, spyware, DDoS attackers, port scanning
Attackers who try to spy or remotely control others\' computers by means such Microsoft remote terminal, SSH, Telnet or shared desktops.
Threats for email servers or users: spiders/bots, account hijac...
58.218.199.250 - Repeated attempts
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 8008 which use the TCP protocol.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.19...
58.218.199.250 - Repeated connection attempts.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 8008 which use the TCP protocol.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.19...
58.218.199.250 - Repeated connection attempts.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 8008 which use the TCP protocol.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.19...
58.218.199.250 - Repeated connection attempts.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 8008 which use the TCP protocol.
Tue Dec 11 06:46:02 2012
=>Found attack from 58.218.19...
69.162.105.20 - malicious IP website, unspecified threat, exploit, Trojan, virus, malware, port scan, listed by atma.es
Malicious Website! - This IP address Involved in Unspecified Threat - Listed by http://atma.es
69.162.105.20 has been identified for: Unspecified threat (exploit / Trojan / virus / other Malware)
http...
69.162.105.20 - Repeated connection attempts, scans.
12/10/2012 21:06:11.240 Notice Network Access TCP connection dropped 69.162.105.20, 12200, X1, 20-105-162-69.reverse.lstn.net 75.84.122.28, 6515, X1 TCP Port: 6515...
This host needs stun gun attent...
93.170.127.96 - Attack with frequency
Since a few weeks we have been victims of attack by this email. We do not know what his intention. It\'s becoming unbearable. We\'ll have to trigger the relevant sectors....
58.218.199.227 - 58.218.199.227
Please stop this number from scanning my ports. This is irritating and an invasion of my privacy. It was blocked by ESET. What can I do to stop it?...
58.218.199.227 - 58.218.199.227
Please stop this number from scanning my ports. This is irritating and an invasion of my privacy. It was blocked by ESET. What can I do to stop it?...
69.162.105.22 - Limestone Networks -- Port Scanning
69.162.105.22 Continuous scanning ports on my PC at all times when on line.
The abuse department seems to ignore my complaints which also include 10-12 other ip addresses which are scanning ports ...
This IP is scanning my ports daily using 2047. Just had to cancel credit card because it was used fraudulently and I\'m sure it came from this jackass. Please someone ban this IP from obvious illegal ...
This IP is scanning my ports daily using 2047. Just had to cancel credit card because it was used fraudulently and I\'m sure it came from this jackass. Please someone ban this IP from obvious illegal ...
58.218.199.250 - IP Complaint.
This IP shows in my router\'s log as performing port scans against my network. [Thu Dec 06 17:05:15 2012]:[FW] **Port Scan Detected** 58.218.199.250 ->
[Thu Dec 06 17:05:15 2012]:[FW] **Port Scan ...
222.48.37.2 - .
stupid Chinese port scanners.
Blocked incoming TCP connection request from 222.48.37.2:19762
Blocked incoming TCP connection request from 222.48.37.2:19762
Blocked incoming TCP connection request from...
72.21.91.19 - Receiving lots of port scans from this address
We are receiving lots of port scans from this address. Not sure why it is persisting, adding block rules to my firewall to try to stop....
72.21.91.19 - Receiving lots of port scans from this address
We are receiving lots of port scans from this address. Not sure why it is persisting, adding block rules to my firewall to try to stop....
58.218.199.227 - IP 58.218.199.227
IP address 58.218.199.227 is scanning my home PC. Blocked by Bitdefender. It happens a couple times a day. I do not know what else to say. I\'m trying to reach the minimum....
58.218.199.227 - IPCAM en NAS
the ip-adress 58.218.199.227 is scanning during al very long time my network devices. This is very annoying, because its hard to complain there in china
...
58.218.199.250 - 4 Port scan in a day
12/3/2012 1:27:16 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.1.84:9000 TCP
12/3/2012 12:22:11 PM Detected Port Scanning attack 58.218.199.227:12200 192.168.1.84:8000 TCP
12/3/...
85.118.193.186 - Port Scanning Attack
Continuously attacking my home network, identified with ESET with port scanning attack. ESET is notifying me every 10-15 minutes about the attack... I searched for the IP address and its from Bulgaria...
58.218.199.250 - Trying to port scan my personal firewall
I\'ve been having this guy trying to port scan my personal firewall, Many attempts, please help and have this guy reported and have him stop attacking everyone....
58.218.199.250 - Trying to port scan my personal firewall
I\'ve been having this guy trying to port scan my personal firewall, Many attempts, please help and have this guy reported and have him stop attacking everyone....
96.254.171.2 - Happening Regularly
Port scanning random ports almost daily attacked. One example
TCP scanned port list, 8081, 87, 6666, 3128, 8086 Another day example TCP scanned port list, 8085, 8088, 6666, 8084, 8080...
58.218.199.227 - o.o
port scanning and someone tried to access my email from china.
i live no where no china nor know anyone who lives there that would have my email login...
58.218.199.227 - 58.218.199.227
11/29/2012 2:21:04 PM Detected Port Scanning attack 58.218.199.227:12200 192.168.0.190:8008 TCP
11/29/2012 2:03:38 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.0.190:9090 TCP
11...
58.218.199.227 - 58.218.199.227
11/29/2012 2:21:04 PM Detected Port Scanning attack 58.218.199.227:12200 192.168.0.190:8008 TCP
11/29/2012 2:03:38 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.0.190:9090 TCP
11...
147.178.208.94 - IOMEGA corporation 147.178.208.000
it seems to be 147.178.208. 92 -98 is constantly trying to connect to my netwrk router, and to clients in my network, it is disrupting normal operations, im getting fed up and i want to do something d...
147.178.208.94 - IOMEGA corporation 147.178.208.000
it seems to be 147.178.208. 92 -98 is constantly trying to connect to my netwrk router, and to clients in my network, it is disrupting normal operations, im getting fed up and i want to do something d...
85.195.82.169 - Port scanning
TCP- or UDP-based Port Scan - Source:85.195.82.169 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]
Port Scanning on our IP address on Tue 27 Nov 05:13 GMT
This IP address should be blocked immediately....
85.214.234.163 - Chelyabinsk Institute of Economics and Law named after M.V.Ladoshin
Forefront TMG detected scan all ports from IP-адреÑа 85.214.234.163, Forefront TMG detected scan all ports from IP-адÑ...
58.218.199.147 - generating lots of packets (rejected at firewall)
Just lots of port scanning and attacks. Linksys router firewall logs filled with log entries attacking home network. Hard for getting out going traffic out....
58.218.199.147 - generating lots of packets (rejected at firewall)
Just lots of port scanning and attacks. Linksys router firewall logs filled with log entries attacking home network. Hard for getting out going traffic out....
96.254.171.2 - port scanning
Time: Tue Nov 27 09:17:20 2012 +0100
IP: 96.254.171.2 (US/United States/proxy-2.cyberpods.net)
Hits: 11
Blocked: Temporary Block
Sample of block hits:
Nov 27 09:16:36 srv2 kernel: [5855945...
203.86.7.130 - Intrusion attempt detected: NMap TCP Scan
Received alert from F-Secure client security software that this ip 203.86.7.130 has TCP High ports in on 27Nov/2012 4:56:16pm. Please look into this issue, if they also doing port scanning on other pe...
145.100.100.250 - 145.100.100.250 SNMP Scan
This IP is has been scanning on SNMP port for many IPs. No exploits been attempted so far on the targets. Going to monitor this now....
94.102.51.192 - UDP Port scan
Tried to perform a UDP Port scan on my server and got cought by my honeypot firewall rule
From 94.102.51.192 - 1 packet
Service: domain (udp/53) (IPT PORT DNS:) - 1 packet ...
217.212.238.148 - Several Port Scannin attempts
I got multiple report of port scanning coming from this IP address. Both, hardware and software firewalls detected the attack. The attacks are coming from 217.212.238.148:3478 and are trying to reach ...
98.137.80.46 - yahoo port scan slowing down internet to a crawl
yahoo port scan slowing down internet to a crawl.
yahoo port scan slowing down internet to a crawl.
yahoo port scan slowing down internet to a crawl.
yahoo port scan slowing down internet to a crawl....
misbehaving (engaging in SPAM, brute-force, DOS attack, phishing misbehaving (engaging in SPAM, brute-force, DOS attack, phishingmisbehaving (engaging in SPAM, brute-force, DOS attack, phishing arrrr...
199.30.80.32 - IPillion = 199.30.80.32 Why Port Scanning?
IPillion you are in violation with the law and amendment.
You as a company and business structure,
are not permitted in executing port scan.
Considering there is no real reason for doing so other the...
92.236.36.69 - IDS fragment parser : fragment out-of-order
IDS fragment parser : fragment out-of-orderIDS fragment parser : fragment out-of-orderIDS fragment parser : fragment out-of-orderIDS fragment parser : fragment out-of-orderIDS fragment parser : fragme...
94.211.67.236 - 20x UDP port scanner
IDS scan parser : udp port scan: 94.211.67.236 scanned at least 20 ports at **.***.****.***. (1 of 1) : 94.211.67.236 ***.***.***.*** 0056 UDP IDS scan parser : udp port scan: 94.211.67.236 scanned a...
92.4.0.94 - UDP PORT SCANNER
UDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT...
109.230.156.52 - UDP PORT SCANNER
UDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT SCANNERUDP PORT...
68.198.47.151 - Port scanner
UDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port scannerUDP port...
174.97.227.63 - Port scanning
udp port scanner udp port scanner udp port scanner udp port scanner port scanner udp port scanner udp port scanner port scanner port scanner port scanner port scanner port scanner port scanner port sc...
50.142.174.198 - Port scanning
UDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port SCannerUDP Port...
95.8.12.16 - Port scanning
udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scan...
78.181.95.177 - Port scanning
udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scanner udp port scan...
95.8.48.81 - Port Scanner
UDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port...
78.181.89.175 - Port Scanner
UDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port ScannerUDP Port...
78.181.89.175 - Port scanning
UDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port scannerUDP Port...
58.218.199.227 - multiple ports scanned
27977, 9000, 9090, 9415, 8123, 8085, 8118, 8008, 2479, 3246, & 3306
ah so, what is so interesting about the IP address China keeps scanning it for? what inscrutable secrets must be behind it? I m...
58.218.199.227 - Multiple Scanning
Has been scanning my firewall for open ports for days now.
We have 227 complaints about 58.218.199.227.
We have 227 complaints about 58.218.199.227.
We have 227 complaints about 58.218.199.227....
91.197.129.127 - Multiple Port Scans - 10 months worth
Looking back through our router logs for this IP address it is responsible for thousands of port scans on our network from December 2011 and still continuing. I have blocked 91.197.128.0 - 91.197.131....
94.231.106.109 - constant port scanning
This address is constantly port scanning my Minecraft server. About every 10 minutes, I see this address \"lost connection\" with a different port number.
example:
2012-11-12 03:00:15 [INFO...
89.125.80.55 - DOS Attack
[DoS Attack: ACK Scan] from source: 89.125.80.55, port 31644
[DoS Attack: ACK Scan] from source: 89.125.80.55, port 31644
[DoS Attack: ACK Scan] from source: 89.125.80.55, port 31644...
58.27.86.105 - haven't a clue
it abusing my lap top. while i\'m online he online to while i\'m not online. he on my la top. that port i don\'t have it clue. the activities and others. i hope somebody can help me get out this piece...
31.186.97.13 - port scanning from 31.186.97.13
We recevied multiple port scans from this ip this past weekend. Seems to be non targeted. The scan are across a broad spectrum of our extreior facing infrstructure....
91.226.212.41 - Port Scan
[00001] 2012-11-10 10:40:35 [Root]system-alert-00016: Port scan! From 91.226.212.41:52432 to 82.85.2.146:1080, proto TCP (zone Untrust, int ethernet0/0). Occurred 1 times.
[00002] 2012-11-10 10:40:32...
77.247.177.150 - Port attacks
Continued port attacks from this IP 77.247.177.150 attempting to gain access to my computer. Firewall keeps blocking attacks from this IP Address. What can be done to stop this. ...
58.218.199.227 - Scanning non existant pages
Receiving http: requests for non existent pages. Scanning domain for among others, the following:
/judge.php
/proxy
One, two, three, four, five, six, seven, eight, nine and ten extra words to make th...
58.218.199.227 - WTF??
System log:
Send Discover Packet => Sat Jan 1 00:00:25 2000
Get DHCP OFFER Packet => Sat Jan 1 00:00:25 2000
Send Request Packet => Sat Jan 1 00:00:25 2000
Get DHCP ACK Packet => Sa...
205.186.175.204 - Port Scanning
This IP address was caught trying to do a port scanning on my computer.
This IP address was caught trying to do a port scanning on my computer. ...
184.106.5.33 - Port Scanning
This IP address was caught trying to do a port scanning on my computer. This IP address was caught trying to do a port scanning on my computer. ...
207.161.91.134 - Multiply port scan attempts
today i have received Multiply port scan attempts from this ip, all occurring in the matter of minutes, made about 5 attempts then has stopped for now...
209.18.47.61 - This IP keeps trying to connect to my machine
This IP keeps trying stealth connection attempts to my machine. Hundreds of times, trying many different ports
This is illegal activity and needs to be stopped. This has been going on for weeks. ...
209.18.47.62 - 209.18.47.62
My son\'s pcs are hacked/monitored on a daily basis.I believe it belongs to some US Gov entity and is assisted by the ISP i.e. RR...
91.226.212.41 - Port Scanning
21 11/03/2012 00:34:26.752 Alert Intrusion Prevention Possible port scan detected 91.226.212.41, 59959, X1 81.142.214.14, 80, X1 TCP scanned port list, 27977, 3124, 3128, 3127, 1080
Logged multiple...
74.206.235.92 - repeatedly scanning
74.206.235.92 is scanning over and over again for several days.
tcp_flag, scanner=syn_rst] [74.206.235.92:0
tcp_flag, scanner=urg_wo_ack] [74.206.235.92:0
tcp_flag, scanner=non_syn_ack_rst] [74.206.2...
219.159.77.46 - port scanning
keep getting port scanned by ips from this ISP in china, even resetting modem will still get me port scanned. I guess they are scanning my entire isp or something...
74.206.235.92 - Port Scan
Several port scans from 74.206.235.92 have been logged over the last several days. I have contacted \"webair\" but I that was before I found a lot of sites just like this one detailing the s...
74.206.235.92 - SYN and FIN bits! From 74.206.235.92
SYN and FIN bits! From 74.206.235.92
Continuous scanning from the above IP address to various external addresses
Not sure what type of attack, or virus ...
74.206.235.92 - constant attacks from this IP 74.206.235.92
idslog nullscanIN=ppp0 OUT= MAC= SRC=74.206.235.92
Port scanning
Previous attacks have been synflood, these would be in singular hits but increased over time to multiple attacks form numerous IP\...
58.218.199.250 - trying to port scan my personal firewall
Everytime I plug into my mom\'s internet connection I get these idjits trying to get into my laptop. This is making me wonder if they got into my mom\'s computer and that\'s why it will not go online...
203.178.148.19 - Persistant Ping over several hours.
IP traces to Japan yet claims affiliation to Colorado State University.
HTTP://203.178.148.19/ == a plausible IP scanning project \"ANT\" for the purposes of mapping / scanning IP addresses ...
58.218.199.227 - 182 attemps
Bashing on my server, port scanning etc. TCP scanned port list, 27977, 8085, 9090, 8088, 8118. Looks like attempted brute force password attempt also....
58.218.199.227 - Port Scanning
Twenty five different port scanning intrusions in the last week, all originating with the same IP address. A further 60 attempts in the IP range of 81.103.xxx.xxx...
50.23.30.168 - Port scans on minecraft server
This ip has been scanning my minecraft server with tons of ports trying to gain access to a weekpoint as far as im aware. i dislike how this is going and do not with to change my ip atall. any help or...
58.219.199.227 - Chinese port scanner
58.219.199.227 & 58.219.199.250
Have been port scanning me, alternatively, many times over the past month for no particular reason that I am able to wrap my head around....
69.162.105.20 - Trying to gain access
This company has tried to hack my system several times
2012-10-25T05:21:19-04:00
fw,fwmon
src=69.162.105.20 dst=99.29.166.133 ipprot=6 sport=12200 dport=36081 Unknown inbound session stopped
agai...
85.214.234.163 - Security Scan
Security Alert from my Router:
UDP Packet - Source:85.214.234.163 Destination:Removed - [PORT SCAN]
This has happened several times, but only reporting now, as I configured the router to report scans...
67.129.147.149 - over 10x/per day over the last 2 weeks
he shows up all over my logs and scans the same port several times a day. i don\'t know what to do. i don\'t torrent. ...
91.150.151.6 - Oszołom
Oszołom skanuje porty i wydaje mu się,że jest super ;) Tychy 91.150.151.6.internetia.net.pl nie wiem co mam wiecej dodac, ale takich ludzi to bym na jakies kursy wyslal, bo ...
200.85.41.198 - Router logs report this IP address
001490: Oct 23 20:25:42.285 UTC: %SEC-6-IPACCESSLOGP: list WAN_IN denied tcp 200.85.41.198(15269) -> 200.44.157.52(445), 1 packet
001491: Oct 23 20:26:11.654 UTC: %SEC-6-IPACCESSLOGP: list WAN_IN d...
58.218.199.227 - Port Scanning
fuck this chinese faggot trying to port scan everyone, detected on eset smart security. fucking little ching chong faggot you suck da dik big boi...
173.194.41.79 - action is needed
Virus software alerted me that this IP was scanning my ports so I have blocked the address, I have googled to see if other people have had similar problems and they have so this should be investigated...
58.218.199.227 - Detected scan ports during last 3 days from this IP
Log reported by Sonicwall Firewall:
Source: 58.218.199.227
Category: Intrusion Prevention
Message: Possible port scan detected
TCP scanned port list, 9415, 8090, 1080, 8000, 2301, 8088, 8118, 8008, 7...
198.154.60.15 - ET SCAN Sipvicious User-Agent Detected
I\'ve checked our secure.log and found the following entries.
Oct 21 07:08:08 snort[5949]: [1:2011716:2] ET SCAN Sipvicious User-Agent Detected (friendly-scanner) [Classification: Attempted Informat...
My firewall has sent me dialog box notification that it is blocking access attempts from 64.31.14.106 - entering this into your records. Is there a way to report them?...
213.199.179.145 - Port scan non stop
I am getting regular port scans from this IP address. Don\'t know it if slows network down, but will be port-scanning back to them now....
74.111.35.90 - Attempted hack?
this ip has been trying to access every known port on my server with various generic user names.
i have added a deny rule in my firewall but fear if its dynamic he will just try again when he has a ne...
202.117.3.104 - port scanning
port scanning....port scanning.... what more to say?
port scanning....port scanning.... what more to say?
port scanning....port scanning.... what more to say?
port scanning....port scanning.... what m...
207.157.1.10 - Port Scanning
10/18/2012 13:22:00.448 - Alert - Intrusion Prevention - Probable port scan detected - 207.157.1.10, 5067, X1 - X.X.X.X, 5089, X1 - UDP scanned port list, 5080, 5081, 5082, 5083, 5084, 5085, 5086,...
91.224.160.192 - Malicious
Plain and simple, this IP needs to be blocked from access outside of it\'s local ISP. It is malicious and does not deserve access to the Internet....
Oct 17 20:46:20 ,Xmas port scan attack from WAN (ip:2.18.18.217) detected. Oct 17 20:46:20 ,Xmas port scan attack from WAN (ip:2.18.18.217) detected. Oct 17 20:46:20 ,Xmas port scan attack from WAN (i...
74.125.132.188 - Xmas port scan attack from WAN (ip:74.125.132.188) detected
Oct 18 01:37:48 ,Xmas port scan attack from WAN (ip:74.125.132.188) detected. Oct 18 01:37:48 ,Xmas port scan attack from WAN (ip:74.125.132.188) detected.Oct 18 01:37:48 ,Xmas port scan attack from W...
58.218.199.250 - 58.218.199.250
This is just plain ridiculous. Hack attacks and port scanning. Dozens of times a day every day? Why do you people behave like cockroaches?...
85.195.82.180 - Abuse
This IP is port scanning...
Evidence from router log...
UDP Packet - Source:85.195.82.180 Destination:83.105.85.180 - [PORT SCAN]
Please look into this abuse & do something about it.
Thank you...
207.157.1.10 - udp ports scanning
Oct 17 11:29:11 IDS scan parser : udp port scan: 207.157.1.10 scanned at least 20 ports at 178.36.224.201. (1 of 1) : 207.157.1.10 178.36.224.201 0440 UDP 5063->5080...
74.125.225.104 - 74.125.225.104 scanning for several days
74.125.225.104 scanning for several days 74.125.225.104 scanning for several days 74.125.225.104 scanning for several days 74.125.225.104 scanning for several days 74.125.225.104 scanning for several ...
58.218.199.227 - also 58.218.199.250
port scanning attack as detected by eSet almost daily.
Not thru wireless router -- direct connect to modem.
blah, blah, blah, blah, blah is that 25 words now?...
174.37.193.240 - port scan attach
Oct 15 10:06:34 ,Xmas port scan attack from WAN (ip:174.37.193.240) detected.
Oct 15 09:56:35 ,Xmas port scan attack from WAN (ip:174.37.193.240) detected.
Oct 15 09:56:31 ,Xmas port scan attack fro...
209.222.129.172 - ip addresses 209.222.129.172 - 177
port scanning for several weeks from the above ip. why does the report need to be 25 words or more? let me know catt.thre@gmail.com. thanks,...
58.218.199.227 - 58.218.199.227 Port Scanning my IP to death.
This ip 58.218.199.227 has been port scanning my IP all day yesterday to death.
13/10/2012 10:37:34 Address temporarily blocked by active defense (IDS) 58.218.199.250:12200 192.168.1.89:73 TCP
13/...
201.157.18.107 - about Morfeus Fucking Scanner
201.157.18.107 - [12.10.2012 10:53:09] \"GET /user/soapCaller.bs HTTP/1.1\" - \"\" - \"Morfeus Fucking Scanner\"
It\'s from my server\'s logs. And what this mean (Compla...
209.85.148.147 - google scanning my ports, WTF
16:02:57
Timezone: (UTC+01:00) IDS scan parser : tcp port scan: 209.85.148.147 scanned at least 10 ports at 178.37.31.206. (1 of 1) : 209.85.148.147 178.37.31.206 0040 TCP 80->12200 [.FA...] seq 41...
114.141.72.36 - xmas port scan attack
why is this trying to get into my router? continually port scanning. october 10 1.40pm lots n lots of attempts. why 25 words long??? sounds pretty dumb to me ...
85.195.82.185 - 85.195.82.171
portscaning This IP address should be blocked immediately.
portscaning This IP address should be blocked immediately.
portscaning This IP address should be blocked immediately.
portscaning This IP ...
159.226.43.35 - much portscanning
Oct 8 01:53:00 badaboom sshd[13316]: Received disconnect from 159.226.43.35: 11: Bye Bye [preauth]
Oct 8 01:53:02 sshd[13318]: Received disconnect from 159.226.43.35: 11: Bye Bye [preauth]
Oct 8 01...
114.244.6.186 - Port Scan from the listed IP
I have been getting numerous messages from my net protector/firewall regarding port scans from this IP and found out that it is some user from China. ...
109.163.231.168 - Thank God a good malware utility
Sick of this crap. Glad I was using a great malware app. This is the first time I saw this one so I am not sure what it was up to. I am sure there will be tons
more on the horizion....
85.195.82.185 - post scnned from 85.195.82.185
According to my log ports 5076-5090 scanned on 10 october 2012 9 oçlock am.
This IP address should be blocked immediately.
5 more words needed ...thanks a lot....
209.62.45.34 - Port scan
Recorded in my router log. 209.62.45.34 must be sniffing my network. Scanning ports. Recorded in my router log. 209.62.45.34 must be sniffing my network. Scanning ports....
91.213.203.203 - 91.213.203.203
This ip has been scannig my ports 4 days in a row, yet.
Some router log:
10/05/2012 01:56:13 ports scan TCP from 91.213.203.203:60283 to 81.xx.xxx.xx:1080 ATTACK
10/05/2012 01:56:13 p...
64.150.221.221 - RDP
Oct 3 11:27:47 lota kernel: Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=64.150.221.221 DST=108.160.144.179 LEN=48 TOS=0x00 PREC=0x00 TTL=115 ID=29031 DF PROTO=TCP SPT=41096 DPT=3389 WINDOW=819...
77.91.204.137 - xmas port scan
This person at :77.91.204.137 is port scanning us and interfereing with the rightful use of our own network and internet connection. how can we stop this/...
67.228.86.96 - TCP
Unknown 0 TCP 50458
80 http 67.228.86.96
67.228.86.96-static.reverse.softlayer.com Time Wait
Probably is listening TCP.
Maybe phishing. 67.228.86.96-static.reverse.softlayer.com Time Wait
Hi...
85.195.82.185 - Port Scanning
UDP Packet - Source:85.195.82.171 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]
Port Scanning on our IP address at 08:18 on 4 October 2012.
This IP address should be blocked immediately....
209.62.45.34 - TCP
209.62.45.34
TCP
Time wait
Suspicius activity. Hacking.
Synflood attack detected from 209.62.45.34.
Recorded in my router.
He/She must be listening my network.
Probably virus attack using M...
61.128.110.96 - Scans on port 1434 (Used in MS-SQL: Slammer-Sapphire Worm attack
Getting numerous scans from this IP on port 1434. These scan are obviously to find vulnerable or open ports for a SQL attach. Is there any way to stop these scans from China?...
211.141.86.248 - Scans on port 1434 (Used in MS-SQL: Slammer-Sapphire Worm attack
Constant scans from IP 211.141.86.248 on port 1434 in the last 3 months. How does submitting a complaint help with this matter? Is something actually done about it?...
94.102.51.192 - tcp/udp chargen
i don\'t know the meaning behind this info. could this be why my wireless connection keeps disconnecting because every 2hrs or so it does and this \"dos tcp/udp chargen from source 94.102.51.192 ...
85.195.82.180 - Today have a scan in the log
This IP is Port scanning today i found a entry in my routers log file. I do not know who is behind that but will file a complaint also to the provider....
85.195.82.168 - Port Scanning
My router has also detected port scans from this address.
UDP Packet - Source:85.195.82.168 Destination:nnn.nnn.nnn.nnn - [PORT SCAN]
Who is this and what are they doing?
(And what a stupid rule th...
85.195.82.168 - Port scanning today
This address 85.195.82.168 has been detected by my router scanning ports on my DMZ.
Thanks a lot lot lot lotlot
UDP Packet - Source:85.195.82.168 Destination:192.168.0.250 - [PORT SCAN].
...
85.195.82.185 - port scanned dsl modem from 85.195.82.185
Security alert type : Port Scan
Protocol type : UDP
IP source address : 85.195.82.185
Time at last attempt : 9/29/12 04:06:10 AM
Number of po...
85.195.82.185 - port scanned dsl modem from 85.195.82.185
Security alert type : Port Scan
Protocol type : UDP
IP source address : 85.195.82.185
Time at last attempt : 9/29/12 04:06:10 AM
Number of po...
85.195.82.185 - NETGEAR *Security Alert*
UDP Packet - Source:85.195.82.163 Destination:x.x.x.x - [PORT SCAN]
verbrecher aus hanau bei velia net
Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning...
91.213.203.203 - 91.213.203.203
Did a port scan attack. Read that it\'s IRC related. What\'s the deal? I love how this has to be 25 words or more. :-P...
85.195.82.163 - UDP Packet Alert by Netgear Router
My Netgear Router also has alerted me about this Port Scan twice in the last three days.
Source:85.195.82.163
They do not seem to give up - These guys need stopping!
...
85.195.82.185 - Port scanning..
Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port scanning.. Port sca...
58.218.199.227 - Blocked on Router/Firewall and Adapter Levels
Blocked on Router/Firewall and Adapter Levels :
Page and pages of complaints... No actions taken... Do it yourself... Set to block in your router and firewalls to block.... Solved...
17.173.254.223 - Scanning port 16403 again
This IP address (from Apple) is constantly scanning ports. Obviously this company is trying to spy and get private information. Apple products are very dangerous, they are sending information to intel...
77.124.135.213 - xmas port scan
this idiot is slowin our net to a crawl and using this xmas port scan on us for no reason and we cant use the service that we have paid for...
85.195.82.163 - UDP Packet alert by Netgear Router
My Netgear Router alterted me about this port scan, yesterday:
Mon, 2012-10-01 02:44:51 - UDP Packet - Source:85.195.82.163 Destination:79.192.195.111 - [PORT SCAN]
The IP belongs to VELIANET-DE-MOHA...
64.27.29.100 - Port scanning for RDP
Oct 2 14:49:49 lota kernel: Firewall: *TCP_IN Blocked* IN=venet0 OUT= MAC= SRC=64.27.29.100 DST=108.160.144.179 LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=25640 DF PROTO=TCP SPT=56662 DPT=3389 WINDOW=8192 ...
69.171.228.74 - Port Sanning
This IP from Facebook is constantly spying computers. Be aware of this company, it is dangerous. (By the way, it is great that the prize of its IPO is a complete failure. Keep spying Facebook and your...
58.218.199.250 - China Jiangsu Xuzhou a Government Hacker Base?
Had mayor internet problems.
Connection sending more packets than received.
investigated: DOS attacks.
Reinstall win7 and avira facing same problems
Installed Bitdefender 2013 problem solved
Port Sca...
218.3.163.67 - Using my pc and network for DOS attacks
Had mayor internet problems.
Connection sending more packets than received.
investigated: DOS attacks.
Reinstall win7 and avira facing same problems
Installed Bitdefender 2013 problem solved
Port Sca...
198.18.109.168 - Port scan attack
Port Scan attack at hotel in Chicago. Repeated port scan attack at hotel in Chicago. Repeated port scan attack at hotel in Chicago....
91.226.212.41 - My Computer
My Bitdefender says; \"A port scan was detected and blocked\" (21/9-2012) and this is not the first time so...??
If somebody \"out there\" can get/catch this F-er..? That would be...
63.245.217.162 - Port Scanning after Starting Firefox
For the last several days, whenever I start Firefox, I will receive a firewall alert a few minutes later saying that this IP address has scanned several ports on my system.
The alert message is con...
208.67.220.220 - Port Scanning
This IP is trying to access port 34330 and other ports constantly . The IP belongs to Opendns. Why is this company interested in spying our network?...
203.91.121.71 - ssh scanning
tried many usernames. they have been trying to connect for the past few days and will continue to do so if not blocked. Fix it...
58.218.199.250 - port attack scan
2012-09-29 00:11:57 Wykryto atak ze skanowaniem portów 58.218.199.250:12200 xxx.xxx.xxx.xxx:2479 TCP
2012-09-28 22:30:32 Wykryto atak ze skanowaniem portów 58.218.199.227:...
174.252.39.84 - Intrusion attempt detected: Fin Scan
My firewall blocked this:
The DNS name is: 84.sub-172-252-39.myvzw.com
It scanned the TCP inbound port 8874
Have had multiple fin scans from myvzw.com
This is one example
Thank you for your time...
58.218.199.227 - 58.218.199.227
This IP is port scanning our Firewall, its not getting in but its still been trying all day. 58.218.199.227 I know Im not alone please black list this ip address...
91.226.212.41 - Port Scaning
Same here.Scanned ports(TCP): 80, 9090, 8000, 3127, 1080, 8909, 3128, 3124, 27977, from 91.226.212.41. In the interval of 5 seconds. Around 06:35 AM.
Thanks in advanced.
...
85.195.82.185 - Port Scanning
85.195.82.185 scanned for open ports on 24/9/12 18:38 - blocked by firewall
inetnum: 85.195.82.160 - 85.195.82.191
netname: VELIANET-DE-MOHANADALMESHAL
descr: Mohanad Almesh...
58.218.199.227 - THIS IP ADDRESS SCANS MY PORT TWICE EVERY SINGLE DAY
Please, stop this site/person from scanning/hacking my port every single day.This IP address is constantly trying to establish a connection on a range of protocols. stop this person from hacking my po...
58.218.199.250 - This IP address scans my ports every single day
Please stop this person from hacking my ports or anyone else\'s ports for that matter. I downloaded Peer Guardian to see if I was able to block them myself, but the program doesn\'t catch their IP ad...
91.185.122.51 - IP half scan
Log Name: Application
Source: Microsoft Forefront TMG Firewall
Date: 9/24/2012 6:29:36 PM
Event ID: 15102
Task Category: None
Level: Warning
Keywords: Classic
Us...
85.195.82.185 - Noted in my router logs
Persistent port scanning followed by DOS attacks - attempting to connect to the router and also to take us offline. Unsuccessfully at this time. twenty six....
17.173.254.223 - Scanning port 16403
This IP address (from Apple) is constantly scanning ports. Obviously this company is trying to spy and get private information. Apple products are very dangerous, they are sending information to intel...
87.98.217.187 - Attack
This ip address has blocked my internet.
12|09/24/2012 09:38:58 |87.98.217.187:6661 |85.164.218.102:6661 |ATTACK
Please block the address from further use ...
58.218.199.227 - Port Scan complaint
Hi.
I am getting port scans from this IP multiple times in the last 2 hours...
Just reporting this.......I am getting quite annoyed at the fact I am getting so many...
58.218.199.227 - Port scanning / DOS attack
This IP has been scanning different ports on my router, a few times a day for a well over a week now. bad bad people!...
50.56.209.185 - Attempted port scan
50.56.209.185 (NE of Witchita, KS) attempted to port scan my computer on Sept. 19, 2012, at 9:17pm. It was blocked and reported by BitDefender....
123.138.32.50 - Port scan attempt from China
123,138,32,50 (located in China) attempted a port scan of my computer in Louisville KY USA on Sept. 19, 2012, at 7:49pm EST. The port scan was blocked by my BitDefender software....
122.115.60.96 - another china hackedr
Please start investigating these chinese hackers. They have no business scanning my computer. They must have thousands of computers scanning at the same time from multiple addresses. It\'s scary to th...
218.7.121.120 - Chinese Hacker
Another complaint about a chinese hacker or whoever trying to get into my computer. This IP address was on my Malwarebytes protection log. Something needs to be done....
61.164.108.211 - Another Chinese Imposter
This is yet another hacker trying to get thru my firewall. The chinese are cyber targeting Americans and I think it is high time the media get on the story. They try and try to get thru my firewall a...
66.175.214.21 - VNC attack
This IP address has breached my computer using a VNC attack. This is not the first time that this has happened but it is the first time that I have caught him....
119.247.226.156 - Scanning
Sep 16 02:38:23 IDS scan parser : stealth tcp full xmas scan: 119.247.226.156 scanned at least 20 ports at 81.228.157.192. (1 of 1) : 119.247.226.156 81.228.157.192 0048 TCP 58368->641 [S.....] seq...
64.37.60.116 - selling fresh cvv cc dumps bank log in track 1/2 transfer wu
****Hot****selling fresh cvv, dumps,bin,Wu trsfer,tracks 1&2 with pin etc........
Sell Cvv + Transfer WU + Bank Login + Dumsp + Paypal ....
IF YOU NEED, CONTACT ME BY
Yahoo : mayback.money
Mai...
64.37.60.116 - selling fresh cvv cc dumps bank log in track 1/2 transfer wu
****Hot****selling fresh cvv, dumps,bin,Wu trsfer,tracks 1&2 with pin etc........
Sell Cvv + Transfer WU + Bank Login + Dumsp + Paypal ....
IF YOU NEED, CONTACT ME BY
Yahoo : mayback.money
Mai...
74.63.192.66 - This ip do random port scanning.
All is on the title. This ip do random port scanning on some isp, i can change my ip 100 times and my isp 10 time, they are still continuing to scaning....
122.150.97.254 - Bitdefender detected a port scan
Bitdefender detected a port scan from this ip. So far, this happened to me 3 times. . . . . . . . . . . ...
58.218.199.147 - port scanning!
two to three times per day 58.218.199.250 attempts port scans. i have logs. many many logs.two to three times per day 58.218.199.250 attempts port scans. i have logs. many many logs.two to three times...
58.218.199.227 - Excessive attempts to connect
Router logs are filling with atempts from this IP...
[INFO] Mon Sep 10 22:59:40 2012 Blocked incoming TCP connection request from 58.218.199.227:12200 to 71.227.68.74:80
[INFO] Mon Sep 10 22:59:40 ...
91.226.212.41 - Pertsistant port scans
Somebody is scanning your computer.
Your computer\'s TCP ports:
27977, 9090, 8909, and 8000 have been scanned from 91.226.212.41.
Been at it now for a good hour...
211.141.86.248 - udp attack
bullshit,
ths ip is causing network attck on my pc, i.e udp attack. fuck ths bastard.
kindly give solution to it. what shall i do ovr here..??
...
58.218.199.227 - stop scanning my computer
every few minutes,, this IP is hammering at my norton Firewall!. This have been going on for several weeks now. I continually get notifications attack:portscan...
184.105.189.111 - port scan and syn flood attempt
multiple port scans from this address. It resolves to GuardLayer.Com.
crappy little nonfunctional webpage.
====================================================
2012-09-10 10:22:11 alert Port scan! Fr...
58.218.199.58 - Ip keeps portscanning
58.218.199.58 keeps port scanning several times a day.
Constant port probing from this site. It\'s always sites from China never anywhere else. (so far) Can\'t someone put a stop to these Chinese ha...
I recieved 21 port scanning alerts from this source [121.45.211.241].
al attemps took place at the 9th of september around 22:00 hours.
2012-09-09 22:08:35 alert PortScan ATTACK:SRC=121.45.211.241 ...
58.218.199.58 - Scanning Attack
I receive regular port scanning attacks from 58.219.199.58 that are picked up by my security software. Frequency is roughly every 30 minutes. For information, I use ESET Smart software...
221.192.199.46 - 221.192.199.46
port scanning, shut em down! The hacking situation seems to be very common to this particular site and an abuse of the freedom of the cyber realm. Once warned should be enough for a dismissal of right...
188.130.251.74 - Port Scanning
This happens several times a day. Malware pops up with the port scanning attack message. I have never had something require me to put in a MINIMUM of 25 words. I don\'t have that much to say but do...
222.184.232.2 - F secure reported intrusion attempt
Has been trying to connect to me for the last 3 hours every 5-20 minutes usualy on port 80 Whats up with this crap ?...
58.218.199.227 - 58.218.199.227
BitDefender blocked this IP from doing a port scan on my computer. Is there anything anyone can do to crack down on this IP? I don\'t know if this is some Chinese-government sponsored thing or just ...
58.218.199.227 - Port scan
Repeated firewall warning:
Somebody is scanning your computer.
Your computer\'s TCP ports:
9415, 3246, 9090, and 1080 have been scanned from 58.218.199.227.
Port scan for vulnerabilities?...
58.218.199.227 - Port Scannning Attack
I have Intrusion attempt multiple times from IP 58.218.199.227. My computer got port scan attack by at least more than 100 times / day. Why are you doing this - China???
...
58.218.199.250 - Constant port scanning
Constant port probing from this site. It\'s always sites from China never anywhere else. (so far) Can\'t someone put a stop to these Chinese hackers....
58.218.199.58 - probing ports
Constant port probing from this site. It\'s always sites from China never anywhere else. (so far) Can\'t someone put a stop to these Chinese hackers....
58.218.199.227 - Port Scan Attack
Intrusion attempt multiple times from this IP 58.218.199.227. My computer got port scan attack by at least 99+ times / day. China have something so explain about this !...
84.14.12.9 - .
Aug 31 06:26:07 {host} sshd[29951]: Received disconnect from 84.14.12.9: 11: Bye Bye [preauth]
Aug 31 06:26:09 {host} sshd[29953]: Received disconnect from 84.14.12.9: 11: Bye Bye [preauth]
Aug 31 06:...
216.244.111.139 - 216.244.111.139 is scanning my ports
also from 216.244.111.140, they continue to scan my ports :
Aug 30 09:06:09 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC= SRC=216.244.111.140 DST=xxx.xxx.xxx.xxx LEN=32 TOS=0x00 PREC=0x00 TTL...
204.93.180.2 - 204.93.180.2 IP Address was scanning my ports
204.93.180.2 IP Address was scanning my ports. Esset Smart Security showed that 204.93.180.2 was scanning my ports. I don\'t want that it happened again. ...
58.218.199.250 - I WANT TO HELP FIGHT THIS
This site has been getting into my PC for a while. I finally got annoyed, hid behind HMA VPN from Russia, Singapore, and Indonesia, and scanned the hell out of them.
Unfortunately, although I was an ...
120.40.226.117 - 120.40.226.117
Blocked access attempt from 186.244.81.157:54012
port scan my desktop 120.40.226.117 <=- from china chinanet fujian province network, that sucks :/ (why 25 words long?)...
210.5.102.90 - Port Scanning
Kindly monitor this IP address attempting to hacked my system,,210.5.102.90,
124.106.174.194...........124.106.174.202............210.5.102.56.............204.46.21.124.....................198.87.182....
63.245.217.162 - 63.245.217.162 Port Scanning
Please banned this IP it is doing a port scanning on TCP port list, 46302, 46524, 52828, 16313, 52827.
Query terms are ambiguous. The query is assumed to be:
# \"n 63.245.217.162\"
#
...
173.242.114.45 - Port Scanning
08/28/2012 15:04:11.032 - Alert - Intrusion Prevention - Possible port scan detected - 173.242.114.45, 80, WAN, server2.web-leader.net - 209.60.165.162, 62608, WAN - TCP scanned port list, 62603, ...
169.254.48.242 - Port Scanning
- Intrusion Prevention - IP spoof dropped - 169.254.48.242, 51369, LAN - 224.0.0.252, 5355 - MAC address: 00:15:c5:44:72:49
I am reporting all instances of port scanning....
50.23.229.107 - Port Scanning
Alert - Intrusion Prevention - Possible port scan detected - 50.23.229.107, 80, WAN - 209.60.165.162, 17419, WAN - TCP scanned port list, 17400, 17411, 17410, 17412, 17417
I am reporting all bloc...
70.103.34.18 - Port Scanning
- Alert - Intrusion Prevention - Possible port scan detected - 70.103.34.18, 443, WAN - 209.60.165.162, 23855, WAN - TCP scanned port list, 23836, 23839, 23840, 23859, 23856.
I am reporting all i...
10.148.248.237 - Bad Actions
Port Scanning IP Spoofing
IP spoof dropped - 10.148.248.237, 44358, LAN - 74.125.139.188, 5228, WAN, yn-in-f188.1e100.net - MAC address: b0:d0:9c:ed:85:96
Will this ever stop from them? I hope so...
211.141.86.248 - network attack
I also have been attacked from this location.Which was Blocked. Intrusion.Win.MSSQL.worm.Helkern Port 1434 from 211.141.86.248 listed as
guoyuyong@jx.chinamobile.com from Hphosts. China? Hope this ...
66.185.181.137 - Port scanning
My sonicwall device has blocked this IP address several times for possible port scanning intrusion. Started at port 80 and all the way past 34000, and has over 15 entries on our recently blocked list....
173.194.41.186 - Port scan
porst scanning me multiple times these last days ... dont know why
and some other words here and there to match the stupid 25 words minimum... ...
91.121.180.84 - UDP Loop and Scans
Time: 08/27/2012, 10:46:16
Message: UDP Loop
Source: 91.121.180.84, 58473
Destination:<myexternalip>, 19 (from PPPoE1 Inbound)
Time: 08/27/2012, 00:21:18
Message: UDP Loop
Source: 91.121.180.84...
58.218.199.250 - 58.218.199.250
More port scanning and abuse from a suspect Chinese IP. I am starting to have a go back at this IP range and I suggest others attack back....
78.41.203.120 - Mutiple Port Scan Attempts
This site keeps attempting port scans for purpose of installing redirect malware. \"IP-BLOCK 78.41.203.120 (Type: outgoing, Port: 49397, Process: iexplore.exe).\" This has happened every day...
81.28.185.218 - scanning my port
bitdefender detected and blocked it from russia i don\'t know what do to i find your web site on bitdefender web site sorry for my bad enhlish i\'m french ...
75.132.28.0 - 75.132.28.0 Port scanning
this address has been port scanning my router 19 times tonight over a 2 hour period, this is unacceptable, filed a complaint to abuse@charter.net ...
211.141.86.248 - 211.141.86.248
Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 211.141.86.248 to local port 1434
I have Kaspersky and this report apears twice a day now. Any advices? I\'m getting fed up with them.
...
94.75.209.131 - Port Scannig
Dear Distributor, please remove this IP address, beacause I have attacked by port scanning. Please, solve the problem, as soon as you can.
Thank you very much...
69.162.105.20 - Multiple Daily Port scans
8/21/2012 4:01:11 PM Detected Port Scanning attack 69.162.105.20:12200 68.110.66.240:1049 TCP
8/21/2012 2:31:09 PM Detected Port Scanning attack 69.162.105.18:12200
8/21/2012 1:46:03 PM Detecte...
78.145.240.73 - Firewall alerts
On Tuesday 21st August 2012, my firewall rejected several single port scans tagged as originating from IP address 78.145.240.73. Please investigate at your earliest convenience.
...
94.231.106.109 - Ports Scanning
Constant port scanning, trying to break in.
I have blocked him.
be aware...Constant port scanning, trying to break in.
I have blocked him.
be aware...Constant port scanning, trying to break in.
I have...
182.118.20.236 - Port Scan
I am getting port scanned by this Chinese IP. NOT GOOD. Do not trust them.
Why do I need more words than it says I need?...
58.218.199.227 - Port Scans
I have been receiving port scans from this address as well.
Port scan addresses:
58.218.199.227
58.218.199.250
58.218.199.58
There may be more.
Word16 Word17 Word18 Word19 Word20 Word21 Word22 Word2...
58.218.199.227 - Port Scans from 58.218.199.227:12200
My firewall logs are FULL of port scans from 58.218.199.227:12200. I have been seeing this for the last 2 weeks now. It looks like it\'s coming form a Windows Azure system because of port 12200....
202.75.39.10 - Got port scanned from a lot of IP's including this
A lot of port scanning from the 5th to the 14th of August.
This seems to be from a botnet where this IP was one of the scanning ones....
64.34.169.244 - was on a political site likely to be monitored by TPTB
Apparently they wanted to connect to me and that\'s despite the fact that no images or other linked content should have been coming from that IP. My measures, hopefully, proved adequate. Saw multipl...
65.60.19.82 - SIP port scanning
Received strange SIP attack from this IP. Just a CANCEL message
CANCEL sip:972597812300@***:5060 SIP/2.0
Via: SIP/2.0/UDP 65.60.19.82:5060;branch=z9hG4bK1625527caedf1149e5029f545;rport
From: \"M...
193.178.146.136 - Mulitple Port scan and Suspicious acitivity
We are observing scan on web server on multiple ports
nmap scan (no flag)
nmap scan (xmas)
nmap scan (syn fin)
port scan dropped
and other malicious activity etc etc...
208.83.20.130 - same ass from florida here too
malwarebytes detected and stopped this attmepted intusion this morning, we are on yo you and it would appear that this will continue to be your down fall...
75.126.76.154 - dos attack
seems to be tryong to scan my computer daily..log says it is repeatedly kicking it out... has anyone else had problems? Appreciate any response. Word word....
69.171.228.70 - 69.171.228.70
Constant trying attempts 24/7 from Facebook butt heads. This is getting tiresome but one must remember it is comming from a familiar Social Ass Site....
88.195.82.164 - On vacation
I am on vacation and my firewall gave me an alert \"Port Scanning Detected IP 85.195.82.164. I am on a secure network and they should not be doing this....
58.218.199.227 - Multiple scans
Damn the slant eyed chinese.... need to get a life! 17 scans blocked in one day, thanks to bit defender they can go blow themselves!!!!
...
58.218.199.227 - Scan port since 5 days ago
Every evening night I\'ve got my firewall saying ports were scanned...so finally I checked up to see the address and found this from china....
They were using TCP protocol...
192.168.1.10 - PORT
i AM UNABLE TO VEIW WEB CAM. WHILE I WAS CHECKING THE PROBLEM, IT IS ASKING PORT CODE. PLEASE LET ME KNOW PORT CODE AS SOON AS POSSABLE....
58.218.199.227 - Port Scan detected at fw
scan originating from this ip was detected at firewall on 8/8/2012. 58.218.199.227:12200 and 58.218.199.253:12200 on ipv6 and tcp.
I need to have 6 more words to post!...
91.226.212.41 - Targeted
IDS picked up numerous port scanning activities from 91.226.212.41
Firewall logs indicate short targeted bursts from the above IP. Started at 21:04 GMT and ended 40 mins later....
206.161.121.2 - beyond the network america
Trying to dial out of my home 2wire ip, it goes up the entire port list - ip:51207, ip:51208... and prevents me from display the webpages....
78.41.203.120 - Multiple port scans
This site had sent mutiple TCP FIN and port scan attempts against my firewall. The attempts ocurred between 11:37 AM and 12:15 PM EST August 4 2012....
89.248.164.21 - 89.248.164.21
this IP is doing a port scanning on server. Trying to break in on server.
Attack is for more then 10 hours now and working every second...
221.233.242.4 - intrusion
Reported twice by my security system - udp from 211.141.86.248 to local port 1434. It happened twice to my system in past 3 days while I was accessing linkedin social network ...
58.218.199.227 - VA TE FAIRE SAUTER TA RONDELLE DE CITRON !
CONTINUER VOS CONNERIES D\'INTRUSION ET ON VA VOUS BOTTER VOS PETITS CUL DE MANDARINS FRIS A LA VAPEUR A COUP DE DDOS !
ENCULéS DE PRIMATES !...
91.235.143.129 - this IP address's then we always getting attack, what can we do
this IP address\'s then we always getting attack, what can we do
this IP address\'s then we always getting attack, what can we do
this IP address\'s then we always getting attack, what can we do...
192.168.0.3 - Port Scanning
I am not interested at all! This IP keeps port scanning. It is annoying ...wish it would stop. Two words short. There. fixed...
91.213.203.203 - 91.213.203.203
Firewall has warned me, that 91.213.203.203 is portscanning my network, without being autorized for it. detected as portscanning, please stop!
why the hell do i need 25 words to complain an abuser??...
91.226.212.41 - Port Scans
Your computer\'s TCP ports:
27977, 80, 8000, and 3127 have been scanned from 91.226.212.41..
The map location and details are not loading, I understand this is from a server in
Ivanov in the Ukr...
58.218.199.227 - Tried everything I can think of
Started July 27th, around 4pm. I also noticed I was locked out of my router\'s login page and no other computer on the network could connect to the internet. My ESET Nod32 Smart Security notifies me o...
123.62.24.246 - multible times port scanning
Has tried many times to scan my computer. From ip 123.62.24.246 My firewall stopped it always.Unknown if this was a malicious attempt or not. Not good...
93.184.215.73 - From router log
[DoS Attack: ACK Scan] from source: 93.184.215.73, port 80, Thursday, July 26,2012 13:56:38
[DoS Attack: ACK Scan] from source: 93.184.215.73, port 80, Thursday, July 26,2012 13:54:39
This is causing ...
94.127.72.120 - contedo
I have Contedo servers in AMS and US performing port scans on an almost daily basis over a period of 2 weeks. Contedo is part of Akamai CDN....
60.173.8.177 - Ran a port scan on my PC
This IP tried to scan port 2586 on my laptop. Here\'s what my firewall had to say-
\".... blocked traffic to port 2586 on your machine from port 28695 on a remote computer whose IP address is 60....
173.236.44.98 - portscan
My router registered two separate port scans from this IP address, the first on the 22th of July 2012, the second one on the 25th of July 2012....
74.53.2.87 - Port scanning
Scanning ports: 21230, 21742, 23022, 23534, 25838, 27374, 28654, 18157, 19181, 19693, 22253, 22765, 25069, 25581, 39148, 40172, 41196, 43500, 44012, 44524, 45548, 63467, 63979, 64491, 65003, 65515, 49...
68.94.157.1 - SBC/ATT server generating attack
SBC Global server, geo-ing in Southern Kansas- isn\'t in Southern Kansas. 24/7 port scans and denial of service attacks are locking up my firewalls. SBC and ATT notifed dozens of times and refuse to a...
68.94.156.1 - 24/7 port scans- dos attack
SBC/ATT have been contacted repeatedly about the never ending port scans coming through their servers based out of southern kansas. they ignore all info and complaints, and refuse to address the probl...
91.202.63.177 - Intrusion.Generic.Banned.IP.p
Kaspersky Internet Security alert:
Network attacking, port scanning from IP adress 91.202.63.177
Don\'t know... may be that\'s false alarm, I found nothing about this subject in the network....
60.173.8.177 - IP-block
My malawarebytes (anti malware software) blocked an intrusive comunication from this IP. I am not sure if it is an hacking attemp
IP-BLOCK 60.173.8.177 (Type: incoming, Port: 8909, Process: svchost.e...
222.186.13.99 - port scanning
He was trying to scan my ports 5 times already!!! What can i do to defend from this lame hacker??????? Help me please. I need someones help...
58.218.199.147 - TCP scanned port list, 9000, 2479, 3246, 9090, 8090
Portscan kill by Sonicwall. Every day up to 12 times on day.
Portscan kill by Sonicwall. Every day up to 12 times on day.
...
217.106.239.101 - tcp data on syn segment
IDS proto parser : tcp data on syn segment (1 of 1) : 217.106.239.101 196.217.46.130 0085 TCP 7778->53660 [S.A...] seq 3876554632 ack 1706062532 win 12290...
17.83.253.7 - Multiple port scanning
Multiple attacks against router including Denial of Service; Ascend Kill. Generally from the same port (port 123). Attacks went on over a three hour period at a frequency of 15 minutes
Surprising a...
194.168.4.100 - Virgin media DNS Servers
I have had multiple port scans and intrusion attempts from the virgin media dns servers and the super hub does not allow you to change the dns servers in the config great fun juniper firewall here I c...
218.9.114.253 - incoming attack 2012/07/21 19:42:53 -0400
DESI Desi1 IP-BLOCK 218.9.114.253 (Type: incoming) Malwarebytes detected incoming and blocked this as malicious please check into this and correct this status , this is an attack on a US Police Dept ...
58.218.199.227 - this is doing my head in
this person is trying to port scan me an has been try for 4 days now here are the 2 ips i got 58.218.199.250 and 58.218.199.227 there was a 3rd ip as well all from the same area in china can som...
192.168.1.102 - McAfee Alerted me
What is known about 192.168.1.102? I\'m not savvy about this stuff. Is it serious? Will McAfee take care of it automaticaly? Do I need to notify them?...
217.106.239.101 - tcp data on syn segment
Jul 20 12:36:10(UTC+1) IDS proto parser : tcp data on syn segment (1 of 1) : 217.106.239.101 77.254.4.80 0080 TCP 7776->18396 [S.A...] seq 2064984479 ack 633862721 win 28451...
80.82.66.111 - Port Scanning
Port Scanning.
multiple attacks using this IP address, I would like to test riding!
multiple attacks using this IP address, I would like to test riding!
ok.
Port Scanning....
217.106.239.101 - tcp data on syn segment
Jul 20 09:00:31(UTC+1) IDS proto parser : tcp data on syn segment (1 of 1) : 217.106.239.101 178.36.229.127 0131 TCP 7776->7468 [S.A...] seq 11327791 ack 1812523813 win 19830
Jul 20 09:31:13(UTC+1...
217.106.239.101 - tcp data on syn segment
Jul 20 03:26:05 IDS proto parser : tcp data on syn segment (1 of 1) : 217.106.239.101 81.228.158.220 0079 TCP 7776->15661 [S.A...] seq 2437046372 ack 645278170 win 24656
Jul 20 02:41:23 IDS proto ...
58.218.199.227 - REPEATED PORT SCAN ATTEMPTS
REPEATED PORT SCAN ATTEMPTS My firewall is complaining that 58.218.199.227 is Port scanning me - 8080, 8008, 2301 etc. I think some of the higher tier providers need to start permanently blocking Chin...
96.127.150.218 - Repeated port scan
Repeated port scan
20/7/12
TCP Packet - Source:96.127.150.218 Destination:me - [PORT SCAN]
TCP Packet - Source:173.236.30.122 Destination:me - [PORT SCAN]
around the same time too???
from Netgear ...
217.106.239.101 - scanned my ports four times in the evening
Jul 20 00:55:11(UTC+1) IDS proto parser : tcp data on syn segment (1 of 1) : 217.106.239.101 178.37.10.147 0085 TCP 7776->20865 [S.A...] seq 240688466 ack 20136107 win 10692
Jul 20 00:03:54(UTC+1)...
69.171.242.71 - Port scan
Jul 19 13:04:13 IDS scan parser : tcp port scan: 69.171.242.71 scanned at least 10 ports at 81.228.158.220. (1 of 1) : 69.171.242.71 81.228.158.220 0079 TCP 443->52832 [..A..P] seq 1924750471 ack 3...
96.127.150.218 - Repeated port scan
Here is the excerpt from the log from the router:
19/07/2012
TCP Packet - Source:173.236.44.98 Destination:2.101.25.179 - [PORT SCAN]
TCP Packet - Source:96.127.150.218 Destination:2.97.114.21 - [PO...
173.236.44.98 - Repeated port scan from this IP
My router registered two separate port scans from this IP address, the first on the 15th of July 2012, the second one on the 19th of July 2012....
58.218.199.250 - My ESET Smart Security is detecting a Port Scanning Attack
When hooked up to my home router (from Time Warner Cable - a Motorola router) I am regularly getting an alert from my ESET Smart Security of detecting a Port Scanning Attack from the Remote IP addr...
192.168.1.102 - ....
This IP address has been port scanning since the beginning of the month, possibly longer since the logs show infrequent activity before then. I\'ve had enough....
207.46.194.116 - They're port scanning my server
Beverly Hills computer probing server for weaknesses.Such dastardly deeds for these overentitled Beverly HIllbilly brats.I have found my higher calling whatever that is-to infuriate these people.Enoug...
66.225.225.224 - port scanning
port scanning my IP address . . . . . . . . . . .. . . . . . . . . . . . . ...
211.235.228.43 - POP3 attack
Was trying to login with unknown user names and passwords. A few thousand attempts. There\'s no valid reason for this kind of behavior without the intent being to abuse my system and resources....
80.82.66.111 - 80.82.66.111 Repeated Port Scanning
Several repeated Port Scan attempts stopped by my firewall.
This has gone on for several days now.
Always the same IP.
80.82.66.111
6 Port Scans detected over the past 3 days....
58.218.199.58 - port scanning
only happens when I connect through a VPN server, which is hidemynet, this is very bad, and has happened in the past, luckily I don\'t have unnecessary ports open and Norton was able to pick it up and...
74.125.224.40 - GOOGLE port scanning my IP address
This ip trys to create a SSL connection to multiple ports.
After unsucessful attemps the same scan starts from another IP in the group.
74.125.224.36 thru 74.125.224.57
Ports involved are 22, 443, 9...
58.218.199.227 - Port Scanning
This IP has scanned my router in the past, but stopped. Router reported port scans starting at Sun 2012-06-10 17:34:55 (GMT +10). Have not succeded in compromising Inernet connection or security (YET!...
41.133.203.183 - all port scan attack from 41.133.203.183
Hi,
We have been receiving an all port scan attack from 41.133.203.183.
021 425 0005. rrrrrrrrrrrrrrrr rrr r r r r r r r g g
Brandon...
211.20.112.146 - several attacks
Hi, several actions of my ban firewall was taken towards this IP but still alive. could you please stop him? many actions here:
2012-07-02 12:20:30,355 fail2ban.actions: WARNING [ssh-iptables] Unban 2...
58.218.199.227 - Random .php requests to scan for vulnerabilities ?
58.218.199.227 - - [10/Jul/2012:17:20:27 -0400] \"GET http://www.verysurf.com/proxyheader.php HTTP/1.1\" 404 728 \"-\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\&qu...
85.195.82.168 - IDS
This address 85.195.82.168 has been detected by my router scanning ports early this morning and it seems to be looking for VoIP ports, so I think is better to add it to the database....
173.236.30.27 - attacking ips aggressive port scans
Sent: Saturday, July 14, 2012 7:48 PM
Subject: RVS4000 Security Log [0C:46:DD]
Jul 14 15:36:32 - [Firewall Log-PORT SCAN] TCP Packet - 173.236.30.122 --> 71.233.134.16
Jul 14 15:36:32 - [Firew...
58.218.199.147 - Wondering what this is
My new anti-Virus detected this and well i want to know what it is because i have a mac and well if this can attack macs it is something worth knowing about. ...
61.185.238.233 - UDP attack
Found by kaspersky, it was attacking one of my ports.Checked IP addressed from China... this is the first time tho.. but.. i dont like it =)...
58.218.199.227 - 58.218.199.227
Reported on Belkin Router as hitting my firewall. I don\'t know what further words would be reasonable to reach the required quota. I have nothing else to say....
194.168.4.100 - Port Scanning July 2012
Multiple port scans from 194.168.4.100 on, or around, mid July 2012.
ISP notified of port scanning activity by 194.168.4.100.
Will wait and see if they take action....
188.40.82.149 - address comes on MY WEB site few times a week
why is this address from Germany on my site a few times a week??seems odd..is it a spy info scanning co??not looking at anything according to stats for the visit....just comes on the main pg.
not sur...
80.82.66.111 - Hacking attempt
80.82.66.111 has been port scanning my computer for the past three days. Is there any known way to stop this activity? Complaining is fine but it will not puit an end to the behavior....
109.67.235.13 - 109.67.235.13 constant TCP attacking
This IP has been constantly trying access entire network using snmp auth and tcp for the past week. abuse and noc for ISP/Hosting has done nothing to stop....
80.82.66.111 - port scan from 80.82.66.111
port scan from 80.82.66.111 was found on my laptop. I doubt why was this attempted. I think this IP by ECATEL is a malicious system attempting hacking to laptops. Where can I file complaint?...
80.82.66.111 - got port scanning from this ip 80.82.66.111
got port scanning from this ip 80.82.66.111
got port scanning from this ip 80.82.66.111
got port scanning from this ip 80.82.66.111
got port scanning from this ip 80.82.66.111...
46.29.250.212 - my pakage
why is my package ip in sweden and it suppost to be in holland could you guys contact deepak metha fie i need to know as soon as possible how my package ip adress got there...
58.218.199.227 - Portscanning and unauthorized http access
they attempted to access /ip.php from my webserver (file does not exist) along with a portscan around the same time.
this happened on jul 10th, 2012
...
74.63.192.66 - These are addresses, from which my Eset Smart Security 5 caught network attack: port scanning
58.218.199.250:12200
58.218.199.250:12200
58.218.199.227:12200
58.218.199.250:12200
58.218.199.250:12200
222.215.230.175:12200
195.114.250.112:10708
213.182.93.203:2532
58.218.199...
87.106.55.241 - Belépési próbálkozások szerverre
2012.07.10. - 07:30-kor megpróbált 2 (már nem használt) néven belépni a szerverre. Nem sikerült neki, me...
94.231.106.109 - Constant port scanning
My server keeps logging connection attempts from this same ip address, despite the fact that it is banned from connecting. How do you stop this type of activity?...
124.237.78.71 - repeated attempts per minute
/09/2012 15:28:07.688 - Alert - Intrusion Prevention - Possible port scan detected - 124.237.78.71, 12200, X1 -
this is a paste of my sonicwall device reporting from the chinese Ip address. Const...
153.19.169.90 - Port scanning
This IP is scanning ports on a server.. Not sure what its trying to do, but I see it hitting our router a lot. Thanks....
72.21.194.32 - Complaint about 72.21.194.32
engaging in SPAM, brute-force, DOS attack, phishing, or other fraud ...
64.37.60.116 - selling fresh cc cvv cvv2 dumps track pp wu transfer pp
IF YOU NEED, CONTACT ME BY
Yahoo : mayback.money
Mail : mayback.money@yahoo.com
CHAT WITH ME FOR FURTHER INFORMATION
------------- do WU Transfer -------------
Transfer : US,UK,CA,AU,EU,France,Ge...
10.13.244.36 - 9953
[DoS Attack: RST Scan] from source: 10.13.244.36, port 9953, Saturday, July 07,2012 22:17:29. This is according to my Netgear router log files today 7/8/12. What can I do?...
80.82.66.11 - Port Scanning
80.82.66.11 was detected port scanning through firewall and antivirus applications. The user attempted multiple directory look ups and additional password authentication attempts over several days. ...
67.205.67.167 - Port Scanning
This IP was Port Scanning and was detected by firewall applications. User attemped to query for open ports and access through applied password and directory phishing. ...
58.218.199.58 - 58.218.199.58
ports being scanned from : 58.218.199.58 ; 58.218.199.227 ; 58.218.199.250
WHOIS information for 58.218.199.58
[Querying whois.apnic.net]
[whois.apnic.net]
% [whois.apnic.net node-4]
% Whois data cop...
58.218.199.227 - IP Port Scanning
The IP address is repeatedly scanning my system. 50 Attempts within 3 minutes. They are trying multiple ports and all systems on my network. This sentence should finish the 25 word minimum text requir...
58.218.199.250 - Rogue DNS Servers from China IP Address Host:58.218.199.250
This bastard are monitoring all my actions in my computer.
IP Address Latitude:39.9289016724
IP Address Longitude:116.388298035
IP Address ISP: CHINANET jiangsu province network
Organisation: CHINANE...
157.55.102.249 - Xmas port scan attack
Jul 7 09:24:33 Xmas port scan attack from WAN (ip:157.55.102.249) detected.
From: Log record the activities occurring on the router. Attacks like these seem to slow down and let malfunction my route...
69.171.227.76 - Wmas port scan attack
Jul 7 08:58:52 Xmas port scan attack from WAN (ip:69.171.227.76) detected.
From: Log record the activities occurring on the router. Attacks like these seem to slow down and let malfunction my route...
74.120.140.23 - Xmas port scan attack
Jul 7 09:01:18 Xmas port scan attack from WAN (ip:74.120.140.23) detected.
From: Log record the activities occurring on the router. Attacks like these seem to slow down and let malfunction my router...
65.54.55.120 - Xmas port scan attack
Jul 7 09:06:38 Xmas port scan attack from WAN (ip:65.54.55.120) detected.
From Log record the activities occurring on the router. Attacks like these seem to slow down and let malfunction my router....
198.136.55.110 - atack
198.136.55.110 scan attack always netgear router ziggo bolsward vele malen per dag geeft log aan in configuratie instelling {eset firewal block }...
206.253.168.252 - Port scanning
Attacked twwice in 20 minutes. Web site show INTERNAP. Both UDP and TCP port scans. port ranges from 25k to 33k
word word word word word...
222.186.13.99 - Port scan
This specific IP has been port scanning me for the past 2 weeks or so, usually about 10-20 times a day. Doesn\'t seem like a random attack....
66.225.225.224 - Port scanning
Portscanning my IP and trying to randomly access ports. He probably got my IP off efnet IRC, where I\'m connected without a bouncer temporarily.
66.225.225.224 - - [06/Jul/2012:18:41:28] \"POST ...
58.218.199.58 - continual scanning from 58.218.199.58 port 12200
non stop for the last two weeks. Destination appears to be my ISP (BT 86.174.215.184) on a huge variety of ports.
Annoying, also is this traffic is coming out of my data allowance?...
46.29.255.122 - repeated
every 2 days this entity, from different IPs will port scan my systems .... cna\'t seem to find a good phone # or email to call ...
58.218.199.250 - hackers who want to gain acces to my computer
my fire wall outpost pro notice me that this ip scann my ports all days.
That\'s not the first time.. and imo maybe not the last..
...
58.218.199.227 - Port Scanning
I have noted on my firewall logs that this IP address constantly tries to port scan my network. I am reporting for your records....
64.31.14.106 - Port Scanning
I have been monitoring my firewall logs and have noted port scanning of my network from the address above. Submitting report for your records....
115.236.59.28 - Repeated scan of router ports.
Repeated scans of router from 115.236.59.28. Two examples of a problem that has occurred for about a week now.
Jul 4 13:33:19 IDS proto parser : tcp null port (1 of 1) : 115.236.59.28 * * * * 0060 TC...
124.237.78.71 - constant port scans
The offending ip is conducting Constant port scans of edge routers. This has been occurring over 4 days now. This sentence is to make enough words to post! Doh...
its coming on a week now. very weak attempts. Real bad business for OLQUAN.COM :
=======================================================
[00001] 2012-07-03 11:20:16 [Root]system-critical-00437: SYN an...
204.124.182.254 - VolumeDrive port scanning me
There has been a range of IP\'s belonging to VolumeDrive has been port scanning/Brute Forcing me for days. Luckily my firewall has blocked all attempts....
58.218.199.250 - 58.218.199.250
For several days now a computer with this address has been attempting to access my computer. My security app calls the attack a PORTSCAN. They are being block, but the frequency is shocking. Is there ...
115.236.59.28 - tcp null port
Jun 28 21:18:46 IDS proto parser : tcp null port (1 of 1) : 115.236.59.28 81.230.32.26 0060 TCP 0->0 [.F.R.P] seq 3029953125 win 80
Jun 29 02:42:58 IDS proto parser : tcp null port (1 of 1) : 115.2...
64.94.88.20 - question
HI ALL, I WOULD LIKE TO FIND OUT THE PORT OF THIS IP ADDRESS. IS ONTO HIM SOME MANNER THAT THIS TOO TUDJAM?HOL I CAN LOOK IT UP?...
58.218.199.227 - is scanning my ports
ESET SMART SECURITY DETECTED a port scan
CHINESE TERRORIST SUCK YOUR MOM DICK HIJOS DE PUTA.
Payasos de mierda a a a a a a a a...
70.38.54.89 - Port scaning from 70.38.54.89
scanned at least 20 ports at my computer on june 27 th
infomration from my modem :
DS scan parser : udp port scan: XXXXXXXX (my ip) scanned at least 20 ports at 70.38.54.89. (1 of 1) : XXXXX my ip ...
81.84.242.193 - a81-84-242-193.static.cpe.netcabo.pt
this source ip has
550 port scan attempts since May 29
and is targeting a specific host
even if it hasn\'t been able to cause any harm yet, is certainly up to no good.
Wonder who will be the next vi...
193.178.146.136 - 193.178.146.136 misbehaving port scan
Net Spy attack dropped
NetBus attack dropped
Back Orifice attack dropped
TCP XMAS scan dropped
TCP NULL scan dropped
port scan dropped
Net Spy attack dropped
NetBus attack dropped
again again...
161.139.101.11 - Unauthorized Port Scanning Attempt
My antivirus caught this IP trying to port scan my machine about 6 times. It all occured on Monday June 25th from around 6:30 to & AM EST / GMT-5....
213.87.131.241 - Unathorized Port Scan Attempt
BitDefender caught this IP trying to port scan my machine. Luckily it was denied before any damage could be done. The person only tried once, and was likely discourage unlike most others whom try this...
205.134.231.54 - Unauthorized port scanning by ip 205.134.227.54
Happened around 1 AM Indian Standard Time on 2012-06-27 from the IP 205.134.227.54
WHOIS shows below.
IP Address: 205.134.227.54
Source: whois.arin.net
Prefix: 205/8
Designation: ARIN
Status: ALL...
82.165.80.36 - SYN-FLOOD flooding attack from WAN (ip:82.165.80.36)
Latest in a line of port scanning attacks. On 18th May I was given a new router. My BB speed went up from 1.8 MB to 2.1 MB. On 21st of May I was unable to connect to the Internet. It was believed the ...
64.214.231.221 - Xmas Port scan attack
Multiple attacks of Xmas Port Scan from 64.214.231.221 > Repeated attacks are making my Internet Connection very slow, and sometimes I am unable to connect....
199.59.161.200 - Xmas Port Scan
I checked my Router Logs after my ISP said they couldn\'t help when my BB speed diminished by 1/3rd. Apparently 199.59.161.200 is targeting Talktalk members as others have the same on their Router lo...
58.218.199.227 - Brute Force of port scanning
This needs to be stopped. 9 times scanning to entry through many ports on my router. This is hankering method. Stop before can make further damages....
58.218.199.227 - Same this IP is constantly port scanning me.
Same problem happening to me. The ip address i traced back to china is doing constant port scans. It looks like this has been going on for quite some time. As i see other complaints. I think some of t...
124.237.78.71 - ip 124.237.78.71 ongoing port scanning
This IP Address has been scanning multiple ports on my router for now 7 days; the ports are random, but they have not stopped.
Example below:
=>Found attack from 124.237.78.71.
Source port is 1220...
58.218.199.147 - pain in the arse
continued port scans EVERY DAY for months. Very annoying. Looks like we\'re not the only ones seeing these guys. Will have to look at varying methods of returning the favour...
58.218.199.147 - 58.218.199.147 and friends...
This idiot wants judge.php so badly, so give it to him.
Rename a virus to \'judge.php\' and leave it where he can find it.
If enough people do this, at least we\'ll shut him down......
58.218.199.147 - been scanning my ports
its not just me they need to be stopped. Its not the first time and wont be the last I have posted before and there still at it....
91.213.203.203 - 91.213.203.203 misbehaving
Continuous Port scannings. Several a week. also involved in massive (25) attack from at least 25 different sources about a week ago. Please stop !!...
91.213.203.203 - scanned ports
Router warned me that
06/18/2012 03:32:05 ports scan TCP 91.213.203.203:4028 ATTACK
also scanned day before at 7 am.
I really do not see why I need to write 25 words the complaint is simple....
58.218.199.147 - possible automated port attack
getting hounded by attacks left, right, and center by IP address 58.218.199.147. Firewall successfully blocks it, but still, it gets annoying when my firewall keeps telling me it\'s blocking the same ...
82.103.128.111 - Detected at Router
Damned nosey *******. Why 25 words. Why 25 words. Why 25 words. Why 25 words. Why 25 words. Why 25 words. Why 25 words. Seems stupid??...
121.215.239.11 - Attack
Numerous attempts to find open ports
Time: Thu Jun 14 15:34:33 2012 +1000
IP: 121.215.239.11 (AU/Australia/CPE-121-215-239-11.static.qld.bigpond.net.au)
Hits: 11
Picked up by our firewall, ...
58.218.199.227 - please stop
I would like this ip address to please quit attempting to attack my computer and internet. It has been happening everyday I get on my computer and it is becoming very irritating.
Thank you....
58.218.199.147 - mickey taking
decided to return the favour with nmap see how they like it. anyone know who these guys are? let you all know what i find out. gotta put an rnd to this...
58.218.199.147 - Since February
These guys have been scanning me since February. All day, every day. They always use the same port 12200. Pretty stupid. They must have tried every port at least 8 times by now. They aren\'t getting i...
222.184.232.2 - F-Secure reported an intrusion attempt
See above, no more information was provided like which port(s); just that
it blocked the intrusion twice. Blocked the IP, running scan, I can\'t wait to turn china into a giant glass parking lot; tur...
89.149.242.175 - Constantly port scanning my pc
this site has been probing all night.
This is very annoying and its using up my CPU for nothing when firewall is blocking 100 attacks per second from this IP....
192.168.1.2 - port scanning from this ip address 192.168.1.2
i recieved a port scan attack today at 10:46 P.M. what can be done about this? this is the first time this has happened.thanks alot...
121.149.179.117 - Running Ports scans on me a few hours ago
Running Ports scans on me a few hours ago. Attempt every 1-5 seconds for about 5minutes. Covered a range of usual TCP ports. Have put on permanent total block....
61.237.17.89 - network attack every day
network attack .lock the ip address of 61.237.17.89. thanks in advance .everyday the network worm attack : Intrusion.Win.MSSQL.worm.Helkern . everyday the network worm attack : Intrusion.Win.MSSQL.wor...
58.218.199.147 - This IP is scanning my ports
This IP is repeatedly scanning my ports.
I have very high security but do not appreciate port scanners.
Please block this IP address immediately.
The ISP is allowing this to continue.
Again, please bl...
58.218.199.147 - Port Scanning
Non-stop port scanning day after day on my personnal internet coonection.
There are nothing to hack on my computer except my holiday photos.
But if they really want my photo, I can sent one by email t...
88.243.68.230 - Port Scans
Yet more port scans from Turkish IP 88.243.68.230 - bursts of three spaced a few minutes apart and continuing over a period of an hour. Each rejected by my firewall. ...
58.218.199.227 - scanning my ports 4 times within the past hour
scanning my open ports...my bitdefender 2012 total security detected it and i think malwarebytes anti malware may have mentioned something as well. It says remote ip 58.218.199.227 and a local ip belo...
64.190.75.194 - ABUSE
This IP Address has been on my site every hour on the hour the IP is:
64.190.75.194
This is my 1st complaint, hopefully this will resolve the issue because this is not normal behavior....
125.45.109.166 - port scanning
port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning port scanning...
61.51.18.235 - Agent Morfeus Fucking Scanner Ref
Host Addr 61.51.18.235 IP 61.51.18.235 Agent Morfeus Fucking Scanner Ref. running scan across multiple ip address at multiple times looking for vulnerabilities in .php...
88.243.68.230 - TCP connection blocked
My firewall reports Port Scan events from Turkish IP address 88.243.68.230 immediately after Turkish IP address 85.97.19.246 was blocked by my system: coincidence? I doubt it!...
85.97.19.246 - Numerous Port Scan events
My firewall reported 6 Port Scan events from IP address 85.97.19.246 within a few seconds yesterday. This not the first time 85.97.19.246 has scanned my system trying to gain entry. ...
124.237.78.71 - Hitting Multiple Ports on Router Constantly
Hitting Multiple Ports on Router Constantly. This ip has been hitting my router every few second for I don\'t know how long. I\'m not sure what to do. ...
77.127.228.85 - Eset Detected Unexpected Data in Protocol
Eset Detected Unexpected Data in Protocol
Eset Detected Unexpected Data in Protocol
Eset Detected Unexpected Data in Protocol
Eset Detected Unexpected Data in Protocol
Eset Detected Unexpected Data in...
173.194.43.7 - Probable TCP FIN scan detected
06/04/2012 10:18:22.784 EST
SONICWALL Alert Intrusion Prevention
Probable TCP FIN scan detected
FROM Source IP: 173.194.43.7, 443
TCP scanned port list, 31237, 34269,
27635, 65254, 52593, 60978, 11...
216.17.102.194 - Port Scanning
IP 216.17.102.194 carried out a port scan today 4th June 2012 on my file server. Log entries don\'t contain any User-Agent information. hello hello hello hello....
58.218.199.250 - DOS attacks reported by firewall
multiple attempts to enter my network, testing a range of ports, erratic timing one every minute of so, then nothing for 12 hours.
One of several related URLs (.250 / .147 / .58 for example)...
66.220.149.94 - Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
Xmas Port Scan Attack
...
69.197.18.194 - SYN-ACK port scan attack
SYN-ACK port scan attack from wan, SYN-ACK port scan attack
SYN-ACK port scan attack
SYN-ACK port scan attack
SYN-ACK port scan attack
SYN-ACK port scan attack
SYN-ACK port scan attack...
216.17.102.194 - port scan
port could having something to do with vnc which i don\'t run http://www.dragonresearchgroup.org/insight/vncprobe.txt
i hate typing 25 words the end xx twenty five twenty five one...
123.62.24.246 - Nmap port scanning
Has tried several time to Nmap port scan my computers on my network. My firewall stopped it many times in the last couple of days...
24.101.16.33 - Locks like a Trojan...
TCP ports 1149, 1148, 1146, 1150 and 1145 have been scanned from 24.101.16.33.
Then I got a critical event from Symantec saying I got an active response from them....
58.218.199.58 - 58.218.199.* subnet Port Scanning
Had this happen about 10 times in the past 2 hours from the same subnet but just a different octet at the end, BitDefender is constantly telling me a port scan has been blocked and its always this sub...
58.218.199.147 - port scanning on and on and on
this IP is scanning my ports on and on and keeps going for weeks.
Is there a chance to get rip off this guy or program?
Is it criminal or just an idiot?
...
58.218.199.58 - 58.218.199.58 and it's other ips
Keeps scanning my ports and then recently I came up with a nasty malware hard to get rid of despite my supurb anti-virus and other security. My security suite was disabled:
58.218.199.58
58.218.199...
188.130.251.9 - Port Scanning 3389
I have a problem with this IP. Malwarebytes log: IP-BLOCK, 188.130.251.9 (Type: incoming, Port: 3389) and IP-BLOCK 188.130.251.12 (Type: incoming, Port: 3389) 20 times in one day...
58.218.199.58 - port scanning
this person has attempted to scan my ports twice in two hours. I am sick of this person. Someone must make a move to neutralise them. Do it, do it now!...
193.227.46.18 - Port scanning on my client's firewall
This user has been performing a port scanning on my client\'s Firewall. Whatever their intentions, this has to come to an end. Tired of these malicious users with bad intentions....
92.39.130.35 - Port Scanning, irritated with this IP
This IP has been port scanning on my firewall and this is very irritating. This unruly person needs to stop. Whatever intentions, they need to stop this....
173.93.146.190 - You're knocking but you can"t come in
There has been port scanning 24/7 from this IP 173.93.146.190 and IP 58.218.199.250 since time warner replaced modem on May 14, 2012.
Stop please!...
206.253.168.252 - UDP port scans
Occasional UDP port scans from 206.253.168.252 have now become constant.
Not sure what they are looking for but we are dropping all packets from this address....
58.218.199.147 - port scans every hour
My firewall registers a scan from china practically every hour.
My accounts were compromised last month by someone in china, i doubt that this is coincidence....
58.218.199.58 - numerous times each day this ip address pops-up
Please terminate this idiot this ip address is popping up in my report allmost everyday. This is one of a black list and our provider does nothing to terminate this kind of problems...
58.218.199.58 - Damn it
Port scanned my home network several times in one week (that I checked). Seems to come in the early evenings, Pacific Coast time....
85.97.19.246 - TCP connection blocked
My router reported numerous port scans from IP address 85.105.211.6 when these failed IP address 85.97.19.246 scanned my system and was also blocked by the firewall....
85.105.211.6 - Sustained port scanning
My router reports numerous port scans from IP address 85.105.211.6: TCP connection blocked on 6 occasions within 20 minutes. Log alert generated at each attempt. ...
205.152.37.23 - Stop now!
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.37.23
Time at last attempt : 5/25/12 08:49:09 AM
Number of po...
85.214.234.163 - Multiple events from this IP address
My router reports daily port scans from IP address 85.214.234.163 - presumably this user is trying to infiltrate my system. Intrusive port scanning is not welcome, action need to be taken against abus...
89.211.244.6 - hassan
hack PLEES HELP ME ANY ONE SIR
from this ip yesterday at 11.59 somebody open my gmail and face book change the profiles . please s...
...
65.130.176.117 - I was port scanned from this IP address
Hi there,
I am an IT professional and had my system port scanned from this IP address.
I am worried for my personal and professional security as i work for an international media company.
Please do ...
58.218.199.58 - multiple portscan from IP 58.218.199.58
daily portscan from this IP range 58.218.***.*** TP ports and try to flood Ports
after 10 scans my firewall blocking IP and save IP this in LOG File !
...
208.87.32.69 - REPORT IT !
208.87.32.69
This link will take you to the Secure Hosting Ltd.
(who own the Host network this IP is on)
to report this Nasty Bugger.
http://www.securehost.com/contactus.php
You can copy paste from...
58.218.199.147 - Continuous Port Scanning
Continuous Port scanning on multiple ports. Has ben on all our IPs for some weeks. We have now blocked entire subnet range on border firewall.
...
81.169.129.106 - 81.169.129.106
81.169.129.106 port scanning detected by ESET Smart secuirity.
I\'m going to call them and ask for an explanation. If they have no valid reason for doing this I will report tem to the authorities.......
58.218.199.58 - IP # 58.218.199.58
I receive constant scans every day, all day. I am assuming that these are port scans. There are also numerous others from the same IP block....
208.80.48.112 - This IP keeps port scanning me
05/15/2012 12:45:27.112 Alert Intrusion Prevention Possible port scan detected 208.80.48.112, 80, WAN , 41902, WAN TCP scanned port list, 40247, 54653, 35501, 59442, 62282
I don\'t understand why cap...
183.60.136.41 - tcp null port
May 18 02:36:07 IDS proto parser : tcp null port (1 of 1) : 183.60.136.41 81.228.153.62 0040 TCP 0->8264 [...R..] seq 553062165 win 0 ...
183.60.136.52 - tcp null port
May 18 02:42:41 IDS proto parser : tcp null port (1 of 1) : 183.60.136.52 81.228.153.62 0044 TCP 0->11106 [S.A...] seq 4154646626 ack 337431040 win 5840 ...
58.218.199.250 - 58.218.199.250 intrusion
there\'s port scanning back to back from 58.218.199.250 IP, what can be done to stop this intrusion? not interested, go away. It should be illegal...
58.218.199.58 - Port Scanning attack
This is annoying. I started getting warning from my virus scanner about
Port scanning attack 58.218.199.58 but also
58.218.199.250 and 58.218.199.147
Must be same source
...
200.144.31.37 - udp
uhhh lol
CIA PROC. DE DADOS DO ESTADO DE S PAULO- PRODESP
idk anything with that 3 letter word is screwed. port scanner caught it... i blog heavy but still wow??...
207.200.59.179 - DOS Attack: ACK Scan
This is a mess. Started like a day or so after I began hosting a minecraft server for a friend. Either the friend or the friend\'s brother logged into the server nearly immediately upon me giving the ...
58.218.199.58 - 58.218.199.58
We have been getting portscanned by this IP for a long time. I\'ve complained about it on other sites. Can anything even be done? ...
58.218.199.147 - use software against 58.218.199.147
for all you guys complaining about constant intrusion from 58.218.199.147, use fail2ban. I use it, and if I get so much as a sniff from any ip that\'s trying to intrude they get automatically banned f...
58.218.199.227 - multiple port scanning detect
multiple port scanning detect for several days
source 58.218.199.227:1200 to 192.168.0.2 on port (7212, 8080, 2479, 9000, 2301,1080, 8123, 8090, 7212, 9090, 8000, 8118, 8008, ...)...
58.218.199.58 - multiple port scanning detect
multiple port scanning detect for several days
source 58.218.199.58:1200 to 192.168.0.2 on port (7212, 8080, 2479, 9000, 2301,1080, 8123, 8090, 7212, 9090, 8000, 8118, 8008, ...)...
58.218.199.147 - firewall detect port scanning
multiple port scanning detect for several days
source 58.218.199.147:1200 to 192.168.0.2 on port (7212, 8080, 2479, 9000, 2301,1080, 8123, 8090, 7212, 9090, 8000, 8118, 8008, ...)...
58.218.199.227 - port scanning
Recently recieved alerts from my personal firewall about a port scanning attack on my personal machine. from this IP address occurred:
1:05-1:10 pm AK (Alaska time) time 5/11/2012...
58.218.199.87 - Getting scanned continuous
These guys are relentless. Port scanning all over the place. Land Attacks. China gone bad. Constant alerts. They are trying all sorts of things to hack....
58.218.199.250 - Unending port scans from 58.218.199.250
Can this be stopped. I am getting almost continuous port scans from this IP. Is there any way to stop this. ...
218.15.221.82 - Port Scanning from China
Constant port scanning from china based on my security log in Linux. I will contact my ISP and see if there is anything they can do....
121.88.201.59 - tcp syn scan
May 9 21:46:03 IDS scan parser : tcp syn scan: 121.88.201.59 scanned at least 20 ports at 81.228.153.71. (1 of 1) : 121.88.201.59 81.228.153.71 0044 TCP 44709->976 [S.....] seq 3788983629 win 4096 ...
58.218.199.227 - Port Scanning
I am being port scanned numerous times per day for the last several months from this IP address. Please shut it down! This is annoying!!!...
58.218.199.147 - 58.218.199.147
I\'m getting port scans almost daily from this Chinese IP address, it is annoying and I wish something could be done to stop it, it doesn\'t exactly speak well of China....
62.181.50.144 - кухни на заказ,шкаф купе на Ð&mi
кухни на заказ www.kuhnishkaf.ru.мебÐ&m...
74.208.70.41 - Proxyfire is a nasty scanner
They scan the entire world. Although they say that they just want to find open proxies, they use to scan ports where you wouldn\'t expect a proxy to be active. Therefore, their true intentions are muc...
62.244.25.75 - 62.244.25.75
0:10:43
62.244.25.75
Узел заблокирова...
58.218.199.147 - Detected Port Scanning
My antivirus always detect Scan Port Attack with this adress.... Its annoying and i don\'t know where is it from... any idea? Because i\'m affraid....
58.218.199.227 - Port Scanning
58.218.199.227
Port scanning from the above IP address.
Why don\'t you tell us who you are? Or, are you afraid to? Show your face here and tell us what you want....
188.130.251.9 - Port Scanning 3389
Port Scanning 3389 remote desktop from this IP 10+ times multiple times in one day, only one of many picked up by malwarebytes over many days...
212.153.88.73 - TCP Port Scan
Scanned > 10 ports unsolicited at my IP without permission. This behaviour is indicative of abuse or of compromised/unsecured equipment or malicious intent that needs to be rectified....
58.218.199.147 - PORT SCANNING
HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANN...
58.218.199.147 - On-going scanning for several days
I am being port scanned multiple times per day for the last several days from this static IP address 58.218.199.147. Please shut it down!...
192.168.1.5 - can't log into 192.168.1.5
Hi, I haven\'t been able to log onto the above site. comes up as unable to connect.
My email address is cathy@travelhome.com.au
If you can assist asap, that would be great.
Thanks,
Cathy Dutch
Travel...
61.183.41.104 - Scanning for SQL Injection
61.183.41.104 - - [29/Apr/2012:02:25:04 +0300] \"GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1\" 302 479 \"-\" \"ZmEu\"
61.183.41.104 - - [29/Apr/2012:02:25:04 ...
58.218.199.147 - hacking
Why is China trying to hack my computer? They should be blocked. They are making a mess out of our internet in America....
222.66.23.98 - 4 port scan attempt
4 times today.
Iako je Mletacka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala je pjesma o njihovom junastvu što ju i danas prenose goli kamen i senjska bura: \&quo...
222.66.23.98 - Port scan atempt
Third time today.
Iako je MletaÄka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala je pjesma o njihovom junaÅ¡tvu Å¡to ju i danas prenose goli kame...
180.169.38.2 - Port scan atempt
Got port scan from this ip. 180.169.38.2
Iako je MletaÄka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala je pjesma o njihovom junaÅ¡tvu Å¡to ju i d...
222.66.23.98 - Port Scanning
I was reading about Project MKULTRA on wiki when i get warning for port scan. Just get the second port scan from this ip when writhing this.
...Cuvaj se senjske ruke......
78.52.204.138 - scanning our firewall
 #  Time Priority Category Message Source Destination Notes Rule
1 05/02/2012 01:39:15.480 Alert Intrusion Prevention Probable port scan detected 78.52.204.138, 64253, X1 50...
58.218.199.147 - 58 218 199 147
Any provider to such persons that are in the habit of attacking other
computers should have his license revoked so others can enjoy the
privacy and freedom provided. This beijing isp is offensive a...
87.56.40.99 - Access Violation from 87.56.40.99 with TCP (port = 21)
Access Violation from 87.56.40.99 with TCP (port = 21) - and other ports.
Repeated logon attempts at port 80, 21 and other ports.
Please take proper action....
209.53.113.223 - We detected a port scan from this IP.
The scan is not authorized. We would like it to stop. Scan your box for possible malware. It could be infected and you not know about it. We\'ll report it to the proper authorities....
58.218.199.147 - Endless port scanning
Same complaint as all on here, endless port scans and DOS, seems like complaints about this ip go back years...not just some teen script kiddie, morelike a govt sponsored hacking factory!...
209.222.129.171 - Firewall Warings for probe2.cirn.net
This host made a portscan on portrange 33449 - 33457 on different hosts, hosted by hetzner.
Be aware, and block his ip.
IP: 209.222.129.171
probe2.cirn.net
abuse using is assumed......
58.218.199.250 - Everydary port scanning info
I get everyday Detected Port Scanning attack 58.218.199.250 information 2 or 3 times a day, It is annoying. Can anyone do with that something? ..ufff...
58.218.199.147 - Multiple port scanning on several days
This IP subnet 58.218.199.x is port scanning on a daily basis and we have blocked it at our border firewall to prevent any more attempts....
61.139.105.163 - Scanning port
250 times a day! stop this! complete pain. This has been going on for over a year... most of the time it is just twice a day, but otherr times it is in the hundreds, as it is to day....
87.56.40.99 - Access Violation from 87.56.40.99 with TCP (port=21)
Access Violation from 87.56.40.99 with TCP (port = 21) - and other ports.
Repeated logon attempts at port 80, 21 and other ports.
Please take proper action....
174.129.112.195 - Null port scan
Apr 23 23:39:57 IDS proto parser : tcp null port (1 of 1) : 174.129.112.195 81.228.154.61 0060 TCP 0->0 [....UP] seq 1548876217 win 31785
Apr 24 00:35:37 IDS proto parser : tcp null port (1 of 1) ...
221.192.199.46 - Subject looking for openings
The site 221 192 199 49 is annoyingly port scanning and an irritant to
many ,according to the reports given.
The provider of such site should see that any licence to enjoy such freedom
of the interne...
66.160.174.179 - 66.160.174.179
april 25th 2012 port scannig from this ip 66.160.174.179
blocked by the antivirus. Hurricane Electric is the internet backbone and colocation provider. why they do that?...
58.218.199.147 - Reachable on rdp
If anyone has the knwoledge or feels like giving it a shot to try and close this server, this bastards are open to reach with remote desktop. It\'s a windows enterprise server 2003. ...
210.51.37.80 - Ongoing port scan
Ip address is continuous scanning ports. Could this be blocked ?
Ip address is continuous scanning ports. Could this be blocked ?
Ip address is continuous scanning ports. Could this be blocked ?...
58.218.199.147 - portscaning my server
Maybe we should nuke em\' ... Seems portscannin is an habit from this IP and a few others with the same Class C IP....
81.52.143.34 - Repeated Port Scanning
Repeated Port Scanning from IP 81.52.143.35
Repeated Port Scanning from IP 81.52.143.34
Repeated Port Scanning from IP 81.52.143.16
Repeated Port Scanning from IP 81.52.143.15
Repeated Port Scanning f...
58.218.199.227 - Repeated Port Scanning
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.147
Repeated Port Scanning from IP 58.218.199.250
Port scanning Port scanning Port scanning Port scanning Port ...
I am noticing a port scan on one of my firewalls, which has generated an alert. TCP scanned port list, 63459, 63459, 63459, 63461, 63459 It appears that my firewall has dropped the connection, but ...
199.30.80.32 - 199.30.80.32 is from Stumbleupon
TCP scanned port list, 50480, 3089, 28586, 36683, 35247, 38199, 9694, 28795, 57700, 17141. Receives LOTS AND LOTS of ports scan from them always coming from this particular ip address. I will block ...
221.192.199.49 - Person is constant doing portscans
Someone is by or via this IP (221.192.199.49) trying to do port scans.
I ask you kindly to prevent this person to do such thing.
I\'ll also report this to our government...
166.205.137.232 - Persistent Port Scanning, ICMP Attacks
I\'ve reported this user numerous times to the ISP contact, nothing has been done to date and persistent port scanning and ICMP requests continue, my network has not yet been compromised, but this 1 I...
60.211.241.253 - detected port scanning
detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port sc...
58.218.199.87 - hackers
many security alerts from this ip addy, mostly port scans and trying to access TCP Port: 6515, TCP scanned port list, 27977, 8085,
9415, 2479, 8008 ...
58.218.199.147 - This IP has been port scanning my address.
My SonicWALL has been picking up port scanning from this IP since 4:11PM EST 4/18/2012. I have had multiple attempts to port scan since then.
Please take appropriate action.
Probable port scan detecte...
192.168.0.198 - Port scan from IP 192.168.0.198
IP:192.168.0.198 is scanning steadily all my ports. High activity is observed the scans were reported by my firewall. What can I do to stop this attac?...
175.180.108.163 - sonic firewall wrnings
we are getting a number of port scans against our firewall, and this is one of the addresses that has been used. is there a way to stop this?...
113.193.203.140 - complaint
hi this ayush gupta from indore madhya pradesh india, my firewall have just detected a port scanning attack from this ip adress 113.193.203.140 thanks ...
58.218.199.87 - Still scanning.
This IP and a few others in it\'s /24 have been scanning our services at a low rate for quite a while now. They keep hitting the same ports again and again, kinda weird. Since many of my customers wil...
208.83.20.130 - Port scan attact
This user is trying to hack into a UC Berkeley Account
This user is trying to hack into a UC Berkeley Account
This user is trying to hack into a UC Berkeley Account...
199.30.80.32 - Hacking?
199.30.80.32 is from Stumbleupon. Why are they port scanning us on ports:
TCP scanned port list, 29852, 50206, 14844, 25294, 27421. Are they hacking?
I\'m going to report this to our isp to see what t...
208.83.20.130 - Port Scan?
This IP showed up on my peerblock logs, trying to connect via ascending port number in what I could only assume was a port scan. Worse, since it started, it just starts over eventually, been hitting m...
79.138.3.84 - Port Scanning TCP:23
Port Scanning TCP:23
16 april 2012 16:05:56 Unrecognized attempt blocked from 79.138.3.84:1951 to 79.139.102.130 TCP:23
16 april 2012 16:05:56 Unrecognized attempt blocked from 79.138.3.84:1951 to ...
201.55.62.10 - Firewall detected an all port scan attack from 201.55.62.10
Our Firewall detected, almost daily, an all port scan attack from 201.55.62.10 ( Cia Proc. de Dados do Estado de S Paulo - Prodesp )Â Â Â
...
58.218.199.227 - Repeated Port Scanning
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Sc...
Over the last week, I\'ve observed 756 events... trying to connect to ports 6515, 36081, 8085. Being scanned is normal I think... but this has been about 150 packets per day for a week. Just find it...
184.173.195.64 - incoming TCP packet
incoming TCP packet from 184.173.195.64:80 to 94.215.181.229:48301 as SYN:ACK received
There have been several attempts at port scanning of our network by this IP address (184.173.195.64) over the p...
221.1.220.149 - Port scans from this range/ company
Illegal issues that I will complaint to justice. This is a criminal attitude intolerable. This scum deserves punishment by the authorities and cease to harm others. My strongest rejection to such crim...
91.205.41.175 - No need for this
IDS proto parser : tcp data on syn segment (1 of 2) : 91.205.41.175 81.228.156.211 0040 TCP 80->58998 [S.A...] seq 283376389 ack 1 win 65535...
221.192.199.49 - port scanning abusive behavior
yes i would like to stop by and report the following ip being used for scanning ports across the internet leaving dropped packed called in a router log. its been known to communicate with virus infect...
58.218.199.227 - port scanning / hacking
ip has been doing the following activity.
port scanning and dropped packets.
i would like to follow a complaint as ive been getting over 100 scans per day or more and would bet theres a compromised bo...
58.218.199.87 - Port Scanning
I have this in my router log too. No idea why this Chinese IP is trying to access my computer on port 36081 and 6515...
58.218.199.227 - Port Scanning
Over 70 Port scans from this IP address just this weekl
Just a home user, not sure the reason for all the scans
Need three more words....
58.218.199.87 - Blocked incoming TCP connection request
Because my pc had connection issues for the last half year i checked my connection logs in my router and found mainly this ip adress and some others trying to get into my system. It shows \"Block...
72.21.211.191 - ACK Scan and FIN Scan
This site is reported in my netgear router\'s log as having performed two separate DoS attacks using ACK scanning and FIN scanning. This is one of several sites reported for the ACK scans, along with ...
46.127.92.213 - ACK Scan
This site along with several others is reported in my netgear router\'s log as having used ACK scan packets to engage in a DoS attack. This is in addition to a long list of sites being denied ICMP_ech...
64.98.36.135 - ACK Scan
I found this site reported in my netgear router\'s log as having engaged in a DoS attack using ACK scans. This is in addition to a large number of ICMP_echo_req packets from a number of different site...
125.45.109.166 - 125.45.109.166 Port Scanning
ports scan 73, 1080, 2301, 2479, 3246, 6515, 6588, 7212, 8000, 8008, 8085, 8088, 8090, 8118, 8123, 9000, 9090, 9415, 27977, every day several times....
72.21.214.149 - ACK Scan
This site was reported in my netgear router\'s log as having engaged in a DoS attack using ACK scan packets. This is in addition to a long list of ICMP_echo_reqs being denied....
70.109.150.183 - ACK Scan
This site was reported in my netgear router\'s log as having engaged in an ACK scan DOS attack. This is in addition to a long list of sites being denied ICMP_echo_reqs....
72.21.214.149 - ACK Scan
This site was reported in my netgear router\'s log as having engaged in an DOS attack using an ACK scan. This is in addition to a long list of sites being denied ICMP_echo_req pings....
64.98.36.135 - ACK Scan
This site was reported in my netgear router as having made a DoS attack using ACK scanning. This attack was in with a long list of ICMP_echo_reg denials....
66.220.145.46 - No need for this
IDS scan parser : tcp port scan: 66.220.145.46 scanned at least 10 ports at 81.228.156.211. (1 of 1) : 66.220.145.46 81.228.156.211 0323 TCP 443->52504 [..A..P] seq 1903576075 ack 2871079957 win 23...
58.218.199.147 - port scanning
port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port...
port scans from this range/ company several times these past months. What does this company do, or is it private individuals trying to glean info by port scanning?!...
189.114.238.196 - Port scaning from few days
11 kwiecień 2012 22:52:16 Unrecognized attempt blocked from 189.114.238.196:37530 to 79.139.102.130 TCP:23
11 kwiecień 2012 22:52:20 Unrecognized attempt blocked from 189.114.238.196:375...
92.52.76.67 - Blocked for porta scaning
11 kwiecień 2012 23:03:02 Unrecognized attempt blocked from 92.52.76.67:11968 to 79.xxx.xxx.xxx UDP:33438
11 kwiecień 2012 23:03:07 Unrecognized attempt blocked from 92.52.76.67:11968 to...
125.45.109.166 - 125.45.109.166 Port Scanning Attack
I\'m getting annoying port scanning attack from this IP address every 1/2 hour. I\'m sick and tired of it and it needs to be stopped at once.
...
58.218.199.147 - proxy judge.php, bandwith stealing
iptables firewall for 2 years and they sill try my domain 30 times a day... my router fw just drops the connection but they persist...
iptables -I FORWARD -s 58.0.0.0/255.0.0.0 -j logdrop ...
58.218.199.147 - Attack from 58.218.199.147 on several ports of my computer
Refport drom Norton Firewall about this computer :
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
10/04/2012 23:46:45,Info,\&quo...
176.227.211.181 - 176.227.211.181 repeated scanning many times per second
Apr 11 06:30:14 host1 named[381]: client 176.227.211.181#27966: query (cache) \'isc.org/ANY/IN\' denied
Apr 11 06:30:14 host1 named[381]: client 176.227.211.181#16996: query (cache) \'isc.org/ANY/IN\'...
58.218.199.227 - SEVERAL ATTACKS IN 3 DAYS
I HAVE HAD OVER 37 ATTACK ATTEMPTS IN THE LAST 3 DAYS FROM THIS ip ADDRESS Please make the harrassment stop now it is freezing up my computer...
91.121.3.57 - Attack on financial institution
Symantec Report:
Somebody is scanning your computer. Your computer\'s TCP ports: 6667, 6662, 6668, 6661 and 6664 have been scanned from 91.121.3.57.
The client will block traffic from IP address 91....
58.218.199.147 - is there no way to stop this
switches IP every few minutes also seen on
58.218.199.250,
221.1.220.149,
please do something about this jerk
^ as above ,really pissing me off,day in day out same thing ,every day....
58.218.199.147 - Port Scanning
I have lot of scan from this adress: 58.218.199.147
SCAN (18797, 10275, 44556, 33315, 16415, 64776, 36895)
Many times by hour !
Why China Telecom (Beijing) scan me ?
...
58.218.199.147 - Endlessly scanning for open ports on my computer
This computer is endlessly searching my computer for open ports and I think that is creepy. I wish they would stop and I am not sure why you have a 25 word minimum for complaints. I was done after abo...
58.218.199.147 - port scan
they just tried to get into my pc through my fire wall, major attack, my eset caught it in a flash, dont know what to do, eset do sth!! ...
66.42.201.218 - Unknown inbound session stopped
I have received about 250 firewall alerts the past two days for this IP on various ports in the 1000-4000 range. Will try about three times on a particular ports, then waits about 30 minutes and moves...
58.218.199.227 - Network attempts
This ip constantly attacks at my network currently kept out by my router, this is pretty rediculous. Can these people not be stopped I have no games running for it be looking for nor do I have any oth...
91.131.3.57 - To jakiÅ› czubek
Nie rozumiem dlaczego ludzie sÄ… tak gÅ‚upi, że starajÄ… siÄ™ atakować innych... oraz nie rozumiem dlaczego tutaj musi być minimum 25 sÅ‚Ã&s...
109.122.223.231 - IP: 109.122.223.231 (IR/Iran, Islamic Republic of/-)
Time: Sat Apr 7 12:23:14 2012 +0400
IP: 109.122.223.231 (IR/Iran, Islamic Republic of/-)
Hits: 11
Blocked: Temporary Block
Sample of block hits:
Apr 7 12:22:56 blade kernel: Firewall: *T...
46.251.237.226 - Port scanning mu router
This IP was doing a port scan on my router. Unable to track origin of IP. I can ping the IP and do tracert. ...
173.194.70.16 - From GOOGLE???
Apr 7 14:16:08 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 61.176.193.225:80 to 77.86.194.26:50815
Apr 7 14:18:18 HackAttack: [SPI:Illegal connection state attack] TCP ...
61.176.193.225 - Try's to find open port to my LAN.
Constant port scanning, gets anoying. Asshole has been trying for days.
Latest firewall alert.
Apr 7 14:16:08 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 61.176.193.225:8...
125.45.109.166 - 125.45.109.166 Port scanning
From 221.192.199.49 - 69 packets to tcp:
(73,1080,2301,2479,3246,6515,6588,7212,8000,8008,8085,8088,8090,8118,8123,9000,9090,9415,27977)
Port scanning Port scanning Port scanning Port scanning Port ...
58.218.199.227 - Port scanning
Port scanning my server on several (mainly http(s) related) ports.
63 packets to tcp:
(73,80,1080,2301,2479,3246,5390,6588,7212,8008,8080,8085,8088,8090,8118,8123,9000,9090,9415,27977)
Port scanni...
209.15.236.190 - ZmEu.Vulnerbility.Scanner
date=2012-04-05 time=19:53:31 type=ips subtype=signature pri=alert severity=low carrier_ep=\"N/A\" profilegroup=\"N/A\" profiletype=\"N/A\" profile=\"N/A\" s...
58.218.199.147 - 58.218.199.147
getting this reported by norton free trial 2-3 times a day ,was really worried and paranoid ,feel a bit better it\'s a common attack and it reported here but have installed and scanned 4-5 top free av...
58.218.199.147 - Port Scanning
58.218.199.147 keeps scanning me. ESET is constantly warning me that I am being scanned by this and a few other IPs. It is really pissing me off. This happens multiple times every day....
123.62.24.246 - Port Scanning
Multiple times a day, every day, port scanning reported from my firewall. The IP address is from China IP 123.62.24.246. Tried to query server but no response, Unknown if this was a malicious attempt ...
58.218.199.147 - more port scanning
sent judge.php
agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Not many others seem to see the judge.php request from this ip with the port scan? Perhaps multiple attack strategies?...
58.218.199.147 - Port Scanning
Port ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ...
184.173.195.64 - Intrusion attempt
There have been several attempts at port scanning of our network by this IP address (184.173.195.64) over the past several days. 04-01-2012 to 04-04-2012. ...
58.218.199.147 - Continued Port Scans from this IP.
Get alot of port scans from this IP. and a few others. I think we should all repay the compliment by port scanning them back. or better still.... I think we should all send him a continued Ping of dea...
209.15.236.190 - Port scanning servers in my DMZ
date=2012-04-04 time=04:30:44 devname=AAOMSFW01 device_id=FG300B3910602911 log_id=0419016384 type=ips subtype=signature pri=alert severity=low carrier_ep=\"N/A\" profilegroup=\"N/A\&qu...
77.235.14.13 - Detected Port scanning attack
This person is trying to scan my ports so that he can gain access to my PC. Please try to stop this person from doing this again...
209.15.236.190 - ZmEu.Vulnerability.Scanner
date=2012-04-02 time=20:14:59 devname=FGT60C3G10001974 device_id=FGT60C3G10001974 log_id=0419016384 type=ips subtype=signature pri=alert severity=low carrier_ep=\"N/A\" profilegroup=\"...
58.218.199.147 - Port Scanning attack
My firewall detected a Port Scanning attack from this IP address.
Complaint complete Complaint complete Complaint complete Complaint complete Complaint complete Complaint complete Complaint complete...
58.218.199.147 - 58.218.199.147 misbehaving
at least two or three port scans each day, how can this IP be blocked??? Who ever this is in China is obviously up to no good and should be blocked....
58.218.199.147 - somebody scanns my ports all day long
I complain about this user IP.
This IP scanns my port all day long for months now.
How could I stop this???
Is it a single person or an engine?
Regards
Klaus
Germany...
58.218.199.227 - this IP keeps attacking my PC
this IP keeps attacking my PC. ESET antivirus shows me a popup windows about every 3-4 minutes, 24 hrs a day, 7 days per week.
any one can do anything about this? ...
125.45.109.166 - Port Scan
lert Intrusion Prevention Possible port scan detected 125.45.109.166, 12200, X, hn.kd.ny.adsl 172.16.2.10, 6588, X TCP scanned port list, 27977, 8085,
8088, 73, 312 lert Intrusion Prevention Possible...
58.218.199.147 - found in log in small test server
They attempted to do something, but according to the log if failed whatever it was. Perhaps it was the fact it was a Linux server and php is not functioning....
58.218.199.147 - Trying to Access external Urls
Like everyone else, it\'s still going and trying to get stuff like:
http://www.hardjob.net/proxyheader.php
It\'s very annoying, and so I just moved apache to a different port. No activity after that....
216.218.239.22 - My ports are being scanned
This IP address is scanning my ports and sending phishing emails to get into my federal student loan information. Hurricane Electric is the internet backbone and colocation provider....
88.214.207.38 - Null port scan
IDS proto parser : tcp null port (1 of 1) : 88.214.207.38 81.228.157.171 0040 TCP 0->865 [..AR..] seq 0 ack 1555227793 win 0
No need for this!...
188.116.3.177 - Port Scanning
I gat antivirus warning A port scan was detected Local IP: ... Remote IP: 188.116.3.177.Protocol: TCP ....
Iako je MletaÄka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala...
75.127.150.106 - ANOTHER ASSHOLE SCANNING MY PC
4:16:35 PM Block IN TCP 75.127.150.106 35793 86.127.74.46 210 SYN Blocked by the Attack Detecton component
4:16:32 PM Block IN TCP 75.127.150.106 35793 86.127.74.46 210 SYN Blocked by the Attack Detec...
58.218.199.227 - 58.218.199.227 & 221.192.199.49
Same thing from both address\' what good does complaining about them if no one can do anything about it? Just keep those firewalls up!!
3/23/2012 19:43 Incoming TCP 58.218.199.227 88-DD-20-00-01-00 12...
96.57.7.186 - hundreds of bad logon attempts
logon type 10 from this source address using different ports. logon audit failed attempt. I have hundreds of bad logon attempts from this ip address attempting to compromise the server...
122.224.18.59 - bad logon attempts to server
numerous logon attempts and port scans from this address. The servers event viewer reports hundreds of these at logon type 10 with this source address...
89.149.242.175 - Port Scans
This ip and portscans indicates that you have ie Utorrent running.
Close Utorrent or other torrent software and it will stop asap.
It can be a broken tracker. Can also be some legal department or som...
221.1.220.149 - constant port scanning
Please make it stop.
[LAN access from remote] from 221.1.220.149:12200 to 192.168.1.6:2301 Thursday, Mar 22,2012 01:49:27
[LAN access from remote] from 221.1.220.149:12200 to 192.168.1.6:9415 Thursda...
125.45.109.166 - I"m getting logs of remote access to my LAN
here is the log from my router. Some how it is scanning the ports on my NAS drive.
LAN access from remote] from 125.45.109.166:12200 to 192.168.1.6:8088 Thursday, Mar 22,2012 01:13:37
[LAN access ...
64.14.192.236 - Tons of Alerts
Getting an alert from them literally every couple minutes; it is ridiculous.
Getting an alert from them literally every couple minutes; it is ridiculous.
Getting an alert from them literally every cou...
58.218.199.250 - attack on computer
this as happened a few times now .. . . .. . .. ... . ... ... .. . .. . ...
205.152.150.23 - 205.152.150.23 Port Scanning
Mar 3 2012
Number of security log entries : 1
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.150.23
Time at last atte...
188.116.3.177 - Próba ataku hakerskiego
Mój antywirus podał komunikat że z komputera o IP.188.116.3.177 \"Wykryto atak ze skanowaniem portów\". Pojawia się to od jakiegoś...
148.243.142.18 - Source was scanning our network for VNC
Source 148.243.142.18 was scanning one of our address blocks for VNC Port range 5900-5920, they could have been targeting our colo providers network as they did NOT scan our other address block which...
206.161.121.2 - Malware
My computer keeps trying to contact 206.161.121.2, 206.161.121.4, and 206.161.121.5; but my anti-malware program intercepts the calls. (FILLER FILLER FILLER FILLER FILLER FILLER FILLER FILLER FILLER.)...
58.218.199.227 - Port Scanning me
Multiple port scans today. Not happy.
Why do I need 25 words to post?
Why do I need 25 words to post?
Why do I need 25 words to post?...
209.85.147.106 - phishing
he dit it with more ip\'s same location 66.211.179.158 ihope have managed to block it for now with firewall help us to block him...
216.245.221.163 - Port Scan
A port scan on my IP was reported at 09:26 GMT on 03/17/12 originating from IP 216.245.221.163. This occurred one time only as far as I can establish....
38.101.125.194 - unauthorized access attempts
Several \"Audit Failure\" entries in the Security log for a domain controller. Sample entry:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domai...
24.52.21.183 - Attempted Intrusion (assumed).
This IP address has been continually scanning ports on my computer. He/she has been scanning for days; hour upon hour of scanning. j I assume this is an intrusion attempt....
88.190.30.80 - 88.190.30.80
IDS scan parser : tcp syn scan: 88.190.30.80 scanned at least 20 ports at 81.228.157.171. (1 of 1) : 88.190.30.80 81.228.157.171 0060 TCP 43310->6666 [S.....] seq 3304888716 win 5840...
Firewall detected all port scan attack from Internet Protocol (IP) address 208.80.127.4 and is making constant DNS Cache Poisoning Attacks
...
58.218.199.87 - continuous port scanning
these bastards keep pinging my network and my ISP is saying i may be pirating. could be these guys getting into my network and waking my machine from sleep...
93.89.92.20 - attacking mutiple ports
Firewall log:
Mar 10 02:58:30 kernel: PORT SCANNER ATTACK detected from 77.68.36.246. Source port is 8888, and destination port is 3306 which use the TCP protocol.
Mar 13 13:28:30 kernel: PORT SCA...
125.45.109.166 - Intrusion Prevention
16:09:55.704 Alert Intrusion Prevention Possible port scan detected 125.45.109.166, 12200, X1, hn.kd.ny.adsl xxx.xx.x.xx, 8088, Xx TCP scanned port list, 27977, 8085,
9000, 2301, 8118 16:09:55.704 Al...
89.149.242.175 - 100 attemts a minute
peerblock is blocking about 100 attempts a second from this address. They are fascists, and deserve to live with the pigs. Is this 25 words yet?...
58.218.199.250 - port scanning attack
this IP keeps coming up on my firewall as a port scanning attack, 5x in 24hrs
this IP keeps coming up on my firewall as a port scanning attack, 5x in 24hrs...
148.243.142.18 - Port Scan
I got an alert from our web server\'s firewall about this IP:
03/12/2012 20:56:13.448 - Alert - Intrusion Prevention - Possible port scan detected - 148.243.142.18, 1152, WAN - XXX.XXX.XXX.XXX, 59...
216.245.221.163 - 216.245.221.163
Port scan! From 216.245.221.163:6000 to x.x.x.x, proto TCP (zone V1-Untrust, int v1-untrust). Occurred 1 times.
2012-03-13 01:28:43 alert Port scan! From 216.245.221.163:6000 to x.x.x.x:8023, proto TC...
221.1.220.149 - Another Packet Kiddie gone wild
This person 221.1.220.149 keeps port scanning and port scanning and port scanning every single day and it\'s getting old i am going to have to report this ip to my isp also so they can take it to the...
58.218.199.87 - multiple attempts at trying to gain access
Attack from 58.218.199.87 on TCP port 12200 and destination port is 6515 knocking connection offline with this flood and it\'s annoying as hell if this doesn\'t stop going to have to go to my isp and ...
58.218.199.147 - Hacker
My firewall is blocking attacks .Port scan attack is popping up throughout the day.58.218.199.147 I have never seen anything like this happen to my computer.If you can help I would really appreciate i...
217.69.177.171 - port scanning
This IP has been logged port scanning over the past few days. Appears to randomly scan UDP ports every few minutes.
10099, 2533, 10022, 31671, 12185, 45007, 7234, 40747, 54961, 44254, 36285, 24670,2...
58.218.199.147 - more chinese port scanning
regular incoming scans from port 12000 to a range of 73,2479,3246,1080,8008,7212, 8088,8118,9415
switches IP every few minutes also seen on
58.218.199.250,
221.1.220.149,
please do something about ...
58.218.199.227 - 58.218.199.227
Port scan @ 10/02/2012 8:42 Australian WST. Damned if I understand, or have any inkling, of why Beijing is interested in a insignificant router in a residential area!...
58.218.199.147 - Very Annoying - When Blocked it disables internet connection
Category: Firewall - Activities
Inbound TCP connection from 58.218.199.147, local service Port http-proxy-1(8088) .
Inbound TCP connection from 58.218.199.147, local service Port http-proxy-1(8088...
216.171.102.18 - 216.171.102.18 ASSHOLE PORT SCANNER
1:11:02 AM Block IN TCP 216.171.102.18 40121 86.127.74.46 57910 SYN Blocked by the Attack Detecton component
1:11:02 AM Block IN TCP 216.171.102.18 40804 86.127.74.46 26649 SYN Blocked by the Attack D...
58.218.199.227 - 58.218.199.227
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port ...
189.1.162.6 - relentless port scanning
this is only a tiny sample...
[00001] 2012-03-11 06:38:42 [Root]system-critical-00441: ICMP ping id=0! From 189.1.162.6 to 207.67.12.34, proto 1 (zone Untrust, int untrust). Occurred 1 times.
[0000...
58.218.199.147 - continuous attempts of port scanning
hack from china(?) constantly scanning my pc for open ports. It\'s about time someone sent
in seal team six!!!!! Lets get this bastard!!!! A little daylight between his ears will benefit everyone.
...
208.248.77.132 - Brutal portscanning
Been performing port scanning for days now, often followed by flooding the router with incoming traffic. Scanning several addresses in our subnets. This is by no means normal traffic....
58.218.199.227 - Da Do, Da Do"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 58.218.199.227
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Do Da, Do Da"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - " %(#%#&*$(&''
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 3/9/12 03:54:12 PM
Number of po...
58.218.199.227 - "Subject is Empty"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 58.218.199.227
Time at last attempt : 3/9/12 10:34:41 AM
Number of ports that were scanned: 5
Highest port : 8080
Lowest port : ...
98.126.118.61 - portscan
Attempted to connect to multiple ports and ip addresses with a source port of 80.
Packet Bad Length Packet Bad Length 1250 0 S230 0 0 98.126.118.61:80 osIdSource=unknown osRelevance=relevant osType=u...
58.218.199.147 - Continuous attempts at port scanning.
I\'m getting continual attempts at port scanning from IP address 58.218.199.147 please close down this IP address or weed out the jerk who is causing the problems.
...
93.146.64.162 - intrusion 93.146.64.162
This ip is only present in my pc for intrusion, i don\'t know who is and what is the matter. But I know that in this days I have some trouble with trojans.
thanks ...
58.218.199.227 - eset nod32 advises of port scanning attack from this ip
most likely a script kiddie port scanner failing to get by eset nod32 and most likely failing at like. and he\'s from china. loser....
222.186.17.160 - trying to connect to my desktop
the chink is trying to connect to my 3389 portthe chink is trying to connect to my 3389 portthe chink is trying to connect to my 3389 portthe chink is trying to connect to my 3389 portthe chink is try...
58.218.199.147 - Port Scanning
Port Scanning And Scanning my siteweb
[Mon Mar 05 XXXX] [error] [client 58.218.199.227] client denied by server configuration: /www/proxyheader.php
[Mon Mar 05 XXXX] [error] [client 58.218.199.147] cl...
184.82.73.39 - Portscan detected
The host is defenitely compromised. Revrse DNS record does not correspond to the hostname. The server tries to do port scanning and connections to the port 8090/tcp...
94.102.55.122 - port scanning
94.102.55.122 (Type: outgoing, Port: 49585, Process: iexplore.exe) i believe this is a scan port and i ask that you examine the site. thank you...
58.218.199.147 - Frequent Portscan
Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Fr...
58.218.199.227 - phishing, or other fraud
Is 58.218.199.227 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud? Report the abuser now!
Somebody is scanning your computer.
Your computer\'s TCP ports:
have been s...
85.25.109.220 - 85.25.109.220 german fagg scanning!!!!!!!!!!!!
12:31:09 AM Block IN TCP 85.25.109.220 64695 86.127.74.46 23 SYN Blocked by the Attack Detecton component
12:31:03 AM Block IN TCP 85.25.109.220 64695 86.127.74.46 23 SYN Blocked by the Attack Detecto...
183.181.217.246 - 183.181.217.246 Japanese faggot scanning
12:35:36 AM Block IN TCP 183.181.217.246 29741 86.127.74.46 1234 SYN Blocked by the Attack Detecton component
12:35:34 AM Block IN TCP 183.181.217.246 40392 86.127.74.46 1234 SYN Blocked by the Attack...
72.130.92.29 - FIN Scan
[DoS Attack: FIN Scan] from source: 72.130.92.29, port 62792, Saturday, March 03,2012 01:23:02
[DoS Attack: FIN Scan] from source: 72.130.92.29, port 62588, Saturday, March 03,2012 01:21:01
[DoS Attac...
58.218.199.147 - Frequent Portscan
Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Fr...
221.1.220.149 - Frequent Portscan
Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Fr...
17.173.254.223 - Scanning
Scanning Port 16403 Apple Computer. Several times a day. Any comment? Thank you. Nmap scan report for 17.173.254.223
Host is up (0.056s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE V...
74.94.179.17 - 74.94.179.17
8:01:56 PM Block IN TCP 74.94.179.17 1820 86.127.74.46 143 SYN Blocked by the Attack Detecton component
8:01:50 PM Block IN TCP 74.94.179.17 1820 86.127.74.46 143 SYN Blocked by the Attack Detecton co...
184.82.73.39 - port scan detected by my eset 5 !
the i.p address 184.82.73.39 trying to intrude my network , but my eset did block it , what tools do I have to prevent this in the near future ?...
85.25.109.220 - 85.25.109.220 GERMAN FAGG SCANNING!!!!
2:38:22 AM Block IN TCP 85.25.109.220 51346 86.127.74.46 49171 SYN Block Once
2:38:16 AM Block IN TCP 85.25.109.220 51346 86.127.74.46 49171 SYN Block Once
2:38:13 AM Block IN TCP 85.25.109.220 51346 ...
64.20.227.133 - repeated port scanning
Feb 28, 20:14 GMT to 20:35 GMT Several port scanning (port 23, port 25 & port80) for an hour. An other scan at 22:08 GMT.
(jeu. 1. mars 00:21:47 2012)
...
92.52.76.67 - Port Scanning
Time: Wed Feb 29 11:29:51 2012 +0200
IP: 92.52.76.67 (GB/United Kingdom/fcp.lon3.rackspace.net)
Hits: 11
Blocked: Temporary Block
Sample of block hits:
Feb 29 11:27:53 tuana kernel: Firewa...
209.200.154.254 - Portscanning
02/28/2012 13:31:03.896 Alert Intrusion Prevention Possible port scan detected 209.200.154.254, 80, X1 69.42.121.164, 60434, X1 TCP scanned port list, 10776, 56595, 31767, 36359, 14598 ...
58.218.199.227 - 58.218.199.227..
Somebody is scanning your computer.
Your computer\'s TCP ports:
8008, 7212, 5390, and 80 have been scanned from 58.218.199.227..
Dos veces hoy pero se repite todos los dias...
216.245.221.163 - Network Attack from IP [varias_at1_28_2_12]
Dear Sirs,
We are Seyrcom, a Spanish Network and Communications Company, providing network security services to our clients. Our Network Security Operations Center has detected an attack against one ...
221.192.199.49 - port scanning
There are numerous attempt of port scanning on my firewall with the mentioned ip address. Evrytime it is from port 12200 to different ports on my firewall
...
148.243.142.18 - Port Scanning
IP 148.243.142.18 scanned my ports twice over the weekend! . . . . . . . . . . . . . . . ....
46.166.149.118 - 46.166.149.118 Port Scanning
Security alert type : Port Scan
Protocol type : TCP
IP source address : 46.166.149.118
Time at last attempt : 2/19/12 10:29:54 AM
Number of p...
205.152.132.23 - UDP 205.152.132.23
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 2/7/12 12:05:03 PM
Number of po...
50.45.145.146 - USA 50.45.145.146
Security alert type : Port Scan
Protocol type : TCP
IP source address : 50.45.145.146
Time at last attempt : 2/19/12 05:04:13 AM
Number of po...
175.45.25.51 - Hong Kong 175.45.25.51
Security alert type : Port Scan
Protocol type : TCP
IP source address : 175.45.25.51
Time at last attempt : 2/3/12 12:24:35 PM
Number of port...
205.152.132.23 - 205.152.132.23 port scanning
My router said:
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 2/7/12 12:05:03...
85.17.24.101 - port scan
this ip tried to scan the ports of my machines different times. Firewall blocked this and ip is now on my own blocklist. Will see my logfiles ...
221.192.199.49 - "Little Bitch Chink"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/27/12 03:37:27 AM
Number of p...
165.254.32.43 - intrusioon attempts
6:55:47 PM 165.254.32.43 Intruder unblocked IP blocked then unblocked. Appears to be Akamai Englewood Colorodo. Who is this, does this mean they they have by passed a cisco firewall and Agnitum or is...
193.33.237.205 - UKRAINIAN ASSHOLE PORT SCANNER 193.33.237.205
1:18:49 AM Block IN TCP 193.33.237.205 2923 86.127.74.46 8000 SYN Blocked by the Attack Detecton component
1:18:49 AM Block IN TCP 193.33.237.205 2947 86.127.74.46 8080 SYN Blocked by the Attack Detec...
221.192.199.49 - "Haki Saki"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/26/12 08:20:06 PM
Number of p...
221.192.199.49 - "64,000 to Go"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
125.45.109.166 - Port scanning
Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Ch...
221.192.199.49 - "Port Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
109.230.216.250 - GET A LIFE ASSHOLE 109.230.216.250
9:02:17 AM Block IN TCP 109.230.216.250 1414 86.127.74.46 9000 SYN Blocked by the Attack Detecton component
9:02:17 AM Block IN TCP 109.230.216.250 1413 86.127.74.46 4869 SYN Blocked by the Attack Det...
221.192.199.49 - "Rats Nest"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Non-Stop Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
175.45.25.79 - THE SAME CHINESE ASSHOLE LIKE FEW WEEKS AGO 175.45.25.79
12:54:55 AM Block IN TCP 175.45.25.79 12200 86.127.74.46 9000 SYN Blocked by the Attack Detecton component
12:54:54 AM Block IN TCP 175.45.25.79 12200 86.127.74.46 8888 SYN Blocked by the Attack Detec...
184.173.195.64 - Randomly hitting ports with SYN:ACK
This IP has been hitting my DSL line with a large number of SYN:ACK packets. There is no apparent pattern in the port number chosen for each packet....
221.192.199.49 - "China Prowler"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
174.34.177.194 - ASSHOLE PORT SCANNER FROM ARIZONA 174.34.177.194
10:04:45 PM Block IN TCP 174.34.177.194 33199 86.127.74.46 4869 SYN Blocked by the Attack Detecton component
10:04:42 PM Block IN TCP 174.34.177.194 33199 86.127.74.46 4869 SYN Blocked by the Attack D...
221.192.199.49 - "Continuous Harrassment"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "China Peepers"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Chinese Tax Dollars at Work"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "How many ports are there?"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Hello, Is there anybody out there?"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Continuous Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "port by port"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Constant Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 5
Time at last attempt : 2/25/12 1...
71.95.170.26 - Port Scanning
Still port scanning over and over again
Obviously has nothing better to do.
...
221.192.199.49 - "Ongoing"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 5
Time at last attempt : 2/24/12 0...
221.192.199.49 - "Very Consistent"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 10
Time at last attempt : 2/24/12 ...
221.192.199.49 - "Duck & Cover"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Cosmic Debris"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/24/12 0...
221.192.199.49 - "China China China"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/24/12 1...
221.192.199.49 - "Guess"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Non-Stop Scanning"
I intend to post each & every infraction committed by this IP until cessation of this aggesion.
Security alert type : IP Subnet Broadcast Amplification
IP source address ...
58.218.199.250 - 58.218.199.250
looks like a hijacked machine to me
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-23 22:33 CST
NSE: Loaded 0 scripts for scanning.
Initiating Ping Scan at 22:33
Scanning 58.218.199.250 [4 ports]...
221.192.199.49 - Causing Lag Spikes in Game Due to Port Used
Wed, 2012-02-22 02:16:36 - TCP Packet - Source:221.192.199.49,12200 Destination:62.49.7.5,27977 -
[SWTOR 2 rule not match]
Wed, 2012-02-22 11:05:59 - TCP Packet - Source:221.192.199.49,12200 Destinat...
208.46.117.203 - DOS & Port Scanning of our IP
Source:208.46.117.203,3478 Destination:58.6.116.200,62477 - [DOS] UDP Packet - Source:124.40.51.159,3478 Destination:58.6.116.200,62477 - [DOS] UDP Packet - Source:208.46.117.203,3478 Destination:58.6...
221.192.199.49 - "Persistent Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 5
Time at last attempt : 2/23/12 0...
221.192.199.49 - "Persistent Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/23/12 0...
221.192.199.49 - "Tapping on the Windows"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Still There"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 9
Time at last attempt : 2/23/12 0...
58.218.199.227 - port scanning from this ip
port scanning from this ip : 58.218.199.227
port scanning from this ip : 58.218.199.227
port scanning from this ip : 58.218.199.227
port scanning from this ip : 58.218.199.227
port scanning from this ...
58.218.199.147 - Multiple Attempts
This particular IP address was detected by my firewall as attempted to scan my ports. It was blocked and it is trying to hack into my computer....
221.192.199.49 - "Persistent"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/22/12 0...
221.192.199.49 - "Constant Hack"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 10
Time at last attempt : 2/22/12 ...
86.127.74.46 - portscan TCP Syn
Portscan : ports / 21,22,23,25,114,145,3306
Originating IP: 86.127.74.46
inetnum: 86.127.74.0 - 86.127.74.255
netname: RO-RDS-SB-CABLELINK
descr: Romania Data Systems
descr: Cablelink Sib...
58.218.199.147 - 58.218.199.147
looks like an infected machine
Scanning 58.218.199.147 [1000 ports]
Discovered open port 199/tcp on 58.218.199.147
Discovered open port 23/tcp on 58.218.199.147
Discovered open port 554/tcp on 58....
221.192.199.49 - constant port scans
this address is port scanning my machine perhaps 10 or 15 times per day. Scans are reported from my firewall software. Address is 221.192.199.49. Please note....
58.218.199.227 - Constant Attack
We\'re under a constant attack from this IP address.
We\'re under a constant attack from this IP address.
We\'re under a constant attack from this IP address. ...
221.192.199.49 - Scanning my ports about 10x per day
Scanning my ports about 10x per day
TCP scanned port list, 8090, 2479, 8088, 73, 8008
02/22/2012 02:24:47.912 Alert Intrusion Prevention Possible port scan detected
This email was generated by: Son...
221.192.199.49 - "Endless"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 8
Time at last attempt : 2/22/12 1...
221.192.199.49 - "Guess Who"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/22/12 09:16:23 AM
Number of p...
221.192.199.49 - "Piss Ant"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/22/12 07:28:30 AM
Number of p...
221.192.199.49 - "Cock Sucker"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/20/12 09:58:55 PM
Number of p...
209.222.129.169 - attack
--------Incoming-------
DateTime From IP To Port
[2012-02-21 19:28:49] | From:[209.222.129.169] | Port:[33450] | [Blocked]
[2012-02-21 19:28:51] | From:[209.222.129.169] | Port:[33451] | [Blocked]
[20...
212.54.35.25 - Intrusion attempt, DOS attack, phishing
The log snapshot tells the storry
2012-02-21 14:36:44 [DOS][Block][port_scan][212.54.35.25:53->xx.xx.xx.xxx:51208][UDP][HLen=20, TLen=73]
2012-02-21 14:36:44 [DOS][Block][port_scan][212.54.35.25:...
221.1.220.149 - Continual port scanning and DOS attack
Last twenty four hour we have had repeated attempts to access our network.
How do you stop this malicious behavour?
TCP Packet - Source:221.1.220.149,12200
TCP Packet - Source:221.1.220.149,12200 ...
216.52.242.80 - port scanning and trying to get unauthorized access
since this morning i see alternate ip\'s trying to get access to my machine. i know i daont have the best security around but i see lately more and more blocked attempts to infiltrate my machine, and ...
74.125.31.132 - Google, are you being evil?
Getting varied port scanning from this address for the last few hours.
Some ports being scanned are:
24721, 35373, 52650, 45689, 59545,
38479, 54632, 25645, 33964, 24891,
37147, 31063, 10895, 20875,...
58.218.199.87 - Multiple Scans
From Logs on Router:
Mon Feb 20 10:20:04 2012
=>Found attack from 58.218.199.87.
Source port is 12200 and destination port is 6515 which use the TCP protocol....
120.136.16.4 - Trying to scan my router.
From my security logs:
Mon Feb 20 10:15:59 2012
=>Found attack from 120.136.16.4.
Source port is 2418 and destination port is 5952 which use the TCP protocol.
...
88.208.222.99 - Port scan
IP in question is trying to connect to FTP via port 21 from a range of TCP source ports (41431-50153). Automatically blocked via LFD. Reporting to fasthosts....
70.38.54.89 - alert
this user has scanning my mac from Canada...im in Uruguay, the log in my system points to him(her) and the mac address 002511d711ed, please take an eye on it......
58.218.199.147 - port scanning
hello,
this IP scan my port: 58.218.199.147
IP address region: 22 Beijing
This user is from Beijin, in CHina.
This is really annoyng, can you please do something about that ?
Thanks you in advance.
...
85.17.24.101 - Port scanning and DOS
This IP address is probing all my ports with Port scanning and Dos attacks. Firewalls doing there job. Address belongs to Internet company from The Netherlands....
58.218.199.147 - 58.218.199.250
I port scanned this address till if went offline. Everyone should do this. That\'ll teach them ... Eye for an eye, tooth for an tooth......
85.17.24.101 - Portsentry triggered
Hello, this ip has tried to run a port scan on my server, it was caught by portsentry trying to connect to TCP port 1080...
58.218.199.147 - 58.218.199.250
Multiple port scan from this address on my firewall blocked.
Can\'t we ddos this address ?
Anonymous please help and hack this address (take it out permanently please)...
79.176.195.34 - Israelian asshole port scanner 79.176.195.34
8:51:48 PM 79.176.195.34 Subnet blocked for 60 min SCAN (20480, 47873)
8:51:27 PM 79.176.195.34 Detected attack, host not blocked SINGLE_SCAN_PORT (20480)
IP Address Region: 05 Tel Aviv
IP Address Cit...
58.218.199.147 - Several IP Block Instances
This IP has been attempting to scan us several times. Firewall keeps catching and blocking it, so I extended the block for a little while longer....
209.222.129.169 - DOS attack
Scanning multiple ports searching vulnarabilities for hacking purposes?
Scanned ports: 33442 - 33455
IP range used by this hacker: 209.222.129.169 -178
Part of my router log:
2012/02/15 16:04:08 -- ...
58.218.199.147 - Security Alert
TCP connection dropped - Source:58.218.199.250, 12200, WAN - Destination:, 8080, LAN - \'Possible Port Scan\'
Continuously get reports about this IP address on port scanning various ports....
219.78.210.127 - Port Scanning Attack
ESET Smart Security 5 identified 219.78.210.127 as the origin of a port scanning attack on my machine.
Doubt it\'s malicious activity from the company, probably just piggy backing off their network....
219.38.210.127 - Firewall Detected a port scanning attack
This IP address was registered by ESET Smart Security 5. It detected a port scanning attack from 219.38.210.127 at around 20h00.
Wonder what a Japanese corporation wants with me?...
221.192.199.49 - today twice, Eset told me about port hack
twice today in the past 30min i\'ve had 2 port attacks from 2 address 221.192.199.49 and another 222.192 dont remember the other 2 numbers are the popup closed. considering this is a fresh install, an...
221.1.220.149 - shanning my ports
A user from thid ip address is attepting to scan ports on my pc it is not the first time this ip has attacked me i only found this by installing new security software be aware!!...
58.218.199.87 - Keep gettting port scanned
I\'ve been getting continuous pings scanning for open ports from this IP and several other IPs, but all are from the same server. They aren\'t getting in, but it\'s annoying....
213.108.209.2 - 33
333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG...
85.19.217.237 - IP attempting to ssh
Failed password for invalid user internet from ::ffff:85.19.217.237 port 41817 ssh2
Invalid user server from ::ffff:85.19.217.237
input_userauth_request: invalid user server
Failed password for inva...
58.218.199.227 - We have 99 complaints about 58.218.199.227
Is 58.218.199.227 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud? Report the abuser now! Is 58.218.199.227 misbehaving (engaging in SPAM, brute-force, DOS attack, phi...
217.69.177.171 - Trying to get in
Getting rejected packets from this IP, trying to do \"something\" on port 52139. No idea what it can be...i am not into filesharing or anything so is a pure attack out of the wild...
95.168.173.155 - 95.168.173.155
SOMEONE AT THIS IP (95.168.173.155)
WANTS TO HACK INTO COMPUTER !
2012/02/11 05:56:33 -0500 HOME COMP IP-BLOCK 95.168.173.155 (Type: outgoing, Port: 52428, Process: ...
175.45.25.87 - ASSHOLE PORT SCANNER FROM HONG KONG
10:59:36 PM Block IN TCP 175.45.25.87 12200 86.127.74.46 1337 SYN Blocked by the Attack Detecton component
10:59:35 PM Block IN TCP 175.45.25.87 12200 86.127.74.46 36081 SYN Blocked by the Attack Dete...
175.45.25.51 - intrusion: Port scan
My Norton Internet Security program detected an intruder with the IP address as 175.45.25.51(12200) on 02/10/2012 at 2:57 Am, made my risk at medium, and they should been shut down for life...
222.208.183.218 - Constant port scanning and probe attempts
remote address 222.208.183.218
remote port 12200
1080 <- 222.208.183.218:12200
8080 <- 222.208.183.218:12200
9090 <- 222.208.183.218:12200
constant port scanning of my router
constant port s...
221.192.199.49 - Detected Port Scanning attack
2/9/2012 5:53:30 PM Detected Port Scanning attack 221.192.199.49:12200 192.168.0.116:8088 TCP
2/9/2012 11:37:16 AM Detected Port Scanning attack 221.192.199.49:12200 173.27.157.166:8123 TCP
2/9/...
221.1.220.149 - Multiple port scanning attacks from 221.1.220.149
2/9/2012 5:58:18 PM Detected Port Scanning attack 221.1.220.149:12200 192.168.0.116:1080 TCP
2/9/2012 10:06:24 AM Detected Port Scanning attack 221.1.220.149:12200 173.27.157.166:6588 TCP
2/9/20...
58.218.199.250 - 58.218.199.250
2/9/2012 6:37:28 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.0.116:2301 TCP
2/9/2012 3:56:16 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.0.116:73 TCP
2/7/201...
58.218.199.147 - 58.218.199.147 running port scans on my network
58.218.199.147 running port scans on my network. Attack coming from Port 12200 of offending IP. My firewall has blocked the attempts, but this could lead to Ping of Deaths or DDOS on other networks....
175.45.25.51 - Port Scan sourced from IP 175.45.25.51
Start from Feb-08-2012, i start seeing numerous port scan activity sourced from IP 175.45.25.51, blocked it. But it is still continued . ...Checked the IP, it is from Hong Kong. ...
206.161.121.3 - Internet attack
This jerk is trying to get into my system port constantly. My firewall stops it but it may fail at some time. It\'s very annoying....
58.218.199.227 - port scanning attacks
I Keep receiveing Port Scanning Attacks. Is there any way to prevent these attacks on my computer? Is there any free softwares out there to help prevent these net work intrusions? last port scanni...
173.194.34.73 - Aggressiv PortScans
The IP is sending to many unrequestet \"ack-syn\" packets with invalid SEQ numbers.
There are also heavy Portscans, nearly once a minute, 5-7 ports variating range.
...
41.135.1.62 - port scanning
bit defender found this trial and i found this site could be helpful and decided to post this complaint
...
after dots is only to make this message 25 words long...
68.94.156.1 - Port Scan Attack
This IP is hitting me every few days or so it says it originates with SBC. If they breach my network, then its game on. ...
203.88.70.76 - scaning
Why is AE Armed Forces Europe, Middle East, & Canada scaning???
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan
...
46.234.116.187 - Scaning
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan
Scanning for some reason? ...
78.141.181.1 - Port scan
Several port scans from 78.141.181.1 on the fire wall logs
ICMP Destination Unreachable Host Unreachable
...
193.107.16.23 - ET SCAN
Scanned by 193.107.16.23
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan
Is there such a thing as a friendly scan? ...
121.101.221.144 - ET SCAN Sipvicious Scan
Being scanned repetedly by 121.101.221.144
ET SCAN Sipvicious User-Agent Detected
ET SCAN Sipvicious Scan
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
Whats a friendly scanner? ...
81.7.71.165 - 81.7.71.165 ASSHOLE PORT SCANNING MY PC
THIS ASSHOLE WAS PORTSCANNING MY PC ON PORT 80 AND 8080 two timesIP Address: 81.7.71.165
IP Address Country: Lithuania (LT)
IP Address Region: 57 Kauno Apskritis
IP Address City: Jonava
IP Postal Co...
122.228.219.172 - china port snooping
[INFO] Tue Feb 07 01:06:07 2012 Blocked incoming TCP connection request from 122.228.219.172:6000 to xxx.xx.xx.xx
[INFO] Tue Feb 07 00:55:24 2012 Above message repeated 1 times
Blocked incoming TCP co...
58.218.199.227 - Port scaning
Port scanning on a regular basis. Constantly have reports from Router that attempts are made by them on a daily basis. Router blocks - but tired of the constant messages from the Router that it atte...
58.218.199.227 - Hacker ass hole cand
He just attemp to scan 5 time my computer i detected him with zone alarm firewall and i tried to replicate by dos attack because he IS a preak...
58.218.199.227 - port scanning attacks
I keep getting port scanning attacks from #58 218 199 227.. I do not like my computer being attacked like this.. Please stop these attacks and see if you can let me know who is doing this thank you...
79.131.104.124 - Attack with port scann detected.
My ESET firewall said \"Attack with port scann detected\" so I just reporing it . . . . . . . . . . ....
221.1.220.149 - HELP
This ip adress is attacking me more then four times by now and I am asking you to to something about it my antivirus is showing me that i am under port scanning attack.My PC is olso slowing down ...
58.218.199.250 - Scan is bouncing from china, but its original source is from Russia
After further investigation on my part, the scan is bouncing from china, but its original source is from Russia.
Secondly, after changing IPs 3 times, port scanning continued, so my IP is being upda...
58.218.199.147 - Bouncing from China, but originally from Russia
After further investigation on my part, the scan is bouncing from china, but its original source is from Russia.
Secondly, after changing IPs 3 times, port scanning continued, so my IP is being upda...
58.218.199.227 - 58.218.199.227
On Wed, 2012-02-01 at 10:12:43 hrs, I suffered a port scan, from the designated ip address. If others are reporting the same source, my little story adds to the picture....
194.145.58.29 - continous udp connections
194.145.58.29 this ip try to connect to various udp ports in 3343? range, 3 to 15 connections per minute.
This is one line example of firewall log
Blocked Prot=17, 194.145.58.29:11695 > *:33438 -De...
221.1.220.149 - Source:221.1.220.149 Destination:86.200.188.228 - [PORT SCAN]
inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadm...
82.130.102.46 - Enjoy Captcha-free communication
I love you very march, I love you very march? I love yoe and my baby? and all people very march , I love you very march ? I love you very march , I kill you ...
82.130.102.46 - Hide your real IP address in the author field in comments
I love you , I lovr yoy , I love you Michel? oh Michel. Bye, Bye Nina? good bye Mina/ I lovw you with your smalie...
82.130.102.46 - Receive e-mail
I love you very march ? I love you very very murch I like my brother ? I love my baby bey n...
58.218.199.227 - Port Scanning
My router has received repeated Port Scans from this address for several days.
Looking back over my logs I can see that in fact this address has been used for several months....
58.218.199.227 - 58.218.199.227 port sacanning
58.218.199.227 is trying to scan and is very annoying, the good thing my antivirus firewall blocks it
it has been attempting several times a day grrrr!!!!...
175.45.25.51 - Repeatedly port scanning my computer
For the past several weeks this IP has been port scanning my computer. My antivirus software has blocked it. I have requested my network administrator to block this IP address....
217.156.169.195 - ASSHOLE PORT SCANNIG MY PC 217.156.169.195
12:00:47 AM Block IN TCP 217.156.169.195 80 86.127.74.46 49666 FIN ACK Blocked by the Attack Detecton component
12:00:47 AM Block IN TCP 217.156.169.195 80 86.127.74.46 49665 FIN ACK Blocked by the At...
175.45.25.51 - Port scanning attack
My ESET virus program reported \"port scanning attack\" from this ISP on Feb 2 at 8:27am CST. This is the first from this address. Previously, on Jan 23 and 30, I got the same thing from 221...
58.218.199.147 - Port Scanning
I don\'t know whether this a hijacked computer or a bad one but I got several Port Scans from this IP
I don\'t know whether this a hijacked computer or a bad one but I got several Port Scans from this...
67.172.36.98 - Port Scan
kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=67.172.36.98 DST=67.214.5.222 LEN=56 TOS=0x00 PREC=0x20 TTL=43 ID=22838 DF PROTO=TCP SPT=42391 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0
there was more in sa...
174.140.145.212 - he's a backdoor man
websql Anonymous
warning page not found 02/01/2012 - 23:23 sqlweb Anonymous
warning page not found 02/01/2012 - 23:23 webadmin Anonymous
warning page not found 02/01/2012 - 23:23 phpmy-admin Anonym...
58.218.199.147 - Port Scanning
Likewise this IP addy keeps scanning my ports. Firewall catches but its really getting old. I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on ...
221.1.220.149 - Porat Scanning
Likewise This IP addy keeps scanning my ports. Firewall catches but its really getting old. I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on ...
221.1.220.149 - Complaint 221.1.220.149
Been port scanning my IP Address for a few days now!!! Likewise I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on my machine....
221.1.220.149 - 221.1.220.149
this IP address continues to scan my computer 24/7 the past month. Very anoying. Forewall is doing its thing...for now.To bad China can not be permanently blocked from the internet....
87.229.24.138 - Port scan
Firewall alert:
Your computer\'s TCP ports:
8000, 443, 8080, and 81 have been scanned from 87.229.24.138.
Several port scans been made recently... very active indeed...
221.1.220.149 - why
16h4,18 gmt
c\'est annormal de se voire scaner ses ports. ca cache des manoeuvres frauduleuses.c\'estc\'est annormal de se voire scaner ses ports. ca cache des manoeuvres frauduleuses
c\'est annormal...
193.107.16.124 - 193.107.16.124/script.js
firefox kept on open 193.107.16.124/script.js, using anti-malware engine helped nothing, but recently the script was reported as malware by avast, searching for help to get rid of this...
2.89.105.26 - attack
m device haked .... and then i recieve the maessage from eset there port scanning attack ....i am not sure what happen...... please help me...
67.100.86.132 - Port scanning
Continuous Port scanning and DOS.
[DoS Attack: FIN Scan] from source: 67.100.86.132, port 2075, Tuesday, January 31,2012 14:43:16
[DoS Attack: FIN Scan] from source: 67.100.86.132, port 2582, Tuesday,...
63.206.102.171 - At it again!
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, 15.46 HOURS.
7th time in the space of 2 months....
58.218.199.227 - Port scan
port scanned me, i got a firewall alert ( I use mandriva linuzx) then i blacklisted them then they scanned me from this adress: 58.218.199.147...
94.75.215.26 - scanning
94.75.215.26 has been scanning all our addresses on random ports for months now. Every day all day. There doesn\'t seem to be any pattern to the ports....
193.107.16.124 - 193.107.16.124/script.js
ESET firewall blocked
Detected Port Scanning attack,
Source 84.218.199.227:12200 Target 10.128.192.7.8088
Source 84.218.199.250:12200 Target 10.128.192.7:73
Source 84.218.199.147:12200 Target 10.1...
63.206.102.171 - Again and again!
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, 15.46 HOURS.
3rd time in the space of 2 months....
195.91.174.161 - Detected Port Scanning attack 195.91.174.161:4916 TCP
Port scanning onTCP.
Complaint must be at least 25 words long. You wrote 4 words.
Complaint must be at least 25 words long. You wrote 4 words.
Complaint must be at least 25 words long. You wrote 4 wor...
77.69.239.163 - Port scan from yellow niggers
getting constant port scan nearly every day from filthy yellow niggers fucking squint eyed filth 58.218.199.227 someone should fucking nuke bejing dirty yellow scum and squint eyed bastards....
58.218.199.227 - attempt to connect
in the reports of my firewall I noticed several dates of attempt to connect by an attack by port scanning:
5-12-2011
4-1-2012 (two times!!!)
10-1-2012
12-1-2012
16-1-2012
20-1-2012 (two times!!
today ...
58.218.199.227 - attack on my computer
my firewall has blocked an attempt from IP adress 58.218.199.227 to enter my computer. Please make steps toward the person behind this ip adress...
190.248.24.244 - Heavy port scanning from Columbia
CSF/ LFD picked up several port scans from this IP and other in the 190.248 B class. here is the full info - *Port Scan* detected from 190.248.24.244 (CO/Colombia/cable190-248-24-244.une.net.co) EPM T...
190.144.77.10 - Multiple Port scanning from 190.144.x.x block
webserver getting hammered by IP in the 190.144.x.x block. All from Columbia. Triggered several netblocks on my server. 190.144.77.10 is just one of the many...
66.185.181.137 - Port Scanner by Cybersource Corp.
This ip 66.185.181.137 has been constanlty scanning our network all week long
starting at 8:00 am to about 6:00 pm at night. 66.185.181.137 from Cybersource Corp....
175.45.25.51 - Попытка ÑканированиÑ
Ñй saaki.net Гонконга, оÑтанов...
58.218.199.227 - Complaint about 58.218.199.227
The user of IP address 58.218.199.227 is continually trying to get into my network.
I have more than 50 attempts by this user to get in to my network.
Please do something about it as soon as possibl...
221.1.220.149 - port scan
221.1.220.149 This IP like other from China bot-net several times daily scans my ports . Its all redy on black ip lists
You can defend your hosts by using block lists from http://www.iblocklist.com/ ...
58.218.199.227 - Port scanning attacks several times/day.
There are 2 IP addresses that alternately attempt a port scan, which are blocked by my firewall. More annoying than anything, glad to know I\'m not the only one....
66.185.181.137 - 66.185.181.137 scanning our ports again
Yep this ip which belongs to Cybersource has been caught yet again scanning our ports. WTF!
Stop scanning our ports you scum bags. This is the 3rd time we\'ve caught these guys scanning....
203.169.6.51 - mysql port scanning activity
This IP-address was found to scan 4 of our servers for possible mysql connections on different ports. We took immediate action to block the IP completely from all of our servers....
175.45.25.51 - Port Scanning
Antivirus blocked an attempted port scanning attack at 4:30 AM on 1/24/2012. From the looks of it, this is a rather common occurrence, motives are unknown but they definitely didn\'t find anything...
74.208.109.169 - Port Scanning
My anti-virus tells me I was the victim of an attempted port scanning attack coming from this IP address at about 9:00 PM on 1/23/2012...
217.111.43.178 - Intrusion into my NAS
Dear,
Could you please check that
2012-01-21 01:53:54 guest 217.111.43.178 vmpro-d SAMBA --- Login OK
2012-01-21 01:53:54 admin 217.111.43.178 vmpro-d SAMBA --- Login Fail
2012-01-21 01:53:54 admin...
83.20.197.156 - Port Scanning
ashole be careful a a a a a a a a a a aa a aa a a aa a a a a a a a a a aa ...
175.45.25.51 - Nice try...but blocked
Security alert type : Port Scan
Protocol type : TCP
IP source address : 175.45.25.51
Time at last attempt : 1/22/12 03:58:27 AM
Number of por...
78.147.30.15 - Port scanner attack
ESET detected a TCP port attack originating from this IP, any inbound connections should be blocked. It is evidently a dangerous IP. Be warned and aware...
58.218.199.147 - Thx to the Canuck in B.C. for the NMAP params
nmap -sU -T4 -A -v -PE -PP -PS21,22,23,25,80,113,31339 -PA80,113,443,10042 -PO --script all 58.218.199.147
Starting Nmap 5.00 ( http://nmap.org ) at 2012-01-20 22:42 EST
NSE: Loaded 59 scripts for sc...
175.45.25.91 - Port scanning
This is scanning my computer and has attempted to do a scan several times today. It tried to do it since early this morning PST today ...
221.192.199.49 - continous attempts
yesterday I reported this IP address attempt to do a portscan several times, today it again attempted to do it numerous times. this is getting to be a serious threat and very annoying...
58.218.199.147 - Port Scan again
I continue to receive an attack from this IP address, yesterday January 19, 2012 I reported it and again today it got several more attempts
Is there anything to do to block this IP address from scanni...
66.185.181.137 - trying to break into ports
66.185.181.137 is Scanning for open ports, starting @33437, escalating upward. Approximately 100 attempts to break into my system, using different ports on the attacking system, starting at 13951 and ...
221.192.199.49 - Constant ports scanning
this IP address continues to ping my computer unrelentlessly throughout the day. It makes it difficult to concentrate on my work because it will never stop ...
192.168.1.217 - IP Camera from China doing Port Scanning
I bought a small pan-tilt IP camera China with default LAN IP address 192.168.1.217. I connected this camera to my GT704WG Rev B Actiontec wireless router and setup port forwarding on this router (e.g...
221.1.220.149 - continues portscan
this IP address continues to scan my computer on an hourly basis and is becoming very annoying. Norton Utilities blocks it but it continues to scan my computer...
58.218.199.147 - consistent portscan of my computer
This IP address scans my computer numerous times a day and continues to do it - I have seen it ping my computer for several months now...
46.105.124.26 - Repeated port scanning
IP repeatedly scanned ports. Somebody is scanning your computer.
\"Your computer\'s TCP ports: 6664, 6665, 6666, and 6668 have been scanned from 46.105.124.26. \"
Apparently it\'s a French...
221.192.199.49 - Port attacks to svchost.exe
Malwarebytes log
2012/01/19 16:21:54 GMT <compname> <logon> IP-BLOCK 221.192.199.49 (Type: incoming, Port: 9415, Process: svchost.exe)
2012/01/19 16:21:54 GMT <compname> <logon&g...
58.53.147.114 - Probing port 5900 (vncprobe)
Address 58.53.147.114 is attempting to authenticate via the vnc port 5900. From Dragon Research Group this is a known address being used to port scan for open vnc servers....
175.45.25.83 - I have complaint about 175.45.25.83
This ip Attack Scanning many time
my virus software show MSG
try to hack network daily i geting this attack MSG on my virus software
please block this ip
Thank You
...
175.45.25.51 - Somebody is scanning your computer.
From the Sygate report log
Somebody is scanning your computer.
Your computer\'s TCP ports:
1690, 1455, 1768, and 2018 have been scanned from 175.45.25.51.....
205.152.37.23 - I am tired of this ip continuously port scanning our router
I keep getting security alerts for 205.152.37.23, an IP address belonging to bellsouth/ ATT in Atlanta GA, it is port scanning my router as follows:
Security alert type : Port Scan
Protoc...
88.231.136.168 - port Scanning
this Ip is scanning ports. All antivirus say the same. Tt wont stop, i get the same messages. ...
221.1.220.149 - Again and again
This IP several times daily scans my ports.
Firewall blocks, but it is annoying.
The computer does not have any viruses.
How to completely block these f...... attacks?...
221.1.220.149 - port scanner
Little chinese bastard. Keeps scaning my ports. It;s so anoying! So far firewall is blocking him, but i am sick of red window on my screen saying he was trying again....
221.192.199.49 - Keeps scanning
scanning my computer alot i dont know if its bad but i dont appreciate it. please stop them it\'s very harrasing and idk what else to write because this has to be long....
175.45.25.51 - This IP Address is scanning my router for open ports
4 times in one day, started 1-12-12
They seem to be fishing. Here is the router log file:
Number of security log entries : 2
Security alert type : Port Scan
Protocol type ...
221.1.220.149 - Port scanning
This IP is port scanning customers
Firewall is stopping it but still trying to get through - has been blocked for now but really not impressed...
58.218.199.147 - 58.218.199.147 repeatedly port scanning
This IP user is repeatedly scanning my ADSL modem. Is there any way that this user can be knocked off the internet or his ISP be blocked enterely?...
175.45.25.51 - 175.45.25.51.saaki.net
175.45.25.51.saaki.net is port scanning repeatedly.
IP Address: 175.45.25.51
IP Address Country: Hong Kong (HK)
IP Address Region: 00
IP Address City: Central District
IP Postal Code
IP Address Are...
175.45.25.51 - wtf
hey saaki.net of Hong Kong, stop scanning and attacking my computer. why is yahoo and att letting them do this through their services?!
what can be done about this sort of tactic. are they data mini...
91.214.44.212 - constant attempts
Malware security constantly blocking attempted acces via explore.exe - this constant bombardment is annoying and a clear attempt at gaining entry into my computer. despite manual blocking of this ip ...
58.218.199.147 - 58.218.199.147
01/13/2012 07:01:42.752 - Possible Port Scan Dropped - Source:58.218.199.147, 12200, WAN - Destination:xx.xx.xxx.xxx, 7212, WAN - TCP scanned port list, 2479, 8088, 8008, 8118, 73 - ...
188.25.241.221 - network attack win.mssql.worm.helkern
I got the above mentioned IP from kaspersky internet security 2011 saying it is attacking my computer with win.mssql.worm.helkern. Attack has been blocked by kaspersky internet security n traced this ...
195.71.93.141 - RST Scan
Had a random check and just found out this in the router protocols
[DoS Attack: RST Scan] from source: 195.71.93.141, port 80, Thursday, January 12,2012 xx...
209.18.47.61 - Port scans followed by syn-flood attacks
This person port scans my pc all day and all night and when ever I open a browser syn-floods my pc and uses all the stack space till my pc or browser become non responsive crashes. the syn flood packe...
58.218.199.250 - Port Scanning
Port Scanning Attack caught by Eset Firewall Source IP : 58.218.199.250:12200. Have been receiving this intrusion attempt several times. Not sure why this is happening hopefully it can be stopped or d...
58.218.199.250 - CHINA AGAIN!
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. Well over 100 attempts over the last few days from this address and others fr...
221.192.199.49 - China AGAIN
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. Well over 100 attempts over the last few days from this address and others fr...
113.105.169.250 - China again!!
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. To the best of my knowledge I have no malware or virus in on my machine...
62.128.151.144 - Attempting to gain access
Firewall catches but its really getting old. I have had 4 other IP\'s from the UK doing port scans in the last couple days. To the best of my knowledge I have no malware or virus in on my machine....
221.1.220.149 - Starting again
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. To the best of my knowledge I have no malware or virus in on my machine....
74.103.104.34 - Port Scanning...
In my Antivirus Eset Smar Security today i see \"Attack detected by port scans. Source Object: 74.103.104.34:59164\"
I\'m from Poland and i don\'t know what next......
72.251.194.218 - 72.251.194.218 Port Scanning
Outpost Security Firewall caught ip address 72.251.194.218 scanning ports on my pc. WHOIS says it\'s: Voxel Dot Net, Inc. in New York City. Other than that I have no clue......
189.5.199.126 - Brute Hacking attempts
This IP has been attacking our servers. the IP has attempted to penetrate our servers over 10 thousand times in one night. the attacks are brute force using an automated user and password guessing sch...
175.45.25.83 - Somebody is scanning your computer
From the Sygate firewall report log
Somebody is scanning your computer.
Your computer\'s TCP ports:
1049, 2174, 12582, and 4033 have been scanned from 175.45.25.83.....
178.238.233.153 - Continuous Attempts to Access
This address keeps attempting to get data from my PC. My anti-malware applcation blocks it but it is constantly pinging my computer and this is not welcome. I have been the victim of System Check vi...
221.192.199.49 - Port Scanning
Im getting scanned on several different ports almost everyday from 221.192.199.49. This along with three other IP\'s from China are trying to gain access to my PC. This addy is coming up about once a ...
221.1.220.149 - Port Scanning
This IP addy keeps scanning my ports. Firewall catches but its really getting old. I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on my machin...
220.107.95.228 - Report Port Scanning IP Address
11 01/08/2012 20:39:43.750 Possible port scan detected 220.107.95.228, 25149, WAN 76.22.178.3, 12745, WAN UDP scanned port list, 16205, 16241, 21815, 21771, 16253
12 01/08/2012 20:38:59.600 UDP pac...
61.115.213.183 - Report Port Scanning IP Address
01/08/2012 20:41:42.450 Possible port scan detected 61.115.213.183, 17868, WAN 76.22.178.3, 19381, WAN UDP scanned port list, 12745, 19369, 16205, 24021, 21789
5 01/08/2012 20:41:14.466 Administrat...
58.218.199.227 - Attaque de DOS ou tentavive d'intrusion
Je commence à en avoir assez de ces individus de Beijing qui continuellement essaient de s\'infiltrer dans les ordinateurs des autres et cherchent de ce fait à leur causer de...
58.218.199.227 - Post scanning
My antivirus block 10 times each day this IP for port scanning. I don\'t know why, I have nothing important on my computer... My router firewall don\'t seem to block this attack....
189.216.119.125 - Dos attack
[admin login] from source 192.168.1.4, Sunday, January 08,2012 09:19:55
[DoS Attack: RST Scan] from source: 189.216.119.125, port 38454, Sunday, January 08,2012 09:18:07
[DoS Attack: RST Scan] from so...
58.218.199.147 - this ip attempted a port scan
my firewall just blocked a port scan from this IP i have a feeling they are trying to make a botnet if you see this ip trying to port scan....block that shit...
209.85.147.188 - This IP has been port scanning my IP address
This IP has been port scanning my IP address. It slows the connection down until I reset the connection. It then returns 10 minutes or so later....
58.218.199.147 - Block this IP
58.218.199.147 is port scanning for the fouth time.
Please contact his/her ISP to stop his/her attacks and floods.
58.218.199.147 scanned ports : 8085, 9415, 9000, 3246, 8008, 7212 and 8080
Kind reg...
194.109.21.230 - firewall overloaded
We think portscans and / or Denial of Service attacks were occurring from this IP address (194.109.21.230). Once we blocked it on our firewall, things returned to normal....
8.15.7.117 - NON STOP PORT SCANNING
Keeps port scanning, so today I started scanning back. Maybe the asswipe will get the mesage or maybe he\'s just not that brite. ...
209.73.188.28 - Likes to port scan/ sweep
Likes to port scan, probably looking for something. Needs to leave people alone, he may come accross someone with no sense of humor. ...
74.201.117.247 - port scanning
That bastard scanned my ports. Dunno what to do. I can only urge:
dear 74.201.117.247, plz, go fu*k yourself. Otherwise we will find you and kick the sh*t out of you.
sincerely,
society
...
218.87.16.135 - unauthorized LAN access
IP shows up in firewall logs as having attempted access to a host on my Local Area network. remote access on that host is disabled no other ...
58.218.199.227 - Keep getting loads of connections from this ip
My server program keeps getting loads of attempted connections from this ip and its trying to crash the server. Ive seen serveral complaints and would like to see this person stopped....
61.184.196.122 - Morfeus Scanner soapCaller.bs
I got few hits from the bot on this address , it\'s probably a victims address but anyway, this might save him after all.
61.184.196.122 - - [02/Jan/2012:01:01:14 +0100] \"GET /user/soapCaller....
113.16.169.195 - Port Scanner
2012-01-02 11:12:20 SCAN nmap TCP 113.16.169.195
2012-01-02 10:41:42 SCAN nmap TCP 113.16.169.195
2012-01-02 06:42:06 SCAN nmap TCP 113.16.169.195
2012-01-02 00:27:19 SCAN nmap TCP 113.16.169.195 ...
124.239.195.131 - Network Attack by 124.239.195.131
Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434
IP Address: 124.239.195.131
IP Address Country: China (CN)
IP Address Region: 22 Beijing
IP Address City: Beijing
IP Posta...
192.168.1.101 - IP address 192.168.1.101
Constant firewall detections of port scanning. See sample below.
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
12/31/2011 8:14...
192.168.1.103 - IP address 192.168.1.103
Norton security checks show this IP address in constantly scanning for open ports on my computer. See entries from firewall log:
Category: Firewall - Activities
Date & Time,...
221.194.46.176 - scanning my ports
this ip address has been scanning my ports
his ip address has been scanning my ports
his ip address has been scanning my ports ...
31.44.184.99 - Many Domains (CIA Operated)
31.44.184.50
IP Address Organization: Laveco
IP Address ISP: DoD Network Information Center
IP Country Name: Russian Federation
IP Country Capital: Moscow
IP Language: Russian
IP Currency: Ruble...
85.114.135.36 - Port Scanning
Cette DOS Attack me semble tout à fait inadmissible, illégale et répréhensible.
Cette DOS Attack me semble tout à fait inadmissible, il...
94.75.215.26 - 94.75.215.26
For the past 3 months, we have been under attach from this IP 94.75.215.26 address. It is using multiple port scans with ports from 18000 to 49999. ...
91.202.61.170 - Fraud
This ip-adress/user tried to access my computer, see below but was blocked
Fri Dec 30 11:16:17 2011 Blocked incoming TCP packet from 91.202.61.170:80 to 83.250.170.254:41871
Thanks for your attentio...
63.206.102.171 - Possible hack attept
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, 02.00 HOURS.
2nd time in the space of a month....
58.218.199.250 - 58.218.199.250
Security log:
Thu Dec 29 01:09:48 2011
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 8085 which use the TCP protocol.
Thu Dec 29 01:09:48 2011
=>Found att...
31.44.184.50 - allrequestsallowed.com
This ip has been submitting multiple GET request for allrequestsallowed.com to my webserver. Please see the apache2 log excerpt below:
31.44.184.50 - - [27/Dec/2011:17:23:51 +0000] \"GET http://...
85.112.217.46 - Port Scan Intrusion attempt
IP in Poland has been attacking our network server under the guise of POS software on port 2525 (Port 2525 has been used in some cases as an alternative SMTP port in case the ISP blocks port 25. So sc...
58.218.199.227 - 58.218.199.227
i.p. address 58.218.199.227 has been attemping several times a day to scan my computer.
I would like to know if there is anything I can do about it?
I can\'t believe the amount of IP scans that are tr...
58.218.199.147 - I get more attacks in the area by various ip
Hello everyone, I had a doubt, if you use a dyndns service? I think using a flaw in the site to find and attack the PC. thanks...
221.194.46.176 - and they scan again :)
scanned for the x\'d time
Source port : 12200
Destination ports = 27977,9000,1080,9415,6588
this is the sequence every few hours *sigh*
(and typing 25 words is a bit overkill)...
175.45.25.83 - Hacking / port scanning from 175.45.25.83
I have my router reporting port scanning / hacking from the IP address 175.45.25.83. The recent ports scanned by this IP address where:
1518
1565
1065
1268
1658
1205
1533
1863
1143
1596
1846...
58.218.199.147 - continuous alert
I get continuous alerts about this site.
Can\'t anyone stop it. very anoying. It is trying to attack 4 routers of mine.
stop stop stop stop stop stop...
50.2.43.37 - Scanning ports from this ip!!!!
Scanning ports from this ip!!!!
I\'m scare...)) Please, help me!
Scanning ports from this ip!!!!
I\'m scare...)) Please, help me!
Scanning ports from this ip!!!!
I\'m scare...)) Please, help me!...
50.2.43.37 - port scan
Somebody is scanning your computer.
Your computer\'s TCP ports:
1627, 1877, 1455, and 1283 have been scanned from 50.2.43.37..
Same IP scanning ports many times...
175.45.25.83 - Porn Scaning
This ip Attack Porn Scanning many time
my virus software show MSG
try to hack network daily i geting this attack MSG on my virus software
please block this ip
Thank You...
58.218.199.147 - Modem log report attempts to connect from this IP
As many others, I too have sustained port scans attempts from this IP. 4 times in the last hour only...
When this guy tries to connect, I suffer some severe lag in my internet connection... ...
175.45.25.83 - Port scan from 175.45.25.83
my Firewall alerted of the following -:
Somebody is scanning your computer.
Your computer\'s TCP ports:
1627, 1236, 1971, and 1252 have been scanned from 175.45.25.83.....
77.109.171.19 - MALWARE BOTNETS OR HACKER GANG PORT SCANNING 77.109.171.19
4:37:16 PM 77.109.171.19 Subnet blocked for 60 min SCAN (9666, 24002, 9410)
4:37:13 PM 77.109.171.19 Detected attack, host not blocked SINGLE_SCAN_PORT (9666)
4:37:13 PM 77.109.171.66 Subnet blocked f...
58.218.199.227 - I Keep getting port scans from these !%^!^!^!#$!@#@!@!#
I Keep getting port scans from these !%^!^!^!#$!@#@!@!# messes up my ping when playing online games. An example:
58.218.199.227 80
58.218.199.227 8080
58.218.199.227 9090
58.218.199.227 8000
58.2...
74.125.226.138 - Google **stealth mode** port probe attack from 74.125.226.138:80
One of several examples (varying Google IP addresses): note the timestamps to indicate the rapidity of this attack: 78 attempts in ~90 seconds (which was probably actually being bandwidth-limited on...
208.248.77.132 - portscan
The router detected port scan from that IP address and eventually flushed my computer off of it leading to DNS errors.
syn ack port scan attack from 208.248.77.132...
205.152.132.23 - Port Scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 12/21/11 07:52:25 aM
Number of ports that were scanned: 12
Highest port : 1038
Lowest port...
221.194.46.176 - constant annoying portscanning
constant annoying port scanning. None stop, even as I write this report I\'m being port scanned repeatedly by this IP. Unsure about the purpose of these portscans, but seems like spam....
206.161.121.2 - IP Protection started successfully
01:56:48 Ciprian Ionita IP-BLOCK 206.161.121.2 (Type: outgoing, Port: 55134, Process: svchost.exe)
01:56:56 Ciprian Ionita IP-BLOCK 206.161.121.2 (Type: outgoing, Port: 55139, Process: svchost.exe)
01...
221.192.199.49 - Port scanning
Port Scanning 12/19/2011 7:09:07 PM Detected Port Scanning attack 221.192.199.49:12200 192.168.0.10:8090 TCP continuous port scanning every few minutes. This has been happening for a couple months an...
221.192.199.49 - won't stop
Non stop port scanning of network. Please do something to stop this as many other people on the net also have this issue. Bad IP....
58.218.199.227 - Attempt to break into my server
Please block this user 58.218.199.227 as his practices are cracking into private domains. If you will not react on this message I will sue you as a provider in the court of law! I will forward this wa...
125.39.91.178 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
222.184.232.2 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
121.201.247.2 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
202.102.153.70 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178, 123.62.24.246 . From some adres...
61.138.254.34 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178, 123.62.24.246. From some adress...
123.62.24.246 - Port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
50.2.43.37 - 50.2.43.37
Very very Excessive Port Scanning 1 Sample: Possible port scan detected - 50.2.43.37, 12200, X1 - TCP scanned port list, 1221, 1190, 1644, 1815, 1158...
58.218.199.227 - 2nd report, explanation below.
This was the 3d attack, the first 2 your sight said was wrong IP, that is incorrect, I checked the other 2 IP\'s several times, don\'t tell me they are wrong, ESET logged them, and I verified several ...
58.218.199.227 - Attempting port scan from several differant IP's after visiting the DHS C6 security clearance wiki page.
The above IP and several others have attemped to scan my ports in the last half hour at least 4 times. It started after I was checking to see what a DHS C6 security clearance is on the Wiki page. ...
58.218.199.147 - Constantly scanning
My firewall blocks the attack., bans it for 300 seconds, then the scan will scan my ports 9415 ,8000,8008,8118,7212,6588,8080 all over again!It just keeps looping!...
118.34.239.99 - 118.34.239.99 KOREANS AR STILL HACKING
THEY ARE FUCKING STUPID ......SCANNING MY MACHINE LIKE HELLLLLL10:21:22 PM 118.34.239.99 Subnet blocked for 60 min SCAN (5888, 5632)
10:21:11 PM 118.34.239.99 Detected attack, host not blocked SINGLE_...
121.144.199.37 - 2 KOREAN ASSHOLES HACKERS121.144.199.37&118.44.123.181
10:03:07 PM 121.144.199.37 Subnet blocked for 60 min SCAN (5888, 5632)
10:02:57 PM 121.144.199.37 Detected attack, host not blocked SINGLE_SCAN_PORT (5888)
10:02:56 PM 118.44.123.181 Subnet blocked fo...
74.201.117.247 - trying to hack my computer
This IP address is trying to send spam from my computer and I want it to end and for them to fuck off and die relativley soon....
50.2.43.37 - port scans
firewall blocked port scans from this IP. Several within a few minutes of each other. . . . . . . . . . . . . . . . . . ...
58.218.199.227 - sonicwall port scanning attack
attempting access to my sonicwall device. Logs show probe on specific port, then a port scan, then attempted administration access to device. Was unable to login...
58.218.199.147 - Port scanning and malware attack
It happens more and more often!! The attacks happen at least 6 or 7 times every hour. Luckly I run ESET Smart Security. Norton would never block these attacks....
50.2.43.37 - TCP Scans
I have received several TCP scans from 50.2.43.37 on four occasions the last two days. The Firewall alerts reads-:
Somebody is scanning your computer.
Your computer\'s TCP ports:
1955, 4965, 11155...
88.80.10.1 - 88.80.10.1 - apenas fazendo testes em servidores?
eu registrei acesso deste sistema no meu IIS, somente neste horário:
88.80.10.1 - - [10/Dec/2011:01:54:26 -0200] \"GET /pp/anp.php?a=U%5C%5DHWW_FAE%5CRE&b=6979&c=07aa HTTP/1...
75.74.84.157 - fuck off
złodziej !!!
fuck off!!!fuck off!!!fuck off!fuck off!!!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck...
58.218.199.227 - stopped by Virus Barrier X6
Virus Barrier X6 signaled an alarm and blocked this address for port scanning. I know only that is from China. I do not know anything else about it....
58.218.199.227 - 58.218.199.227 port scan
has been trying to scan my computer at least 40 plus times in 2 days my firewall has blocked it each time its becoming very irritating...
89.149.242.175 - Constant port spamming
Would like my IP to block this domain from trying to get through my ports. Outside of my log files being congested with this address, seems to be harmless so far....
58.218.199.147 - 58.218.199.147 Port scanning
Non stop port scanning. Getting hits every day.
18:07:59 work IP-BLOCK 58.218.199.250 (Type: incoming, Port: 8080, Process: unrealtournament.exe)
22:15:27 work IP-BLOCK 58.218.199.227 (Type: incomin...
209.18.47.61 - Port Scanning
This IP has been running a continuous port scan on my current IP for days now. I presume this is not standard protocol for any legitimate services....
221.194.46.176 - damm chinks!
have these damm chinks got nothing better to do with their timeport than scanning us.? nnn nn nn nn xx xx xxx xx xxx xx...
58.218.199.147 - 58.218.199.250
i cant even count the number of blocks of this IP on my router\'s block list right now from today alone. At one point I counted around 20 in one minute.
...
221.194.46.176 - Continous Port Scanning.
Address: 221.194.46.176:12200. 10 Hebei China. ISP: China Unicom Hebei province network.
Triggered warning from firewall and logged 4 times in 3 hours. This individual is a persistant attemptive hack...
125.45.109.166 - Tese guys keep scanning
these guys has been scanning my computer on a daily bases for the last week and i am really getting sick of it. can someone please do something about it....
88.40.179.242 - probe
Time: Wed Dec 7 23:33:03 2011 -0500
IP: 88.40.179.242 (IT/Italy/-/-/host242-179-static.40-88-b.business.telecomitalia.it)
Failures: 60
Interval: 60 seconds
Blocked: Temporary Block
Log en...
183.16.203.102 - Site is attempting to access server
Site has been attempting to log into server. There have been multiple attempts on multiple ports. Server has been off during these attempts....
67.137.238.164 - Trying to access home server
Site is trying to access home server even though server has been off. There have been multiple attempts on multiple ports. Don\'t know if this is normal or not....
122.155.165.89 - north face sale
mens north face outstanding company!
Fantastic vendor and service! <H1><a href=\"http://www.saleskarenmillenoutlet.com/\" title=\"karen millen sale\">karen millen sale&...
125.45.109.166 - port scanning
the ip address 125.45.109.166 on a daily basis roughly every 20 - 30 minutes keeps trying to to hack my pc by performing port scan ...
94.231.109.47 - Minecraft Hack Attempts with Port Scanning
Minecraft Hack Attempts with Port Scanning.
https://en.unoeuro.com owns this server. I reported this to the web hosting provider, https://en.unoeuro.com, that linux19.unoeuro.com is causing massive p...
63.206.102.171 - port scanning
[Mon Dec 05 01:22:09 2011] [error] [client 63.206.102.171] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
serveur compromise ? or fucking sc...
58.218.199.147 - port scanner Chinies hacker attacking
29.11.2011 23:19:10 Detected Port Scanning attack 58.218.199.147:12200 <my ip:port> TCP
28.11.2011 23:21:35 Detected Port Scanning attack 58.218.199.147:12200 <my ip:port> TCP
Eset Smar...
221.192.199.49 - Port scan
Port scan at 9:25 CET 2011/12/05
I found this in my router\'s security log
TCP Packet - Source:221.192.199.49 Destination:<My ip address> - [PORT SCAN]
Now is back listed!...
221.194.46.176 - port scanning
this ip is port scanning my pc every few minuets. Hope tey have a earthquate, flood, fire or other disaster in that area very soon,...
58.218.199.227 - repeat port scanning
I have been getting repeat port scans from this site evry 10 to 15 minutes. Pity we can\'t call down a earthquake or flood on this area...
27.4.209.173 - 27.4.209.173 is port scanning my computer
From the past several days, ip address - 27.4.209.173 has been scanning ports on my computer. My firewall has caught the ip address. I am on Hathway cable broadband...
221.194.46.176 - annoying
Firewall has blocked over 100 tcp attempts by this IP over the last week.
Believe all were stopped yet wondering why the attacks since all of my ports are in stealth mode. Have done scans both intern...
64.126.41.129 - 64.126.41.129
64.126.41.129 is port scanning for some strange reason. multiple attacks today. appears to be a ton of port scanning activity for some reason. strange days...
86.42.249.170 - Had this address attempting to connect to my router/firewall
Blocked incoming TCP connection request from 86.42.249.170:62234 to xxx.xxx.xxx.xxx:56425
Saw this whilst viewing logs for my router, saw the other chinese IP addresses that are reported as well.
...
90.154.201.34 - port scanning
got this ip addres that my firewall detected while doing a port scanning attack.it started recently and it\'s pretty annoying,anyone knows what to do ?...
58.218.199.147 - Somebody kill this person IRL please
DDOS-style port scans, countless per second. Fuck China.
Fuck China up the ass, if we go to war I hope we nuke every last one of the lawless degenerate fucks and I say this as an asian person.
Fuck...
58.218.199.250 - many tries
new win7 installed today and every hour 2 port scans. what a luck i installed also a trial firewall which is logging all tries on my system...
58.218.199.147 - Port Scanning Attack
IP: 58.218.199.147
Location: China
Port scanning attack.
Blocked!
<3 you eset!
http://www.eset.com/
This is about the 5th time he/she/it has done a port scanning attack. It does not bother me but...
117.243.250.249 - port vnc
1st december 2011 (in the afternoon GMT)
this IP performs only one try on vnc port
as this port scanning leads to no success so there has been no other port probing...
However this is still a port sca...
58.218.199.227 - 58.218.199.227 port scanning
I found this IP address scanning me several times over the last few days, and apparantly I\'m not the only one. Here\'s three more words....
eset smart firewall detected port scanning attack from this ip, port 12200
i don\'t have anything more to say
i don\'t have anything more to say
i don\'t have anything more to say...
83.151.38.219 - Heads up!
This ip is scanning my ports. If anyone have this message, please report it as soon as possible. Other people would really appreciate it. Bye.
...
46.19.141.244 - scann
port scanning from 46.19.141.244:12200 Hacking, Port scan, Proxy IP, SQL Injection, VPN IP, FTP Brute-force, Phishing, Ping Of Death, Spoofin, Email Spam asshole lol adawez...
58.218.199.250 - Port Scanning
Port scanning for several days on my system.. several layers/protocols to be protected TCP/UDP Detected... Should be shut down... and blocked from communication.... Problematic..Thank You....
221.194.46.176 - Problematc..
Port scanning for four days to attempt to reach through several layers of security.. Problematic constant notification windows and filtering.. several layers and protocols to be protected.. Should be...
122.132.26.56 - port scanning
Hello,
the above ip is trying to make a PORT SCANNING attach on other systems.
the above ip is trying to make a PORT SCANNING attach on other systems....
31.7.59.139 - constant dos attacks
I\'m receiving constant logs and alerts of port scanning and DOS attacks coming from 31.7.59.139 starting 11/24. I\'ve added them to blocked IP list and reported to my ISP for further investigation....
58.218.199.227 - 58.218.199.227
come on, nmap back shows its some infected machine as all the ports are open at 58.218.199.227
Discovered open port 199/tcp on 58.218.199.227
Discovered open port 3306/tcp on 58.218.199.227
Discovere...
63.206.102.171 - Port Scan Alert!
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, This has never been a problem before.
28/11/2011 23:21:34 Detected Port Scanning attack 4.79.142.206:430...
31.7.59.139 - router dos attacks
31.7.59.139 is doing nightly port scans to my cox IP address and generating multiple DOS attacks. I have put them in a deny ACL list, but the attempts persist....
31.7.59.144 - 31.7.59.144
This IP address has conducted several port scans and has attempted to access the network. I have now blocked this IP address in the router firewall....
Consistent port scanning over the past two weeks. Blast these people, will you? Multiple forum mentions of this address doing this. Results in DOS to Xbox services....
31.7.59.144 - 31.7.59.144
block
Nov 26 08:56:47 WAN 31.7.59.144:12200 x.x.x.x:1455 TCP:S
block
Nov 26 08:56:47 WAN 31.7.59.144:12200 x.x.x.x:1049 TCP:S
block
Nov 26 08:56:46 WAN 31.7.59.144:12200 x.x.x.x:1393 TC...
31.44.184.99 - port attacking
80,135,445 , created a limited user on my os,
my os is Windows Vista.
and deleted my \"Report Folder\"(about my work).
attacker ip : 31.44.184.99 company : Laveco LTD...
58.218.199.147 - Reporting a port scan
why do I need to write twenty five words such as a bit more than this to pad this out till i get to 25 words or more si this enought...
31.7.59.144 - Port Scans from this IP over last 2 weeks
My Netgear router has been giving Port Scan reports for this IP address for the last 2 weeks or so, very unusual to receive so many from a single address. ...
72.130.22.240 - 72.130.22.240 is running port scans
The 72.130.22.240 is running ports scans to router it should not.
Please stop this port scan it should not be doing this kind of activity.
Please address the matter....
71.202.110.217 - Ip address is portscanning
the device is doing a port scan.
ip address is trying to portscan my router
Please deal with this infected pc it should not be scanning a router....
58.218.199.227 - Scanning all ports constantly
Another China outlaw. This IP is hitting my firewall constantly looking for any open port. Is there anything somebody can do? This is frigging rediculous!...
eset nod 32 is deticting port scan attack from 31.7.59.144 several times a day
eset nod 32 is deticting port scan attack from 31.7.59.144 several times a day
eset nod 32 is deticting port scan attack ...
216.171.102.24 - 216.171.102.24CANADIAN ASSHOLE SCANNING HACKER
THIS ASSHOLE WAS SCANNING AROUND 10-15 PORTS TO GET IN MY PC ...IP Address: 216.171.102.24
IP Address Country: Canada (CA)
IP Address Region: ON Ontario
IP Address City: Guelph
IP Postal Code
IP Add...
31.7.59.144 - Numerous Port Scans from this IP
31.7.59.144 25023
31.7.59.144 12072
31.7.59.144 1459
31.7.59.144 1329
31.7.59.144 1221
31.7.59.144 2006
31.7.59.144 2002
31.7.59.144 1252
31.7.59.144 1752
31.7.59.144 1658
31.7.59.144 1299
...
221.194.46.176 - been scanning for years
11:10:03 Firewall default policy: UDP (W to W/ZW) 88.100.199.247:13106 76.104.149.136:50733 ACCESS DROPPED
3 2011-11-23 10:58:54 Firewall default policy: TCP (W to W/ZW) 58.218.199.250:12200 76.104....
58.218.199.147 - been scanning for years
2 2011-11-23 11:10:03 Firewall default policy: UDP (W to W/ZW) 88.100.199.247:13106 76.104.149.136:50733 ACCESS DROPPED
3 2011-11-23 10:58:54 Firewall default policy: TCP (W to W/ZW) 58.218.199.250...
58.218.199.227 - Port Scanning
My Software blocks this from scanning my computer regularly.. Also have A lot more Scans also Coming from China... And south Asia Also seeing some from Panama......
125.45.109.166 - Back at it again
Looks like this IP is back at it again:
Nov/22/2011 13:04:03 Drop TCP packet from WAN 125.45.109.166:12200 xx.xx.xx.xx:3128 Rule: China7 deny
Nov/22/2011 13:04:03 Drop TCP packet from WAN 125.45.10...
58.218.199.227 - port scanned
I just got port scanned by this person,and its prob not the first time either.
I am writing down the ip adresses now. Twenty five words huh?...
58.218.199.227 - getting hit by thie ip daily
for about the past 6 months i have been getting numerous attempts at network access from this IP.
I have blocked it for incoming and outgoing traffic and now instead of being hit by 58.218.199.227 i a...
192.168.1.102 - Constant scanning
I\'ve had over 60k hits from these guys in the last 20min or so. Not sure what they want but it\'s annoying, make it stop!! lol...
221.194.46.176 - Repeated Port Scans From this IP
I receive daily port scans from this ip and subnet and it is very irritating:
221.194.46.176 5390
221.194.46.176 3246
221.194.46.176 73
221.194.46.176 9415
221.192.199.49 7212
221.192.199.49 23...
111.118.177.111 - adminstrator block my ip
dear sir Administrator of this site blocked my ip (14.102.80.2) thats why my user cant see the result of kuk,plz unblock that
i shall be thankful...
89.149.242.175 - 89.149.242.175 port scanning
Getting port scanned from IP address 89.149.242.175, resolved as \"netdirekt e.K\" about 10 times per second. This is unauthorized and I am requesting it be stopped.
...
77.69.239.163 - Port scan from yellow niggers
Getting a port scan from filthy yellow niggers 58.218.199.250, get a life you squint eyed bastard scumbag or go kills yourselves ya filth.
Stupid yellow bastards
...
221.192.199.49 - Scanning ports as well as trying to connect many times.
This guy from China appears to be scanning my ports while also trying to connect via port 12200. I would really appreciate thos annoying guy to get a life....
67.215.242.139 - all port scan attack from Internet Protocol (IP) address 67.215.242.138 / 67.215.242.139.
Forefront TMG detected an all port scan attack from Internet Protocol (IP) address 67.215.242.138 / 67.215.242.139.
trys to attack my computer every 5 to 10 minutes. but i have a malware blocker/remov...
188.165.234.50 - FRENCH ASSHOLE SCANNING 188.165.234.50
2:13:57 AM 188.165.234.50 Subnet blocked for 60 min SCAN (24261, 24517, 25029)
2:13:57 AM 188.165.234.50 Detected attack, host not blocked SINGLE_SCAN_PORT (24261)IP Address: 188.165.234.50
IP Address...
58.218.199.147 - 58.218.199.147
My router reports IP 58.218.199.147 port scanning. Complaining to CHINANET achieves nothing; is there anything that can be done to stop people attempting to infiltrate?...
58.218.199.227 - 58.218.199.227 Port Scan and DOS attacks
My router reports numerous port scans and DOS attacks from IP 58.218.199.227. At the worst, more than 30 port scans in approximately 20 minutes. ...
91.202.61.170 - Port scan from 91.202.61.170
Runs a port scan since 13 hours
Probable port scan dropped - Source:91.202.61.170, 80, WAN - Destination:x.x.x.x, 54216, WAN - TCP scanned port list, 50492, 47388, 55830, 50770, 35786, 51339, 5967...
58.218.199.147 - My TMG Box is detecting this ip.
Keeps trying for a port scan attack on my Microsoft Threat management gateway, it does appear to be blocking it fine but having read this thread i will perminently block it....
68.94.157.1 - scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 68.94.157.1
Time at last attempt : 9/13/11 11:03:08 AM
Number of port...
58.218.199.227 - Communist country trying to scan
ip address 58.218.199.227 keeps attempting to scan my computer. ESET blocked it. Now why is a computer from a communist country trying to scan my computer?...
31.7.59.184 - I have gotten numerous port scans from them.
Here is my firewall log showing that they have been scanning me:
Firewall log:
Sat 2011-11-12 01:16:59 TCP flood From 31.7.59.137 port:12200 To 76.190.191.171 port:1674 droped
Sat 2011-11-12 01:16:59 ...
221.194.46.176 - 221.194.46.176
Nov/15/2011 14:59:42 Found a SYN Flood
Nov/15/2011 14:58:43 Drop TCP packet from WAN 221.194.46.176:12200 68.81.73.111:8008 Rule: msnmsgr deny
Nov/15/2011 14:58:43 Drop TCP packet from WAN 221....
124.239.195.131 - Network attack
I have seen many network attack forming by China basis. Here is my msg.
11/15/2011 10:05:10 PM Unknown Denied: Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434
and inf...
173.244.177.45 - Unauthorized port scan from 173.244.177.45
Unauthorized port scans have been coming from 173.244.177.45 on the follow date and times. Nov 11 01:23:25, Nov 12 13:48:15, Nov 13 04:49:21, Nov 13 20:15:09, Nov 14 06:56:39 ...
208.93.140.80 - Port Scan
11/15/2011 17:04:23.816 Alert Intrusion Prevention Probable TCP FIN scan detected 94.127.75.80, 80, X1, LB150.PARS.COTENDO.net 217.109.99.201, 18216, X1 TCP scanned port list, 51719, 56424,
51072, 36...
118.122.188.27 - IP Attempting FIN scan of our entire /24
[00003] 2011-11-15 09:21:43 [Root]system-critical-00438: FIN but no ACK bit! From 118.122.188.27 to 128.91.252.100, proto 6 (zone Untrust, int ethernet1). Occurred 1 times.
[00004] 2011-11-15 09:15:00...
89.149.242.175 - Port Scanning
The IP-address 89.149.242.175 is portscanning about 500 scans per second and keep going on engaging in SPAM, brute-force, DOS attack, phishing, or other fraud.Scanning my PC...
69.171.229.13 - FACEBOOK ASSHOLE HACKER SCANNING-69.171.229.13
6:51:29 PM 69.171.229.13 Subnet blocked for 60 min SCAN (50371, 50883, 50627)
IP Address: 69.171.229.13
IP Address Country: United States (US)
IP Address Region: CA California
IP Address City: Palo ...
192.168.0.1 - ip address 192.168.01
i had my laptop hacked and shut down a few days ago i have just bought new laptop with bitdefender on and im forever getting port scan attemps blocked by the same ip address: 192.168.0.1 and 192.168.0...
66.6.152.144 - HAS BEEN STALKING ME I HAVE PROOF
KEEP GETTING EMAILS FROM
THIS ADDRESS AND I DO NOT HAVE SERVICES WITH COX!!! AS WELL SHE IS SQL HIJACKING ETC.. HELP!! THE PERSONS THAT HAVE THIS IP WORKS FOR COX IN TULSA! PLEASE HELP!!...
131.234.154.6 - Scan port TSE 3389
Top 50 signature matches:
\"MISC MS Terminal Server communication attempt\" (tcp), Count: 2, Unique sources: 1, Sid: 100077
...
58.218.199.227 - Please STOP!!!
I\'m getting scanning and DOS attacks from this computer against my router constantly. Seems like every day now. I\'ve blocked the IP, but this should not be allowed to continue....
24.37.170.192 - Viideotron Ltee
This was listed as a HIGH risk attack from this. What is unnerving is that it can be used with many electronic devises. ...
112.216.149.218 - Massive scan
This is attempted a multitude of port today
Massive scan on all TCP ports and detection of scan HTTP also. Try many urls and escape code....
221.1.220.174 - Blocked incoming TCP connection request from 221.1.220.174:12200
Blocked incoming TCP connection request from 221.1.220.174:12200
I am constantly seeing this listed on my router logs list with a couple other ports and ip listed in there as well.
...
124.255.45.190 - attack to port 110, from b4dbe.static.pacific.net.au
nonstop port 110 connections from name, b4dbe.static.pacific.net.au.
This attack has been going on for over seven hours. I had to bleck all of port 110 to stop. NsLookUp shows IP address as 124.255.45...
66.35.46.194 - Hacker Port Scan
Started port scanning me today.
Here\'s from the log-
[INFO] Sun Nov 06 21:23:31 2011 Blocked incoming UDP packet from 66.35.46.195:10575 to MY_IP:33436
[INFO] Sun Nov 06 21:23:07 2011 Above message...
78.8.177.34 - attack
Hi there my kaspersky internet security tells me that an attack from this ip 78.8.177.34 please someone there can explain me what is going on with this person??...
58.218.199.147 - 58.218.199.147
ip adres try scan my ports early got ip 221.192.199.49 but is the same operator in china fuckin hackers shuld die like rats sry my bad english...
89.149.242.175 - Scanning my PC
Is 89.149.242.175 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud.Scanning my PC. They keep on doing post scans on my machine and it never stop....
221.194.46.176 - port scanning ATTACK
Continuouly port scanning from 221.194.46.176.:12200 . Only have OS AND Security software Installed on my computer. Wipe out my OS and started for scrach did all updates on windows and security but...
91.202.61.172 - all port scan attack
Detected an all port scan attack from Internet Protocol (IP) address 91.202.61.172.
Got this warning in the log several times on the firewall during the past days....
209.18.68.13 - was just port scanned by this ip address
I was just port scanned by this ip address. the ports that were scanned is as follows. do not know if this is bad or not.
TCP scanned port list, 63326, 38287, 5252, 27358, 38014...
202.96.199.150 - 202.96.199.150 Actively Scanning Access to Router
Received several access attempts from this IP trying to gain access to home network.
Reccommend a complete block of all associated domains:
202.96.199.0 - 202.96.199.255
It\'s about time that we st...
221.192.199.49 - port scanning attacks
2011-11-01 18:26:57 Detected Port Scanning attack 221.192.199.49:12200 1xx.1xx.x.x:8008 TCP they tried to scan my ports and they do it many times a day what can i do with it? need some help...
221.192.199.49 - Port scanning
ils font chier les chinois
01/11/2011 15:04:59 Attaque par balayage de ports détectée 221.192.199.49:12200 192.168.0.1:73 TCP
01/11/2011 11:51:08 Attaque par balayage de po...
58.218.199.227 - Doing my head in
Yes i\'ve had the same problem with this ip, my firewall is blocking this and all ip\'s from china...but it\'s just damn annoying seeing it you\'re logs!
regards anon....
58.218.199.147 - Anoying little Critta's!!!
Had scans from this I.P. address For some time now. They became very frequent about twelve months ago. At the beginning though of this year they began fade out. Then silence for six months..... And gu...
58.218.199.147 - regular port attacks
Seeking redress against these criminals invading my privacy & enforce liability against them. There have been 11 port scanning attacks from this IP address against mine so far.....
89.149.242.175 - Portscanning about 100 scans per second
The IP-address 89.149.242.175 is portscanning about 100 scans per second and never stops. It is resolved as \"Netdirekt e.K\". Either it\'s a RIAA/MPAA type of org, or it\'s a spammer/hacker...
80.237.133.32 - Ref Spam
http://www.webmasters-paradise.com
Daily ref Spam. Spam sites to get traffic to his own site. Webmaster cheap bastard. Spam sites to get traffic to his own site. Webmaster cheap bastard....
188.92.76.217 - Port scans and brute force attacks on www.1togo.net
Continuous port scans and brute force attacks on www.1togo.net. We have since blocked the entire telia.net network but the attemps continue. Please find and disable this user....
198.107.148.113 - NTT America Poking around my network HD
Recorded several attempts to access my NAS drive. I\'m not sure what this company does, but I know they are associated with network security. Either way, I don\'t like them snooping....
221.1.220.174 - Being scanned by a group of chinese ips
Similar to 221.194.46.176, I am seeing multiple TCP requests coming in from china at my new comcast location, including: 58.218.199.28. Repeating port scans from different IP is strange though...so n...
221.194.46.176 - TCP Port Scanning from China spot again
TCP port scanning from blocked from:
221.194.46.176:12200
221.1.220.174:12200
58.218.199.28:12200
Attemping access of modem and router on ports 1830, 73, 8000, 8080.
I noticed similar activity back...
91.202.61.170 - Scanning all IP addresses
91.202.61.170 has been scanning all ports on multiple networks. This has been going on since at least October 24, using mainly MS-DS attack. Probes are dropped ...
169.254.83.178 - Scanning for Ports
This 169.254.194.189 address is always trying to scan local computers support. We have blocked the whole network 169.154. Our anti-virus software has blocking it but they never give up....
58.218.199.147 - this guy is relentless
This ip has been port scanning me for days and misusing his internet connection I would assume under your rules of use. I would like to report this abuse.
Sincerely,
D Nichol...
209.85.145.132 - port scan attack
ISA Server detected an all port scan attack from Internet Protocol (IP) address 209.85.145.132. For more information about this event, see ISA Server Help.
...
91.202.61.170 - 91.202.61.170
Been going on for 3 days now ....seems to be on all ports above 32000....
I can send detail reports it you like ...
Number: 380496
Date: 26Oct2011
Time...
58.218.199.147 - scan port and spam e-mail
I receive from several weeks continuing attacks from this ip address, I also noticed that it also gained access to one of my many email addresses and sent spam to my contacts ......
210.219.244.88 - Logon attempts
IP located in Korea. We are getting scan attacks from this IP address. IP appears daily in our server Security logs. It has been blocked. This IP uses port scanning and dictionary attacks. IP shown s...
58.218.199.147 - port scan
Very aggressive ports scan: Here are some of the ports scanned:
DPT=27977
DPT=8085
DPT=3246
DPT=9090
DPT=9000
DPT=3246
DPT=8090
DPT=8000
DPT=2301
DPT=6588
DPT=8008
DPT=8118
DPT=73
DPT=7212...
221.192.199.49 - daily podt scans
Your computer\'s TCP ports:
3246, 8090, 8008, and 8123 have been scanned from 221.192.199.49
9090, 2301, 8088, and 73 have been scanned from 221.192.199.49
3246, 8090, 8000, and 8008 have been ...
91.202.61.170 - Akrino Inc .
IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 **************** 0140 TCP 80->55656 [S.A...] seq 1551936660 ack 1757303447 win 512
If you read this Akino Inc. Why?...
217.247.32.25 - multipe of those log in my router
Blocked incoming TCP connection request from 217.247.32.25:1374 to 173.179.4.79:26826
[INFO] Mon Oct 24 22:50:48 2011 Blocked incoming TCP connection request from 217.247.32.25:1374 to 173.179.4.79:26...
91.202.61.170 - SYN-ACK port scan attack
Hello,
Thank you for this valuable service.
For the third time this month (October, 2011) my router
has logged a port scan attack from the following IP address:
91.202.61.170
The log entry is as f...
221.192.199.49 - Port scanning, port scanning and more port scanning.
Im getting scanned on several different ports almost everyday from 221.192.199.49 its annoying and theyre obviously up to no good. It would be nice if someone gave them a taste of their own medicine, ...
7 attempts so far today, & most of the time I have switched my router/modem off - IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 ...
202.111.175.176 - Scanning for setup.php files
THey were scanning for old setup.php files that I hadn\'t removed. Screw them. I hope that have more lax security practices than I do poop!
...
221.192.199.49 - Please ban and make an order with a faulty user
I have many reports about port scanning from 221.192.199.49. Please ban user which was trying to scan IP: 195.116.17.*. Looking forward for an answer. My addres is yku@op.pl.
Best regards,
Tomas K...
58.218.199.227 - 58.218.199.227
i.p. address 58.218.199.227 has been attemping several times a minute to scan my computer. My Malware bytes-anti malware has blocked it about 12 times in two days.
...
58.218.199.147 - this idiot called me on phone telling me i had computer errors ....its called home invasion
nail this ip address please ...this is a home invader...as you can see by all the complaints ...this dude has hacked other ppl ....do something about it!...
76.116.172.95 - FIN but no ACK bit!
Im receiving this in my logs from my firewall FIN but no ACK bit! From 76.116.172.95 extra words extra words extra words must be 25 words extra words must be 25 words...
221.194.46.176 - 221.194.46.176 Port Scanning
Firewall detected and blocked numerous attempts by ip 221.194.46.176 to port scan.
TCP Packet - Source:221.194.46.176,12200 Destination:86.23.25.39,8008 - [DOS]
TCP Packet - Source:221.194.46.176,12...
221.192.199.49 - Continuous port scanning of my firewall
Nothing new - happens all the time from multiple Chinese ip addresses. I figured I\'d document it for posterity. Working on something interesting for these Crackers :)...
58.218.199.227 - ANNOYING!
this IP is scanning my network for days, in every hour they are trying to get in. I HATE THEM! blacklist pls! Its really too much for copy all the entry\'s in this field!...
115.236.76.233 - Receiving requests on port 5060 from 115.236.76.233.
Receiving requests on port 5060 from 115.236.76.233. We are seeing constant incoming requests on port 5060 from 115.236.76.233 and it is slowing down our equipment....
58.218.199.227 - i.p. address 58.218.199.227 has been attemping several times a minute to scan my computer
Firewall blocked and logged the following :
TCP Packet - Source:58.218.199.227,12200 Destination:xx.xx.xx.xx,73 - [DOS]
TCP Packet - Source:58.218.199.227,12200 Destination:xx.xx.xx.xx,3246 - [DOS]
T...
189.80.219.230 - 189.80.219.230 / www.al.ma.gov.br
Type d\'attaque : DDoS , Spam, Reverse Dns, Fraudes, Hacking, bref, la totale.
Ps : il est assez marrant de voir que cette IP semble appartenir au gouvernement brésilien (Ftp gov hacked ...
217.110.97.201 - DOS attack
[DOS attack: RST Scan] attack packets in last 20 sec from ip [217.110.97.204], Thursday, Oct 13,2011 10:03:55
Twice to-day: what should I do? Is it dangerous for my router and/or PCs?
...
68.87.74.166 - Norton Internet Protection - Worm/Portscan
Indicates that a worm involved in portscanning came from this IP. I do not know much more than this. Can anyone explain what this is about?...
221.194.46.176 - Firewall Alert
The Chinese are invading, BIG TIME! Every hour at a minimum I have had one of the following IP trying to breach my system: 221.194.46.176, 221.192.199.49, 58.218.199.147, 58.218.199.250 and 58.218.199...
85.113.230.85 - port scanning by 85.113.230.85
Someone at concepts-ict is trying to scan ports:
Mon Oct 10 10:54:23 2011 Unrecognized attempt blocked from 85.113.230.85:39813 to 80.56.80.194 TCP:443
attempts are blocked by my firewall...
91.202.61.172 - port scanning by 91.202.61.172
Several attempts of port scanning are blocked by my router:
Mon Oct 10 10:44:31 2011 Unrecognized attempt blocked from 91.202.61.172:80 to 80.56.80.194 TCP:12261
Don\'t know where this is coming fro...
58.218.199.227 - hacking from china
Mon Oct 10 10:41:09 2011 Unrecognized attempt blocked from 58.218.199.227:12200 to 80.56.80.194 TCP:9415
Above log comes from my firewall numerous times an hour. Attempts are blocked....
62.24.134.125 - constant port scannin
Its been going on for 2 days now ... scanning my ports all day thank god for m,y firewall ..
have tryed calling the people but i get nothing ...
68.87.74.166 - intrusive attempt at port scanning
do not know who is the above ip address but they have attempted a port scan on this pc earlier this evening that was blocked by my software...
58.218.199.250 - My router is repoorting hundreds of "DOS" probes
Day after day this site is probing my home network. Sometimes a hundred attempts a day, and this has been for weeks.
Block it!
PS Why do complaints have to be at least 25 words long?...
70.26.253.25 - Port scans non stop
It keeps scanning with no reason to do so, UDP and TCP ports in the 50000 to 60000 range. Flooding the router logs too which is frustrating...
58.218.199.250 - Clogging my router
These jerks keep scanning my ports. Kills my router and is really annoying. Can\'t somebody shut them off? Surely there has to be a way to block all traffic from repeat misusers of the global inter...
58.218.199.250 - Blocked Packets on Numerous Ports
Multiple attempts to send messages to different ports. Hogging router time and reducing bandwidth. Very annoying that they do this. Thrre more words....
58.218.199.250 - about once / minute
dam chinese are port scanning. This is tying up my router.Appears to be selectively harvesting,and also pinging.And [DOS attack: RST Scan] attack packets . dam chinese...
187.7.37.31 - Attempted to log into server using port scanning
Attempted to log into server using port scanning and a range of user IDs over ever 3-5 seconds over a 2 hour period. They had identified the workstation name and account domain but did not have the c...
211.155.225.35 - Attempting to log into private server
Chinese site attempting to log into server using port scanning. Attempts were made to enter unsing the administrator accounnt. Fortunately no logins were successful....
IP number 64.71.33.42 was blocked for port scanning on my PC. I\'m not sure who this is but I\'m going to check for infections now....
74.125.159.139 - Why?
I got a pop up from my firewall saying that IP 74.125.159.139 was blocked because it was scanning ports. Seems kinda shady that Google would be scanning ports......
221.192.199.49 - Constant attacks
ESET Smart Security has been warning me on a regular basis about Port scanning attacks from this IP. I am getting an attack once every few hours it seems....
91.202.61.170 - all day scanning network
constantly testing network addresses
constantly testing network addresses
constantly testing network addresses
constantly testing network addresses
constantly testing network addresses
constantly test...
91.202.61.170 - Scan attacks
IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 XXXXXXXXX 0339 TCP 80->34871 [S.A...] seq 3438580134 ack 579183560 win 512
...
218.75.4.130 - Sequential port scanning
I got a pop-up from ZoneAlarm asking me to allow lsass.exe to act as a server on port 4500. I opened my ZoneAlarm log and found that ports 4272 through 4626 had been scanned in sequence (355 scans in ...
91.202.61.170 - IDS proto parser from 91.202.61.170
IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 TCP 80->15996 [S.A...] seq 4240243228 ack 125569564 win 512
IDS proto parser : tcp data on syn segment (1 of 91.202.61.170 TCP ...
58.218.199.227 - 58.218.199.227 port scanning my pc
My Sygate Personal Firewall detected the above ip address (58.218.199.227) attempting to scan/scanning my ports several times and fairly consistent and persistent. October 3, 2011....
221.192.199.49 - IP 221.192.199.49 port 12200 port scanning me constantly
Getting ports scans from IP 221.192.199.49 port 12200 in blocks of 5 scans - each one with a different port being scanned about every 20 minutes. This has been happening for weeks. Can\'t we get this ...
87.248.217.254 - random scans
random port scanning from this guy!!
it is really annoying my firewall is destroying himrandom port scanning from this guy!!
it is really annoying my firewall is destroying him...
I have put up with this IP and sever as well as other IP addresses from the \"LimeStone\" network port scanning my pc. Even my customers pc\'s all over the seattle area for 3 years now.
...
107.20.103.106 - constant scan from this adress
been scanned all day, every minutes of the days, for a few days in a row now by this adress, here\'s the last 30 minutes log.
09/30/2011 06:58:57 Port Scan Minor Incoming TCP 107.20.103.106
09/30/201...
58.218.199.227 - Numerous Attacks
I.P. 58.218.199.227 along with 3 others at this time (all from China) are attempting entry into my computer. My ESET Smart Security 5 has been blocking it successively. ...
58.218.199.147 - TCP Packet - Source:58.218.199.147
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanni...
216.245.196.122 - Port attacks
This site probes my system hundreds of times over the course of a couple of days. It\'s an ongoing problem that could esily be considered harrassment or at least cyber stalking.....
202.170.122.83 - malware
trying selling women for sex they keep sending me stuff go to my website sign up and will meet you it bull sh!t please make it stop Thank you...
58.218.199.250 - 58.218.199.250
has been portscanning me for months now, Norton say\'s all have been blocked but he is a persistant SOB. Gotta learn to back hack him and drop a logic bomb up in his back side ...
58.218.199.227 - port scanning
ip 58.218.199.227 port scanning about 25 times/minute, logs show over last several days. using linux/ubuntu. It is being blocked (I think). I have a few open ports in my router, which it has not found...
72.21.202.153 - My ports being scanned
My Symantec Endpoint Protection stated that 72..21.202.153 is scanning my ports.
Your computer\'s TCP ports:
2253, 2256, 2257, 2255 and 2258 have been scanned from 72.21.202.153....
74.63.192.66 - started attack as I connected to Internet
An attack at my PC port 8085 started from 74.63.192.66:12200 synchronous with attack at my port 8085 from 58.218.199.250:12200 - what is the connection? Another probe was blocked soon from 74.63.192....
218.64.88.54 - Constant hacking attempt via remote desktop
23/09/11 attack every 7 seconds
Using terminal services to a small business server (remote desktop)
Attempting connection on a variety of ports
This is all part of a daily intrusion attempt from mult...
94.231.109.47 - minecraft
94.231.109.47 continiously tries access to my minecraft server. it seems that the access efforts are done automatically. how can we ban this ip address from trying to acces our minecraft server?...
They are still scanning IP addresses in the UK as of 22nd Sept 2011
My router has logged:-
Thu, 2011-09-22 10:00:39 - TCP Packet - Source:58.218.199.227,12200 Destination:XX.XXX.XX.XX - [DOS]
Thu, 2...
208.87.32.69 - Running Wireshark by chance (homework), and discoverd this IP port scanning my system
I was just running Wireshark a few minutes ago and discovered that someone using this IP address, 208.87.32.69, was port scanning my computer at the same time.
Server IP: 208.87.32.69
Country: Baham...
28.35.142.41 - port scanning
Attack came from 28.35.142.41 Peerblock and malwarebytes anti malware picked it up. This has happened various times. It may be someone spoofing that ip since it is registered to the DoD
...
216.172.166.200 - 3 attempts
Someone through this IP tried to enter into my PC through ports 637, 4749, 55212. Dont know why, ddon\'t have any ideas why this IP should try to enter into my PC. Thing, that there are no reasons. ...
68.94.157.1 - Port scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 68.94.157.1
Time at last attempt : 9/21/11 02:31:11 AM
Number of port...
74.63.192.66 - 8909 port scan
tried to gain access to our facebook account, on numerous occassions three times in a few minutes. Tried to access port 8909 unused port, blocked by norton and sent a message to me....
173.192.95.73 - IP 173.192.95.73 is constantly scanning my computer
Over the last few days my computer has been scanned constantly by IP 216.245.196.122 - why is this shit going on? there really needs to be more regulation and universal law when it comes to deali...
221.192.199.49 - what the fuck is up with 216.245.196.122?
over the past few days my computer has been scanned constantly by IP 216.245.196.122 - apparently looking for an open port. . . ...
64.14.192.236 - Port Scans
We\'ve been receiving numerous port scans per day for several days now from this IP Address. It\'s becoming a little annoying to say the least. Not sure what this is all about....
221.192.199.49 - Port scanning
1000\'s of port scans. Why does nothing happen to this ISP for allowing this?
1000\'s of port scans. Why does nothing happen to this ISP for allowing this?
1000\'s of port scans. Why does nothing happ...
192.168.202.175 - Port Scanning
Somebody using this IP address is currently port scanning my router using UDP and TPC connection requests to try and gain access to my network....
216.171.107.24 - 216.171.107.24 ASSHOLE PORT SCANNER
Scanning my ports to get in my computer , you will never enter in my personal PC you pussy asshole scanner , because i will come there to CHOPP YOUR FINGERS WITH A SHARP AXE IP Address: 216.171.107.24...
58.218.199.250 - 58.218.199.250
Port scanning my computer daily, often several times a day for more than two years now.
Luckily internet security keps it from getting in.
I know this happens to masses of people I know too, not j...
58.218.199.227 - repeated dropped packets in router log
I see numerous denied packets in my wireless router log from this and other IP addresses which are looking similar.
58.218.199.250:12200
125.65.112.133:7000
58.251.60.228:12200
221.192.199.49:12200
7...
66.35.46.194 - incoming
Sep 18 12:02:33 WAN 66.35.46.194:10184 88.84.25.122:33437 UDP
Sep 18 12:02:28 WAN 66.35.46.194:10184 88.84.25.122:33437 UDP
Sep 18 12:02:23 WAN 66.35.46.194:10184 88.84.25.122:33...
184.154.74.66 - Scanning my FTP tracking to crack it
Scum trying to hack my FTP with multi PW user search.
Has been attempting this for 30 minutes until I blocked him.
Check out the website. Looks like Homeland security should check them out....
94.231.101.83 - Attempting to find open ports!
This IP address is using a program to scan my server for open ports and I believe find information about me. I have no idea how to get this to stop. ...
58.218.199.227 - 58.218.199.227
This IP is constantly trying to connect to my shoutcast server but keeps timing out. I recently moved and now have a different IP address and it took no time for it to try connecting again....
221.194.46.176 - Port Scanning
My firewall is getting scanned every two hours 7 days a week, non stop.
I am not sure how to go about getting them to stop...
221.192.199.49 - Source port is 12200 and destination port is 8008
The details are: TCP connection request from 221.192.199.49:12200 to 72.200.147.238:8008 .
My router keeps blocking these incoming TCP connection attempts. Batch of 4 attempts on September 15, 2011...
221.194.46.176 - Stop trying to break into our network.
These constant port scans and entry attempts are starting to piss me off. These are happening daily constantly. Please punish these people by turning their internet access off....
58.218.199.227 - attempt portscan blocked by norton
This IP address, 58.218.199.227 attempted a port scan on sept. 14th, 2011 at 12:56 pm. Norton antivirus and firewall has blocked it. The reverse lookup showed the location to be in Bejing China, Howe...
58.218.199.147 - Constant scanning of port 80
Always scanning port 80 Had to block them in firewall. These are just extra words because I have to have twenty five of them....
66.35.46.194 - port scanning
Multiple scans on port 33437.
Appears to be part of a bot also using 112.198.78.102, 188.77.186.238, 115.64.131.42, ... as usual, most of these addresses will be dynamic, but as this guy appears to b...
58.218.199.250 - Trying to hack my computer
Can someone block this subnet or this IP.
He/she has tried to hack me a few times now. My Norton Anti-virus seems to be blocking him....
...
58.218.199.227 - TCP Packeting
This IP keeps targeting my router, occasionally knocking me offline and its annoying me.
Priority Time Message
[INFO] Tue Jul 27 16:23:10 2010 Blocked incoming TCP connection request from 58.218.199....
58.218.199.147 - NO MORE
hi this is the same person who keeps trying to port scan me if you could stop it this happens every couple days thank you.
...
119.75.218.45 - SYN+ACK scanning from Baidu (119.75.218.45)
Attn; Baidu Network Abuse contact
We are detecting a large number of SYN+ACK scans coming from an IP address (119.75.218.45) under baidu.com, targeting networks under our management.
Recent records ...
58.218.199.227 - 58.218.199.227 and others
This Ip and the ones below tried to access my voip pbx telephone system
Thu Sep 8 23:25:00 2011 Proto: TCP IP:58.218.199.227 Port:80
Wed Sep 7 05:46:39 2011 Proto: TCP IP:58.218.199.147 Port:80
Sat...
89.149.242.175 - Scanning my PC
They keep on doing post scans on my machine and it never stop.
Stop scanning me as it is invasion of privacy and i didn\'t give you permission to do it.
...
94.231.109.47 - Minecraft
he is trying to infultrait my minecraft server, scanning ports. ect.. he has been popping all over my logs for the last couple weeks.. it would be nice to have him go away...
58.218.199.147 - 58.218.199.147
58.218.199.147 has been sucking on my ports for the last week
58.218.199.147 has been sucking on my ports for the last week58.218.199.147 has been sucking on my ports for the last week...
58.218.199.147 - Mach_kernel have kept my network down all day
Just bad, bad bad -- can\'t seem to stop the constant attacks from this IP address. I don\'t know what to offer than my complete and utter exasperation. It never stops coming...
123.11.242.231 - Block All Chinese IPS
Suggest downloading PeerBlock, and download the country list for China avaliable off of countryipblocks.net
This will block all access to networks in the PRC forbidding them from making any connectio...
58.218.199.250 - Incoming port scan IP 58.216.199.250 147 from China
Annoying , annoying and what can be done to stop this? Fortunately, Norton stops them and I believe any problems with Norton-symantec help is in China!!!...
58.218.199.147 - port scan
port scan on saturday september 4th, 2011.
Blocked by the firewall.
Check that this IP is blocked on your computer because he seems very worker.
Thanks to my firewall and your website.
...
216.245.196.122 - Random Port Scanning
216.245.196.122 increasing the port scanning of 216.106.xxx.xxx and has been going on for 2+months. This ip is now passing Chiles port scanning by a notable percentage....
74.63.192.66 - 12200
SAME AS EVERYONE ELSE\'S COMPLAINT
Incoming TCP connection request
Incoming TCP connection request
Incoming TCP connection request
Incoming TCP connection request
Incoming TCP connection request
Incom...
213.248.117.255 - this ip address is port scanning my ip every 3-5 seconds!
this ip address is port scanning my ip every 3-5 seconds! causing network congestion, i dont know why, can you please make it stop, please...
125.219.32.34 - Port Scan From China
2nd Port Scan in <1 Week, I have no idea who is doing it, why it is from China etc etc. Makes me quite nervous....
58.55.127.28 - Please help us, they have been flooding us for 2 days
Please help us, they have been flooding us for 2 days please shut them down what else can we do? We have been having problems with them for 2 days and they wont stop...
74.63.192.66 - port scanning from 74.63.192.66
Wed, 2011-08-31 01:07:30 - TCP packet - Source:74.63.192.66,12200 ,WAN - Destination:76.20.nnn.nn,8085 ,LAN [Drop] - [Inbound Rule(1) not match]
Wed, 2011-08-31 01:07:30 - TCP packet - Source:74.63.19...
216.245.196.122 - port scanning from 216.245.196.122,12200
Tue, 2011-08-30 18:12:15 - TCP packet - Source:216.245.196.122,12200 ,WAN - Destination:76.20.nnn.nn,1830 ,LAN [Drop] - [Inbound Rule(1) not match]
Tue, 2011-08-30 18:12:15 - TCP packet - Source:216.2...
221.194.46.176 - Frequent port scanning
221.194.46.176 frequently is blocked by Norton (Vulnerability BLOCKED). I\'ve had other attempts from different ip\'s but all come from China. Not sure what would happen if they were not blocked. ...
58.218.199.250 - several port scans and other attacks
After several days of computer malfunctioning I set up
a port listening program. Several days of port scanning were detected.
Other addresses involved
58.218.196.147/250
222.186.24.106
216.245.196.1...
58.218.199.227 - port san and intrusion attempt
Several days of port scanning were detected. The attack is in connection with another series of websites, some of which are reported below.
Some of the other I P addresses involved are reported below...
58.218.199.250 - 58.218.199.250:12200 Constantly scanning me
This IP is relentlessly scanning or attempting a DOS. Hitting ports randomly. I have all ports closed, but they still keep trying What are these people trying to do?!...
221.1.220.185 - Port Scanning every 5 to 30 minutes
My home system is being constantly Port Scanned every 5 to 30 minutes from 221.1.220.185. Cyber crime should be a capitol offence. :( So you\'re a Looser too?...
219.139.81.6 - 219.139.81.6 CHINESE ASSHOLE SCANNING MY PC
3:53:04 AM Block IN TCP 219.139.81.6 6000 86.127.74.46 53 SYN Blocked by the Attack Detecton component
3:53:04 AM 219.139.81.6 Subnet blocked for 60 min SCAN (13568)
IP Address: 219.139.81.6
IP Addres...
58.218.199.147 - China Port Scanning
04:38:17 tony IP-BLOCK 58.218.199.250 (Type: incoming, Port: 80)
06:32:43 tony IP-BLOCK 58.218.199.250 (Type: incoming, Port: 80)
09:20:09 tony IP-BLOCK 58.218.199.227 (Type: incoming, Port: 80)
10:20...
58.218.199.250 - Hacking Attempts
Ports being scanned over numerous days from a number of IP addresses so assume some form of BOT net.
Main offending IP addresses appear to be following which are out of China
58.218.199.227
58.218.19...
63.209.69.107 - Redirecting
I cant go to any websites I enter in the browser without being redirected to this shit:
http://63.209.69.107/search/web/Wordpress%20Caledner%20Plugins/a51/itcg-18254/v5
This is extremely aggravati...
58.218.199.147 - REPEATED PORT SCAN
SEE ABOVE: TRIGGERS ROUTER TO SEND AN EMAIL ALERT SEE ABOVE: TRIGGERS ROUTER TO SEND AN EMAIL ALERT SEE ABOVE: TRIGGERS ROUTER TO SEND AN EMAIL ALERT...
80.191.117.88 - 80.191.117.88 Sleezy muslim trying to hack ....
11:27:12 PM Block IN TCP 80.191.117.88 1380 86.127.74.46 80 SYN Blocked by the Attack Detecton component
11:27:12 PM Block IN TCP 80.191.117.88 1379 86.127.74.46 3128 SYN Blocked by the Attack Detecto...
221.1.220.185 - Port Scanning
This ip show up on my firewall log alerts, saying it\'s performing port scanning my machine! Also from time to time 221.194.46.176 shows up too...
218.29.85.98 - Idetified as ZmEu scanner
Our IPS system has identified this IP as source of ZmEu scanner activities. In total we got about 200+ hit counts in one hour. a....
58.218.199.147 - Vulnerability Blocked
I am on a University network in the American Northeast and attacks from this IP address keep on appearing. Conveniently it is being blocked but I have no idea what these people over in China are tryin...
60.173.12.117 - Port scanning on Port 9415
This ip try to enter our network on port 9415.
Several tries came from the same IP 60.173.12.117 localized in China.
This ip try to enter our network on port 9415.
...
96.44.172.203 - lfd on server.soccernews.com: 66.154.119.99 (US/United States/66.154.119.99.static.quadranet.com) blocked for port scanning
Sample of block hits:
Aug 22 09:32:05 server kernel: Firewall: *ConnLimit* IN=eth0 OUT= MAC=00:30:48:fd:f4:10:00:0a:8a:0e:3f:80:08:00 SRC=66.154.119.99 DST=69.175.60.46 LEN=60 TOS=0x00 PREC=0x00 TTL=5...
205.234.243.205 - Root scanning
This ip is searching my root for a phpadmin or database map to break in! this ip tries every combination of phpadmin, admin, mysqladmin... and so on i n the hope to find acces and hack me...
72.21.91.19 - 72.21.91.19 HACKER SPREADING MALWARE....
9:23:13 PM 72.21.91.19 Subnet blocked for 60 min SCAN (37575, 34759, 35527)
This asshole scanned my ports and injected me an Adware but my MBAM found it and cleaned it quicklyIP Address: 72.21.91.19...
212.54.35.25 - Port Scan
This i.p. has done multiple port scan against my system. Which have been blocked. i have the reports.
Event type: Port scan detected
A port scan was detected from remote i.p. 212.54.35.25 protocol u...
112.223.57.13 - port Scanning test
port Scanning
server test Complaint must be at least 25 words long. You wrote 3 words.
Complaint must be at least 25 words long. You wrote 3 words.
Complaint must be at least 25 words long. You wrote ...
58.218.199.147 - PortScan
Tipo de suceso: Advertencia
Origen del suceso: Microsoft Firewall
Categoría del suceso: Filtro de paquetes
Id. suceso: 15105
Fecha: 15/08/2011
Hora: 21:44:55
Usuario: No disponible
Equi...
58.218.199.147 - Port Scanning from Chinese IP addresses
I\'ve been having this problem for a while now. I even reformatted my computer, but it seems that I\'ve gotten it again. It started tonight. Not sure if it\'s from a website I visited or if it\'s s...
58.218.199.147 - scanning my domain
In my server error log I found the following addresses looking for proxyheader.php, judge.php, ip.php
58.218.199.147
58.218.199.227
I have blocked the entire IP range 58.208.0.0 - 58.223.255.255 on ...
58.218.199.250 - 15 ports scans from that IP over the past week.
15 port scans from that IP source port 12200 over the past week.
Aug 15 15:23:11 #.#.#.# id=firewall sn=0006B1205122 time=\"2011-08-15 20:23:12 UTC\" fw=#.#.#.# pri=1 c=32 m=83 msg=\"P...
94.216.213.86 - 94.216.213.86 Asshole trying to sneak in my sistem
6:45:25 PM 94.216.213.86 Subnet blocked for 60 min SCAN (20480, 36895)
6:45:25 PM 94.216.213.86 Detected attack, host not blocked SINGLE_SCAN_PORT (20480)
IP Address: 94.216.213.86
IP Address Country:...
123.62.24.250 - Nnmap TCP Scan
Intrusion attempt detected - Remote Address 123.62.24.250
Time: 08/13/2011 10:59:37PM
This was also paired with ip 125.39.97.30
IP is reported to originate from China. 2 Hits.
Remote port http(80)...
125.39.97.30 - Nmap TCP Scan
Intrusion attempt detected - Remote Address 125.39.97.30
Time: 08/13/2011 10:59:37PM
This was also paired with ip 125.39.97.30
IP is reported to originate from China. 2 Hits.
Remote port http(80) ...
58.218.199.147 - 58.218.199.147
Portscan\'s my computer at least twice every hour. every day 7 days a week
Also 58.218.199.250 Also 58.218.199.227 I am sick of seeing this Hacker.
Why cant it be stopped....
58.218.199.147 - it is time for list of these networks to block
I have started blocking 58.0.0.0/8 on all my networks. Looking into arin.net to block all china\'s ip addresses. They do not care about abuse!!!!!
Somebody is scanning your computer.
Your computer\'...
216.245.196.122 - Attach FIREWALL LOG AND SEND IT TO THEIR NETWORK ADMINS
I just sent their network admins a log file.... and I believe they will take action...
YOUR INCOMPETENT WHINING... is useless without a LOG FILE that they can show to their CLIENT... send the log ...
58.218.199.250 - Everyday scanning
They are port scanning my vpn router daily, sometimes 4 - 5 times a day. I have also changed my ip address, and they found me within 2 hours. That is unless they are scanning the whole ISP subnet.
P...
69.165.156.45 - Canadian asshole 69.165.156.45
12:40:29 AM 69.165.156.45 Subnet blocked for 60 min SCAN (14596, 39173, 4352)
IP Address: 69.165.156.45
IP Address Country: Canada (CA)
IP Address Region: ON Ontario
IP Address City: Toronto
IP Post...
58.218.199.147 - Hacker
This IP scanned my ports
58.218.199.147 something to do with china second time this happend i don\'t know what to do please someone deal with it...
I BOUGHT MALWARE-ANTI-MALWARE IN THE SPRING. I AM GETTING FLOODED W/ ATTACKS BY CHINESE I.P. ADDRESSES. THE MOST RECENT ATTACKS ARE BY 58.218.199.250 AND OTHERS BELOW.
EXAMPLE TODAY..
15:25:30 STEPH...
205.152.132.23 - Port Scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 8/5/11 07:13:14 PM
Number of po...
17.155.5.240 - Port Scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 17.155.5.240
Time at last attempt : 8/6/11 11:19:24 PM
Number of port...
202.98.246.10 - Right after fresh install of Windows 7
Incase you find yourself in China you may want to block these guys before you connect online anywhere.
Got me with a fresh install before I was able to install my antivirus. ...
183.182.77.120 - Hammering sequential ports
This IP ran port scans for HOURS against my external addresses. Give them kudos for persistence, but they\'re wasting their time. I had previously blocked this entire subnet due to abuse....
94.231.109.47 - Found it
Guys i just read some where that this is minestatus.net they have a bot that spams ips/ports trying to connect to ur server to get info and update its database...
188.165.243.88 - port scanning
This ip is scanning my ports/flooding me. It is a nonstop stream of attempts on consecutive ports. I hope the french bastards rot in hell eating english food.
188.165.243.88
188.165.243.88
188.165.2...
221.192.199.49 - Regular scans of my system.
Scans system from source 221.192.199.49:12200
Searching for ports 8085, 27977, 9090, 3128, 8008, 7212, 6588, 3246, 9000, 1080, 3128, 8088 & 73.
Another IP now on my system\'s blacklist. ...
74.201.117.247 - 74.201.117.247 ASSHOLE PORT SCANNING!!!
3:11:14 PM 74.201.117.247 Subnet blocked for 60 min SCAN (57538, 58306, 62914)
IP Address: 74.201.117.247
IP Address Country: United States (US)
IP Address Region: CA California
IP Address City: San...
58.218.199.147 - Firewall blocked attack
This IP port scanned my comuter once yesteday and already 3 times (8 am here) today. My antivirus firewall blocked this, so far. Is there a way to stop that site or communicate with them about this?...
58.51.90.52 - 58.51.90.52
Somebody with this IP address tried to scan my port, but it was blocked by my firewall. Several other IP addresses have been trying to do the same thing for at least two days now. Those IP addresses i...
58.218.199.147 - trying to get to my system
I keep getting alerts from ip 58.218.199.147 scanning my ports trying to get to my system. It\'s been trying all week, What can you guys do?
GC...
58.218.199.250 - Block the whole subnet
Regularly scans my system for the following ports from three IP #s using source port 12000. IP numbers are 58.218.199.147, 58.218.199.227 and 58.218.199.250.
They look for ports: 1080, 2301, 2479, 27...
58.218.199.227 - Block the whole subnet.
Regularly scans my system for the following ports from three IP #s using source port 12000. IP numbers are 58.218.199.147, 58.218.199.227 and 58.218.199.250.
They look for ports: 1080, 2301, 2479, 27...
74.201.117.247 - 74.201.117.247 ASSHOLE SCANNING MY PORTS
2:06:03 PM 74.201.117.247 Subnet blocked for 60 min SCAN (60864, 61632, 3009)
I WONDER WHAT HE WANTS FROM ME , THIS ASSWIPE IS ATTACKING ME SINCE FEW DAYS AGO!!!IP Address: 74.201.117.247
IP Address C...
58.218.199.147 - I've blocked the whole subnet
Regularly scans my system for the following ports from three IP #s using source port 12000. IP numbers are 58.218.199.147, 58.218.199.147 and 58.218.199.250.
They look for ports: 1080, 2301, 2479, 27...
77.67.10.148 - Port Scanning IP 77.67.10.148
We identified several attempts through the firewall port scaning on my network ip address 77.67.10.148
Port Scanning IP 77.67.10.148
Port Scanning IP 77.67.10.148
Port Scanning IP 77.67.10.148...
58.218.199.147 - Port Scanning / DDOS
Constant nuisance from 58.218.199.147. Port Scans and DOS attacks to many of our IP address. Attacking a variety of ports suspect attacks are automated rather than specifically targeted. ...
209.170.97.212 - Port Scaning
THIS IP 209.170.97.212 RUNING PORT SCANING IN IP OF MY NETWORK.
THIS IP 209.170.97.212 RUNING PORT SCANING IN IP OF MY NETWORK.
THIS IP 209.170.97.212 RUNING PORT SCANING IN IP OF MY NETWORK....
58.218.199.147 - 58.218.199.147
my router report :
TCP Packet - Source:58.218.199.147 Destination:86.69.148.117 - [PORT SCAN]
TCP Packet - Source:58.218.199.147 Destination:86.69.148.117 - [PORT SCAN]
TCP Packet - Source:221.194.46....
I have router filewall blocked this and any thing else 58.218.199.0. I would like to know if there is anything I can do about it? I can\'t believe the amount i.p. scans that are trying to gain access ...
221.192.199.49 - Complaint about 221.192.199.49
Constant Alert of \'Kernel Intrusion\' from 221.192.199.49 to my router almost every 10 minutes per day. Tries to enter my computer and get response. Add to black list....
58.218.199.227 - i.p. address 58.218.199.227 scanning
i.p. address 58.218.199.227 has been attempting several times a minute to scan my computer
2011-08-01 04:15:22 TCP from 58.218.199.227:12200 to xxx.xxx.xxx.xxx:9415
2011-08-01 04:15:23 TCP from 58.21...
91.202.61.170 - Large port scan
Logged by a Thomson TG585; all times are GMT.
Jul 30 11:26:28 IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 88.97.48.225 1240 TCP 80->32384 [S.A...] seq 2285158280 ack 110574...
173.200.42.226 - ssh
This is supposed to be a web site used for Instant Notify Administration which is what comes up when I put http://173.200.42.226 in my browser.
How ever I left the ssh port open on my computer and th...
91.202.61.170 - IDS proto parser from 91.202.61.170
Jul 30 11:44:12 IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 seq 970588573 ack 1202342203 win 512
Jul 30 11:41:49 IDS proto parser : tcp data on syn segment (1 of 1) : 91.202....
204.238.82.23 - + ssh
Portscan from 204.238.82.23 then brute ssh attempts I block em:
Jul 29 11:44:55 jam sshd[5516]: refused connect from 204.238.82.23 (204.238.82.23)
Jul 29 11:45:30 jam sshd[7756]: refused connect from...
94.231.109.47 - SAME AS GUY BELOW
when i have my minecraft server up it keeps trying to access diffrent ports and i am wondering if this could be a dos attack or somthing...
58.218.199.147 - 58.218.199.147
These machines are not Hackers/Crackers at all,they have merely been Compromised.A scan of several of these ip blocks reveals that the Machines are not Fire walled or running any kind of Security.They...
94.231.109.47 - This ip is trying to access my computer?
94.231.109.47 is accessing every one of my ports for no reason whatsoever!
whenever i am on minecraft, i can see all my ports being accessed whilest playing on the server...
91.202.61.170 - All port scan attack
ISA Server detected an all port scan attack from Internet Protocol (IP) address 91.202.61.170.
Recorded on 28/07/2011...
58.218.199.147 - Try this to fix them.
nmap -sU -T4 -A -v -PE -PP -PS21,22,23,25,80,113,31339 -PA80,113,443,10042 -PO --script all 58.218.199.147
Result:
Starting Nmap 5.59BETA1 ( http://nmap.org ) at 2011-07-27 17:33 Pacific Daylight T...
209.222.129.171 - Multiple firewall warnings for "probe2.cirn.net"
This guy has been using multiple IPs in this same 209.222.129 range to scan my computer ports, all in the past seven minutes. Enough already!!...
196.28.182.20 - port scanning using icmp protocol
Daily port scanning attack using the icmp protocol on my router at home and its bugging the hell out of me. Why so many words?
...
204.160.124.126 - Scanning ports on our firewall.
Below is small sample of the alerts my firewall is giving me. This is seriously affecting our remote users.
07/26/2011
13:09:59.496 AlertIntrusion PreventionProbable port scan detected204.160.124.1...
186.205.84.14 - Attack from 186.205.84.14
Appears to be scanning different TCP ports. Has been going on for some time (? months). Detected by router, which intermittently shuts down disrupting service....
58.218.199.227 - Multiple port scans
Very annoying and rude. I\'d recommend a good hardware firewall in addition to anything else being used. It is unclear what this website can do to help, but perhaps if enough complaints are logged, ...
119.247.182.205 - 119.247.182.205 Chinese asshole trying to Hack me
IP Address Country: Hong Kong (HK)
IP Address Region: 00
IP Address City: Central District
IP Postal Code
IP Address Area Code 0
IP Metro Code 0
IP Address Latitude: 22.2833003998
IP Address Longi...
58.218.199.227 - 58.218.199.227
malwarebytes blocked it - search of the ip address brought me here - looks like i\'m no. 2 of 2 - need four more words ...
182.182.49.211 - Information
Kindly let me know what ISP:Mini-DSLAM South is. I need to know about the PTCL\'s internet packages, of course cheaper in cost. Is Mini DSLAM part of PTCL Triple Play Project?...
66.35.46.194 - Scanning for 33537
Same a the last complainer
he is scanning 33537 looking for something
Same a the last complainer
he is scanning 33537 looking for something
Same a the last complainer
he is scanning 33537 looking f...
i.p. address 58.218.199.227 has been attemping several times a minute to scan my computer. My Malware bytes-anti malware has blocked it about 50 times in two days.
I would like to know if there is an...
79.174.72.66 - cheap shoes online
This is a great post. you got <a href=\"http://www.cheap-shoes-online.org\" title=\"cheap shoes online\">cheap shoes online</a> .I like <a href=\"http://www.ch...
98.126.110.90 - Port scans
I have had port scans from 98.126.110.90 the last few days.... 2 within 5 minutes of each other.
The alert(s) reads-:
Somebody is scanning your computer.
Your computer\'s TCP ports:
7212, 8080, 80...
84.215.85.170 - Another, every 1-3 minutes, why do they do that?
A computer at IP Address 84.215.85.170 has attempted to access TCP ports on your computer. Is there any way to alter my computer so that these ips will take my computer off the list. I ran all the a...
174.106.131.49 - Every 2 minutes, a port scan.
A computer at IP Address 174.106.131.49 has attempted to access TCP port 40080 on your computer. Every 2 minutes, over and over, this ip continues to attempt access
to ports. Is there someone with a...
174.106.131.49 - Every 2 minutes, a port scan.
A computer at IP Address 174.106.131.49 has attempted to access TCP port 40080 on your computer. Every 2 minutes, over and over, this ip continues to attempt access
to ports. Is there someone with a...
64.88.164.170 - ip 64.88.164.170 is scanning my ports on my firewall
This IP address 64.88.164.170 is scanning ports on my firewall for at least the last 2 months. I'm tired of having my email tied up everyday with these port scanning alerts. I would shut off the ale...
189.19.206.152 - play wheel of fortune
http://adambarthmare.com/Franklinizations/530/blackbox-sales-tampa.html blackbox sales tampa, %OO, http://nexuscafe.org/sliceimg/25/dreams-dictionary.html dreams dictionary, 4089, http://computerser...
189.19.206.152 - concealed carry
http://softpros.in/ASPSecured/219/illegal-porn.html illegal porn, caimt, http://wxplr.com/css/821/nba-eff.html nba eff, >:-]], http://theconstitutionists.com/cp/30/big-iron.html big iron, 8DDD, htt...
189.19.206.152 - hairstyles for prom
http://computerlearning.info/webalizer/455/business-management.html business management, kmx, http://ladiesonlyfitnessabbotsford.com/webalizer/514/ashley-blue.html ashley blue, %-DD, http://energywe...
221.192.199.46 - I get many attacks constantly from this IP.
Blocked incoming TCP connection request from 221.192.199.46:12200
Router log reports every few minutes tcp connection requests from China. This is only one of the IP addresses. I get many attacks con...
222.168.27.82 - Malwarebytes blocks this guy about every 40 min
"sucessfully blocked access to malicious website"--this appears about every 40 min. even if no browser open;
sluggish Internet browsing ever since this started about 10 days ago; worse in past 2 da...
189.19.206.152 - airshows 2010
http://ladiesonlyfitnessabbotsford.com/webalizer/514/career-institute-training.html career institute training, spmt, http://computerrepairmission.com/images/76/jamaica-weather.html jamaica weather, ...
58.218.204.110 - Daily Port scan from 58.218.204.110
TCP Packet - Source:58.218.204.110 Destination:XX.XXX.XXX.XXX - [PORT SCAN]
Firewall detecting and blocking port scan. Usually daily, sometimes multiple times daily....
189.19.206.152 - kennett national bank
http://51xbox.com/archiver/159/slime-recipes.html slime recipes, 8]], http://computerservicemission.com/cp/15/honolulu-restaurants.html honolulu restaurants, ehdx, http://fitnessclubsabbotsford.com/...
189.19.206.152 - huge cunt
http://onedebt.ie/style/461/diaper-porn.html diaper porn, 72885, http://office20077.com/images/287/evelyn-lin.html evelyn lin, :-P, http://littledavids.org/content/67/caesars-atlantic-city.html caes...
189.19.206.152 - rough lesbian sex
http://tx-drive.com/cache/51/house-rentals.html house rentals, =-((, http://adambarthmare.com/Franklinizations/530/green-toons.html green toons, >:-[[, http://dmxweb.com/webalizer/868/goat-milk-soap...
189.19.206.152 - cardinal flower
http://individualfreedom.com/cp/48/campbell-hausfeld.html campbell hausfeld, 8(((, http://bushmanavontec.com/userfiles/528/united-states.html united states, hwlisy, http://stone-crusher.info/images/...
189.19.206.152 - largemouth bass
http://internetbusinessblogs.info/cp/75/free-homemade-sex-tapes.html free homemade sex tapes, 95972, http://holt-mo.com/cp/667/public-sex-videos.html public sex videos, 8-((, http://fitnessabbotsfor...
189.19.206.152 - lumber prices
http://soyouthinkitsfree.info/images/269/white-dresses.html white dresses, 595, http://dungeonpress.com/cp/306/tramadol-online.html tramadol online, 760, http://yemendirect.com/English/844/free-gay-...
189.19.206.152 - iris chacon
http://rajendraprasad.org/webalizer/978/pesquera-crianza.html pesquera crianza, lsoj, http://midwiveskansascity.com/cp/274/obama-polls.html obama polls, kaabuq, http://cnmanufacture.com/webalizer/27...
62.178.34.119 - [DoS Attack: RST Scan]
[DoS Attack: RST Scan] from source: 62.178.34.119, port 4435, Friday, October 01,2010 15:00:01...
01/10/2010 02:00:23 PM Opened TCP/IP connection from 187.0.195.66,44975 to x.x.x.x,80
01/10/2010 02:00:23 PM Closed TCP/IP connection from 187.0.195.66,44975 to x.x.x.x,80
01/10/2010 02:00:23 PM Ope...
125.45.109.166 - Port Scanning annoying but...
Thu, 2010-09-30 20:41:37 - TCP Packet - Source:125.45.109.166 Destination:[my-IP] - [PORT SCAN]
For a week now my router detects these port scans from this IP.
Dis- and reconnect for getting a new...
144.16.111.116 - Repeated attempts to rsh login for invalid users
Repeated requests to ssh for invalid users such as;
Sep 27 18:34:05 firewall sshd[9103]: Did not receive identification string from 144.16.111.116
Sep 27 18:35:54 firewall sshd[9106]: User root from...
29/09/2010 04:55:45 PM Opened TCP/IP connection from 72.11.128.37,41761 to x.x.x.x,80
29/09/2010 04:55:45 PM Closed TCP/IP connection from 72.11.128.37,41761 to x.x.x.x,80
29/09/2010 04:55:46 PM Ope...
125.45.109.166 - 20 connection attempts from port 12200
Sep 29 09:00:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 09:00:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
221.192.199.51 - this ip address has been scanning ports
this ip address has been scanning ports seems its from china but who knows where it scans from? ...
125.45.109.166 - 16 connection attempts from port 12200
Sep 29 07:09:09 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 07:09:09 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
221.192.199.51 - 112 connection attempts from port 12200
Sep 10 08:55:41 localhost kernel: ipfw: ##### Deny TCP 221.192.199.51:12200 12.76.214.116:7212 in via ppp0
Sep 10 08:55:42 localhost kernel: ipfw: ##### Deny TCP 221.192.199.51:12200 12.76.214.116:80...
125.45.109.166 - 19 connection attempts from port 12200
Sep 29 05:17:53 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 05:17:53 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 18 connection attempts from port 12200
Sep 29 03:26:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 03:26:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 16 connection attempts from port 12200
Sep 29 01:22:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 01:22:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 36 connection attempts from port 12200
Sep 28 21:49:01 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 28 21:49:01 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 60 connection attempts from port 12200
Sep 24 01:36:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.67:27977 in via ppp0
Sep 24 01:36:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.67:8085 ...
28/09/2010 02:24:16 AM Opened TCP/IP connection from 89.107.68.201,57426 to x.x.x.x,80
28/09/2010 02:24:16 AM Closed TCP/IP connection from 89.107.68.201,57426 to x.x.x.x,80
28/09/2010 02:24:17 AM O...
195.216.205.34 - Baby hackers - Opening & closing & opening & closing & opening ports
25/09/2010 03:25:37 AM Opened TCP/IP connection from 195.216.205.34,53313 to x.x.x.x,110
25/09/2010 03:25:38 AM Opened TCP/IP connection from 195.216.205.34,45399 to x.x.x.x,110
25/09/2010 03:25:38 ...
123.204.163.51 - Baby hackers - Opening & closing & opening & closing & opening ports
25/09/2010 10:46:29 PM Opened TCP/IP connection from 123.204.163.51,3474 to x.x.x.x,25
25/09/2010 10:46:29 PM Opened TCP/IP connection from 123.204.163.51,3464 to x.x.x.x,25
25/09/2010 10:46:29 PM O...
26/09/2010 02:48:33 AM Opened TCP/IP connection from 67.215.12.138,42615 to x.x.x.x,80
26/09/2010 02:48:33 AM Closed TCP/IP connection from 67.215.12.138,42615 to x.x.x.x,80
26/09/2010 02:48:33 AM O...
202.103.114.103 - Baby hackers - Opening & closing & opening & closing & opening ports
25/09/2010 11:05:33 PM Opened TCP/IP connection from 202.103.114.103,39054 to 10.1.1.105,25
25/09/2010 11:05:33 PM Opened TCP/IP connection from 202.103.114.103,58719 to 10.1.1.105,25
25/09/2010 1...
202.103.114.103 - Baby hackers - Opening & closing & opening & closing & opening ports
26/09/2010 10:30:53 AM Opened TCP/IP connection from 202.103.114.103,54385 to x.x.x.x,110
26/09/2010 10:30:53 AM Opened TCP/IP connection from 202.103.114.103,46058 to x.x.x.x,110
26/09/2010 10:30:5...
26/09/2010 07:22:39 PM Opened TCP/IP connection from 212.58.8.132,1913 to x.x.x.x,110
26/09/2010 07:22:43 PM Opened TCP/IP connection from 212.58.8.132,2476 to x.x.x.x,110
26/09/2010 07:22:43 PM O...
210.212.229.99 - Baby hackers - Opening & closing & opening & closing & opening ports
27/09/2010 05:53:53 AM Opened TCP/IP connection from 210.212.229.99,40348 to x.x.x.x,25
27/09/2010 05:53:53 AM Opened TCP/IP connection from 210.212.229.99,43741 to x.x.x.x,25
27/09/2010 05:53:53 AM...
210.212.229.99 - Baby hackers - Opening & closing & opening & closing & opening ports
27/09/2010 07:56:13 AM Opened TCP/IP connection from 210.212.229.99,60168 to x.x.x.x,110
27/09/2010 07:56:14 AM Closed TCP/IP connection from 210.212.229.99,60168 to x.x.x.x,110
27/09/2010 07:56:15 ...
222.186.13.212 - have been blocking this IP multiple times an hour, 24/7
Have been blocking this IP multiple times an hour 24/7 for months, keeps trying to access open ports, violating my right to peace and privacy- these boys in Beijing are trying to steel info all over. ...
58.218.204.110 - Port Scans
Regular port scans and DOS from 58.218.204.110 over past week. My Netgear DG834G blocks all.
Someone may make use of the following info:
58.218.204.110 is responding on port 21 (ftp).
58.218.204....
58.218.204.110 - Port scans
Port scans every two to four hours for last two weeks.
Blocked by firewall.
...
109.87.71.111 - Узел заблокирован
109.87.71.111 Узел заблокирован: SCAN (14348, 36895, 33055, 10243, 20480, 16415)
...
221.192.199.48 - Constant Day & Night Port Scans
Need to stop where national financial security and ar not happy with:
=>Found attack from 221.192.199.46.
Source port is 12200 and destination port is 8085 which use the TCP protocol.
Sat Sep...
221.192.199.46 - Blocked incoming TCP connection request from 221.192.199.46:12200
Router log reports every few minutes tcp connection requests from China. This is only one of the IP addresses. I get many attacks constantly from different IP\'s and when I run the IP on Apnic whois, ...
221.192.199.46 - Blocked incoming TCP connection request from 221.192.199.46:12200
Router log reports every few minutes tcp connection requests from China. This is only one of the IP addresses. I get many attacks constantly from different IP's and when I run the IP on Apnic whois, i...
125.45.109.166,1 - Port Scan Security alert
This IP has been Port scanning my PC every hour for some days now. Router email report as follows TCP Packet - Source:125.45.109.166,12200 Destination:82.26.189.255,73 - [DOS] TCP Packet - Source:125....
124.237.78.73 - TCP scanned port list, 8085, 8000, 8080, 3128, 3124
TCP scanned port list, 8085, 8000, 8080, 3128, 3124 - appears in my firewall logs - Why is someone in China scanning my open ports ?...
221.195.73.68 - Hundreds of scans daily from this IP on many ports
These attempts are blocked and logged in my firewall, but it doesn't take long to fill these up! I sent an email to:
abuse@cnc-noc.net;
abuse@chinaunicom.cn;
konglf5@chinaunicom.cn
but I d...
150.70.89.33 - RST Scan Port 443
The ip has repeatedly scanned my network. I blocked all port and re opened them later again. He scanned again....
125.45.109.166 - 195 connection attempts from port 12200
Sep 23 01:40:31 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.88:27977 in via ppp0
Sep 23 01:40:31 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.88:8085 ...
125.45.109.166 - Port scanning and DOS everyday since weeks
Is it possible that these port scans and DOS are made by a virus and that the computer owner does not know about it ?...
208.76.86.38 - Sequential port scans over 2 days
This IP address, at Toatal Choice Hosting, was noticed scanning ports from 2000 - 5000 over two days (9/20-21/2010). Once through 5000, resumed scanning in low 1500's. Their security tech is helpful, ...
125.45.109.166 - 170 connection attempts from port 12200
Sep 22 01:51:40 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.229:27977 in via ppp0
Sep 22 01:51:40 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.229:808...
125.45.109.166 - 137 connection attempts from port 12200
Sep 21 00:46:49 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.254:8085 in via ppp0
Sep 21 00:46:49 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.254:9415...
125.45.109.166 - 154 connection attempts from port 12200
Sep 20 00:40:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:27977 in via ppp0
Sep 20 00:40:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:808...
125.45.109.166 - 78 connection attempts from port 12200
Sep 19 17:27:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:27977 in via ppp0
Sep 19 17:27:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:808...
87.23.47.102 - Port scanning report received.
Report 22/9/10 :
TCP Packet - Source:87.23.47.102 Destination:86.136.164.107 - [PORT SCAN]...
58.218.204.110 - 16k connection attempts last 24h
about 16k attemps on ports 8088, 8008, 73, 9415 last 24h...
125.45.109.166,1 - 125.45.109.166
More PS attempts from these annoying people. They ought to be stuck in one of China's re-education camps. ...
58.218.204.110 - 58.218.204.110
My firewall has blocked numerous attempts to attack my computer over the last few weeks. It's annoying but the firewall's doing its job. ...
221.195.73.68 - Several daily port scans at 8000
This and other Chinese IPs are hitting my Shoutcast port(TCP income blocked from port 12200 to 8000) every two hours or so for at least three times and every day. Fortunately this IP range is blacklis...
58.218.204.110 - Several daily port scans at 8000
This and other chinese IPs are hitting my Shoutcast port(TCP income blocked from port 12200 to 8000) every two hours or so for at least three times and every day. Fortunately this IP range is blacklis...
65.55.118.138 - [DoS Attack: RST Scan] from source: 65.55.118.138, port 443, Monday, September 20,2010 17:28:38
[DoS Attack: RST Scan] from source: 65.55.118.138, port 443, Monday, September 20,2010 17:28:38...
58.218.204.110 - Several daily attacks from 58.218.204.110
Me too. Seems to be a busy hacker over in China. But what's new? I changed my IP address so we'll see how long it will be before they start on this one......
221.195.73.68 - 221.195.73.68 China port scan
is related to 58.218.204.110
both scan every 3 hours and don't stop...
58.218.204.110 - China 58.218.204.11 China ports scancs
China
58.218.204.110 does port scans
>tracert 58.218.204.110
11 321 ms 322 ms 322 ms 58.218.206.49
12 322 ms 330 ms 322 ms 58.218.201.229...
58.218.204.110 - China ports scancs
China
58.218..204.110
58.218..204.110
58.218..204.110
58.218..204.110
58.218..204.110
scans and scans...
58.218.204.110 - China ports scancs
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
every 3 hours...
58.218.204.110 - Why can't some block this morons?
2010/09/18 13:22:18 ** Unauthorized HTTP Access ** <IP/TCP> 58.218.204.110:12200 ->> 24.16.107.55:80
2010/09/18 13:22:18 ** Port Scan ** Port scanning from 58.218.204.110 detected
Why are we all...
16/09/2010 01:40:12 PM Opened TCP/IP connection from 115.81.20.205,3630 to x.x.x.x,25
16/09/2010 01:40:12 PM Opened TCP/IP connection from 115.81.20.205,3632 to x.x.x.x,25
16/09/2010 01:40:12 PM Ope...
16/09/2010 07:15:54 AM Opened TCP/IP connection from 85.10.136.136,43156 to x.x.x.x,80
16/09/2010 07:15:54 AM Closed TCP/IP connection from 85.10.136.136,43156 to x.x.x.x,80
16/09/2010 07:15:54 AM O...
195.216.205.34 - Baby hackers - Opening & closing & opening & closing & opening ports
15/09/2010 05:44:02 PM Opened TCP/IP connection from 195.216.205.34,40582 to x.x.x.x,110
15/09/2010 05:44:02 PM Opened TCP/IP connection from 195.216.205.34,56489 to x.x.x.x,110
15/09/2010 05:44:02 ...
202.102.234.71 - 202.102.234.71 caught in honeypot
Most noticable traffic producer that hits both my IP addresses of my honeypot even though they are on two different providers. with all the other reports this is most likely a very powerful server or ...
58.218.204.110 - Regular port scan from 58.218.204.110 (China)
My firewall is blocking persistent port scans from this IP address. It's extremely tedious....
211.152.56.178 - Port scannning my network
This IP is trying to access my network on port 808, 8080, 3128 - all proxy ports. A quick search on the internet shows that this may be infected by Winhole trojan....
205.152.150.23 - Port Scanning by 205.152.150.23
Security alert type: Port Scan. Source address: 205.152.150.23. Date: 9/12/10...
221.195.73.68 - 221.195.73.68
CHINA scans, simple prot scan normally, but ISPs should something about it...
221.195.73.68 - Scan blocked from 221.195.73.68
My firewall (BitDefender Internet Security 2010) blocked 221.195.73.68 too.
Does anyone know if it\\\\\\\'s either a simple port scan or something I installed on my computer (what?) ? Thanks in adv...
58.218.204.110 - daily persistent port scanning from China: 58.218.204.110
this machine China: 58.218.204.110
sans and scans and scans. Every 3 hours. IP ports, web ports, and is related to: 221.195.73.68 port scan...
221.195.73.68 - Norton Blocking Address from PortScanning!
Since the end of August 2010 this IP Address as well as other IP addresses linked to China have been bombarding my Norton Firewall. Even though I have had no alerts from Norton, every time I check my ...
58.218.204.110 - China: 58.218.204.110 portscan, systematic
CHINA SCANS:
usual Web/TCP ports. Does it every 3 hours. with companion: 221.195.73.68
Maybe there is no system, but just plain stupid Chinese: we try it......
10/09/2010 02:56:07 PM Opened TCP/IP connection from 62.193.232.85,52860 to x.x.x.x,80
10/09/2010 02:56:07 PM Closed TCP/IP connection from 62.193.232.85,52860 to x.x.x.x,80
10/09/2010 02:56:08 PM O...
222.236.44.115 - Constant Day & Night Port Scans
222.236.44.115:6000 is hammering my D-Link Wireless Router aiming at my computer port 2967. Also getting a lot of TWINGE ATTACK Detects from there too. My router is config\\\'d to deny as a rule, but...
221.192.199.48 - Constant Day & Night Port Scans
221.192.199.48:12200 is hammering my D-Link Router aiming at my computer port 8085. Also getting a lot of TWINGE ATTACK Detects from there too. My router is config\'d to deny as a rule, but it just ke...
10/09/2010 05:22:16 AM Opened TCP/IP connection from 115.81.184.248,3793 to x.x.x.x,25
10/09/2010 05:22:16 AM Opened TCP/IP connection from 115.81.184.248,3792 to x.x.x.x,25
10/09/2010 05:22:16 AM O...
58.218.204.110 - China: 58.218.204.110 portscan, systematic = DOS attack
58.218.204.110 is listed in combined.abuse.ch and three other blacklists
combined.abuse.ch (127.0.0.5)
ips.backscatterer.org link (127.0.0.2)
dnsbl-1.uceprotect.net (127.0.0.2)
....
58.218.204.110 - China: 58.218.204.110 portscan, systematic = DOS attack
portscan on TCP ports by China, Bejing, every day, all 3 hours, scans the ports: 8xxx, 9xxx, and special ports.
It's friend is: 221.195.73.68
CHINA postal office and such. ...
58.218.204.110 - China: 58.218.204.110 portscan
portscan on TCP ports by China, Bejing, every day, all 3 hours, scans the ports: 8xxx, 9xxx, and special ports. With taht percistency,, I guess, it's the CHINA gov itself, it never stops ...
94.245.76.250 - this ip address has been attempting to access port 55701 every minute for several days.
this ip address has been attempting to access port 55701 ...
09/09/2010 01:06:22 PM Opened TCP/IP connection from 62.192.1.38,51455 to x.x.x.x,110
09/09/2010 01:06:22 PM Closed TCP/IP connection from 62.192.1.38,51455 to x.x.x.x,110
09/09/2010 01:06:23 PM Ope...
200.175.102.203 - Baby hackers from Brazil - opening & closing & opening & closing ports
08/09/2010 10:03:16 AM Opened TCP/IP connection from 200.175.102.203,39243 to x.x.x.x,80
08/09/2010 10:03:16 AM Opened TCP/IP connection from 200.175.102.203,51201 to x.x.x.x,80
08/09/2010 10:03:16 ...
195.216.205.34 - Baby hackers - opening & closing & opening & closing ports
07/09/2010 10:02:36 AM Opened TCP/IP connection from 195.216.205.34,46644 to x.x.x.x,110
07/09/2010 10:02:36 AM Opened TCP/IP connection from 195.216.205.34,45658 to x.x.x.x,110
07/09/2010 10:02:37 ...
218.60.132.111 - DOS/DDOS attacks logged in our firewall, every DAY.
SYN Flood, PortScan, etc. Highest offender by number of attacks in our firewall stats - by a factor of 10!...
218.30.22.82 - Detected: Intrusion.Win.MSSQL.worm.Helkern
im having the same as everyone else, started 02/09/2010 and heres all my reports to date
02/09/2010 13:13:44 Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 61.128.110.96 to local port 1434 Ab...
61.235.46.146 - Network attach Instrusion
Network attach Instrusion.
Win.MSSQL.worm.Helkern: UDP from 61.128.110.96 to local port 1434. Blocked
Attacking computer has not been blocked, its address is possibly spoofed
9/7/2010 7:39:04 AM ...
77.237.15.53 - Port Scanning
Having some ip in Poland scanning my computer for open ports, apparently....
125.45.109.166 - Daily scanning for the last ten weeks.
Fri, 2010-08-27 18:11:16 - TCP Packet - Source:125.45.109.166 Destination:80.177.109.75 - [PORT SCAN]
Sat, 2010-08-28 08:57:57 - TCP Packet - Source:125.45.109.166 Destination:80.177.109.75 - [PORT S...
58.218.204.110 - 58.218.204.110 port scan from China
58.218.204.110 port scan from China ; every 3 hours now
scans wildly all ports...
202.102.234.71 - 202.102.234.71 is port scanning
bit defender keeps saying this ip is blocked trying to scan for open ports. This happens pretty much every hour, what can i do to stop it?...
222.186.13.212 - Port-Scanning
systematic port scans from China
Port-Scans from 222.186.13.212, 58.218.204.110, 202.102.234.71 -- same TCP ports scanned, same pattern, same China; they scan everyday automatically the whole interne...
221.192.199.48 - Can't someone do something about these guys?
My router is being constantly scanned from this IP. Looks like they've been using this IP blatantly for at least 6 mnths. @@#$%%!!...
58.218.204.110 - 58.218.204.110 port scanning from China
Port-Scan from 58.218.204.110 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. ...
221.192.199.46 - my computer being scanned frequently
I have noticed that Nortons has been detecting incoming tcp connections from this address, so times as much as 4x a minute. So I went into Nortons and had this ip and a few others doing the same thing...
85.248.143.82 - 85.248.143.82 scanning ports
85.248.143.82 to port 135:
LEN=52 TOS=0x08 PREC=0x20 TTL=50 DF PROTO=TCP SPT=14699 DPT=135 WINDOW=60352 RES=0x00 SYN URGP=0 OPT...
221.195.73.68 - Portscanning
Since two weeks from
221.195.73.68 and 58.218.204.110
block them always for 25hrs...
221.195.73.68 - Portscanning
Since two weeks from
221.195.73.68 and 58.218.204.110
block them always for 25hrs...
87.248.217.254 - You can use the IP with PeerGuardian 2 block!
You can use the IP with PeerGuardian 2 block! Here is the site of PeerGuardian 2: http://phoenixlabs.org/pg2/ + Cool Stuff->I-Blocklist!!! Grüsse aus Deutschland/Garmany...
58.218.204.110 - repeated port scanning over the past 2 days
repeated port scanning over the past 2 days...
213.174.157.2 - Seems that this is a constant port scan at least. Apparently the ISP in the Ukraine doesn't monitor for such usage.
This IP address is being blocked by my malware filter (Malwarebytes); the flag is popping up fairly frequently, and is connected with a torrent that I'm downloading, though I haven't determined which ...
116.214.25.66 - SSH attack (port 22)
Crap, this hindustan IP tried to get access to my dear server!...
122.224.6.251 - Port Scanning
This IP has been scanning our firewall consistantly for a month 10 ports at a time...
58.221.32.117 - Port Scanning
This IP has been scanning pur firewall consistantly for a month 10 ports at a time...
58.218.204.110 - 58.218.204.110 Hits my firewall serveral times a day.
My firewall catches this several times a day and it\\\\\\\'s been happening for well over a month, every day about an hour or so apart. My firewall reports:
\\\\\\\"Somebody is scanning your computer...
60.190.59.240 - 60.190.59.240 Ningbo China
ASSHOLE SCANNING MY PORT 80, 8000 , 8888...TRYING TO HACK MY COMPUTER...
125.45.109.166,1 - Port Scanning - 125.45.109.166
24 August 2010 22:18:17 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]
22 August 2010 21:01:22 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]
Th...
71.158.182.166 - Constant Port Scanning
Port Scanning started on July 23 and continuing since then. Sometimes the scans happen every half hour....
74.125.19.118 - used a subnet, my firewall detected him port scanning me
happened August 23, 2010 at 11:30pm...
58.218.204.110 - Frequent attacks from 58.218.204.110
Several times a day this IP has scanned me.
Make them stop....
58.218.204.110 - 97 connection attempts from port 12200
Aug 19 07:49:15 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.29.231:3246 in via ppp0
Aug 19 07:49:15 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.29.231:8080...
222.186.13.212 - 885 connection attempts from port 12200 (Part 2)
Aug 15 02:05:22 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.24.66:8090 in via ppp0
Aug 15 02:05:23 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.24.66:1080 i...
222.186.13.212 - 885 connection attempts from port 12200
Aug 10 14:45:28 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.29.176:3246 in via ppp0
Aug 10 14:45:28 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.29.176:8090...
202.102.234.71 - 149 connection attempts from port 12200
Aug 19 04:36:00 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.231:2479 in via ppp0
Aug 19 04:36:00 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.231:2301...
125.45.109.166 - 15 connection attempts from port 12200 in two seconds
Aug 22 06:08:55 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.234.226:8080 in via ppp0
Aug 22 06:08:55 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.234.226:80...
125.45.109.166 - 125.45.109.166:12200 continuously scanning private system's ports
FWIN,2010/08/21,21:25:28 -7:00 GMT, 125.45.109.166:12200,
24.156.109.xxx:8080,TCP (flags:S)
FWIN,2010/08/21,21:25:28 -7:00 GMT, 125.45.109.166:12200, 24.156.109.xxx:80,TCP (flags:S)
FWIN,2...
202.102.234.71 - 348 connection attempts from port 12200
Aug 15 00:25:26 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.66:9415 in via ppp0
Aug 15 00:25:26 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.66:2479 i...
58.218.204.110 - 74 connection attempts from port 12200
Aug 15 09:24:43 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.26.13:1080 in via ppp0
Aug 15 09:24:43 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.26.13:80 in ...
222.45.112.59 - scans and intrusion attemts!!
it seems i get one like evry second:
Aug 20 03:17:12 kernel: PORT SCANNER ATTACK detected from 70.238.175.216. Source port is 51370, and destination port is 10767 which use the TCP protocol.
A...
58.218.204.110 - Scans at least once every day since July 2010
Attempts GET...judge.php and similar scripts, hits at random times every day but only a few times so I\'m guessing they\'re busy covering a lot of territory, but doing it repeatedly - patiently await...
125.45.109.166 - 125.45.109.166 daily port scanning
Firewall totally locked down but still getting port scans daily...
221.195.73.86 - He is bugging me right now.
Just a script kitty's zombie rattling doors, trying to find a server or infected machine to mess with.
...
125.45.109.166 - Scanned on 14596,19269,33629,44700,54535 yesterday
Scanned on 21,88,808,1080,2301,2479,3124,3246,6588,80000,8008,8080,8088,8090,8118,9000,.... yesterday...
77.223.143.83 - Scanned on 14596,19269,33629,44700,54535 yesterday
Scanned on 14596,19269,33629,44700,54535 yesterday...
68.142.118.254 - [DoS Attack: ACK Scan]
[DoS Attack: ACK Scan] from source: 68.142.118.254, port 80, Tuesday, August 17,2010 16:01:25
[DoS Attack: ACK Scan] from source: 68.142.118.254, port 80, Tuesday, August 17,2010 12:07:13...
58.218.204.110 - 58.218.204.110 scans 5+ times daily
TCP scanned port list: 2479, 3246, 9090, 8080, 7212, 9415, 2479, 9000, 8090, 8008....
216.252.125.64 - Xmas port scan attack detected from (ip:216.252.125.65)
Xmas port scan attack detected from (ip:216.252.125.65)...
58.218.204.110 - 58.218.204.110 port scan attack
I may not be tech savvy but this ip address attacks my server at least 5 times a day. It is very frustrating to see these reports come up. Fortunately my firewall is doing it\'s job to the best of my...
202.102.234.71 - 1610 connection attempts from port 12200 (Part 4)
Aug 11 16:15:13 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.236:2479 in via ppp0
Aug 11 16:15:14 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.236:2301...
202.102.234.71 - 1610 connection attempts from port 12200 (Part 3)
Aug 6 13:56:37 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 12.76.233.116:2479 in via ppp0
Aug 6 13:56:37 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 12.76.233.116:23...
202.102.234.71 - 1610 connection attempts from port 12200 (Part 2)
Jul 14 10:25:14 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.235:9000 in via ppp0
Jul 14 10:25:14 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.235:3246...
202.102.234.71 - 1610 connection attempts from port 12200
Jun 24 12:04:22 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.31.43:8085 in via ppp0
Jun 24 12:04:23 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.31.43:9090 i...
208.67.222.222 - Repeated port scans from 208.67.222.222
Repeated post scans from 208.67.222.222 being reported by my router at 11:17 BST on 16 August 2010....
58.218.204.110 - 58.218.204.110 is hitting my server too
Bad behavior plug in on my site fended him off but he wasn't going anyplace he should have been going....
85.119.217.243 - Scanning & scanning & scanning
15/08/2010 04:54:14 PM Opened TCP/IP connection from 85.119.217.243,53107 to x.x.x.x,80
15/08/2010 04:54:14 PM Closed TCP/IP connection from 85.119.217.243,53107 to x.x.x.x,80
15/08/2010 04:54:15 ...
58.218.204.110 - port scan attack - almost daily
It happened since Jul 22,10 so far i have record of them as following
Jul 22,10 20:23:25 PST
on TCP ports: 8085, 1080, 9090, 8090 and 8000
Jul 23,10 01:19:49 PST
TCP ports: 8085, 9415, 3246, 2...
58.218.204.110 - 641 connection attempts from port 12200 (Part 2)
Aug 13 23:42:28 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.24.17:8080 in via ppp0
Aug 13 23:42:28 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.24.17:2301 i...
58.218.204.110 - 641 connection attempts from port 12200
Jul 7 10:03:44 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 12.76.242.61:9415 in via ppp0
Jul 7 10:03:45 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 12.76.242.61:9000...
125.45.109.166 - Port scan every 2.5 hours
Several times a day, approximately 2.5 hours apart, I get the following logged: "...detected an all port scan attack from Internet Protocol (IP) address 125.45.109.166". This has been going on for mon...
58.218.204.110 - port scan attack
several times this day this site is trying to gain acces to my system i had to block it manually several times .....
125.45.109.166,1 - Disruption of Internet service
This IP address is doing a port scan Of my PC daily ,if not more.
I am on dial up,which is slow enough as is,,But when the scans are in process,,my PC comes to a crawl,, it takes forever for pages to...
192.168.1.3, 53 - This IP adress has been trying to scan my PC
This I.P address has been repeatedly trying to scan and attack my computer. Thx to Nortan, most of the attacks have been blocked, but it\'s kind of annoying that he does this everyday as of late....
221.192.199.48 - The machine is Windows Server 2003
... and has port 3389 open, the Remote Desktop Protocol port. If anyone wants to try to take over the machine.......
66.35.46.195 - perhaps traceroutes ...
perhaps traceroutes, but why so many for so long - more then 6 month now ......
117.87.35.251 - 125.45.109.166 - like others, multiple daily scan attemps.
125.45.109.166 multiple daily port scans caught by Norton....
221.192.199.46 - Non-Stop connection attempts
every 7 minutes from 221.192.199.46 and 221.192.199.48 source port 12200 dest port 8085 (Tivo TCP Data) - no Tivo here...
Both of those IP addresses are Windows 2003 Enterprise Servers with Remote ...
125.45.109.166 - Consistient port scan
08/10/2010 19:55:13.112 - Alert - Intrusion Prevention - Possible port scan detected - 125.45.109.166, 12200, X1 - 83.70.176.122, 8000, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 2479...
125.45.109.166 - Consistient port scan
08/10/2010 19:55:13.112 - Alert - Intrusion Prevention - Possible port scan detected - 125.45.109.166, 12200, X1 - 83.70.176.122, 8000, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 2479...
218.60.65.167 - Consistient port scan
08/10/2010 19:02:58.928 - Alert - Intrusion Prevention - Possible port scan detected - 218.60.65.167, 12200, X1 - 83.70.176.122, 8090, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 8000...
218.60.65.167 - Consistient port scan
08/10/2010 19:02:58.928 - Alert - Intrusion Prevention - Possible port scan detected - 218.60.65.167, 12200, X1 - 83.70.176.122, 8090, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 8000...
58.218.204.110 - 58.218.204.110 (Remote Port Scans)
Wed Aug 11 01:37:46 2010
Blocked incoming TCP connection request from 58.218.204.110:12200 to <<MY-EXTERNAL-IP>>:8008
Wed Aug 11 01:37:45 2010
Blocked incoming TCP connection request from 58.218....
58.218.204.110 - They are still at it
They have hit me a further 28 times with their port scan, firewall catches them every time although there must be some \\\'intelligence\\\' there because not only WAN IP that is scanned, some internal...
222.186.13.212 - 823 connection attempts from port 12200 (Part 2)
Aug 6 13:19:03 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 12.76.233.116:9000 in via ppp0
Aug 6 13:19:03 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 12.76.233.116:80...
222.186.13.212 - 823 connection attempts from port 12200
Jul 30 04:04:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.29.79:9415 in via ppp0
Jul 30 04:04:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.29.79:2301 i...
58.218.204.110 - Why do they do it?
TCP Port scan on numerous ports 4 times. firewall caught them on all occasions.
date, time and scanned ports
08/09/2010 16:41:48
8085, 3246, 8080, 8000, 7212
08/09/2010 06:18:37
8085, 9415, 80, 8...
80.244.167.33 - port scanned from this ip
Was port scanned from this ip. Port scanned was was 5902...
217.10.142.10 - port scanned from this ip
Was port scanned twice from this ip on same day. Ports scanned were 6588 1080...
203.45.71.96 - Scanning our servers over & over & over for 10 minutes
08/08/2010 08:52:45 AM Opened TCP/IP connection from 203.45.71.96,43276 to x.x.x.x,110
08/08/2010 08:52:46 AM Opened TCP/IP connection from 203.45.71.96,43297 to x.x.x.x,110
08/08/2010 08:52:46 AM C...
217.154.40.162 - Scanning our servers over & over & over for 10 minutes
06/08/2010 05:53:51 PM Opened TCP/IP connection from 217.154.40.162,21318 to x.x.x.x,110
06/08/2010 05:53:51 PM Opened TCP/IP connection from 217.154.40.162,21319 to x.x.x.x,110
06/08/2010 05:53:51 ...
61.128.110.96 - Worm Helkern was blocked
My internet security detedted and intrusion.win.MSSQL.worm.Helkern. It was blocked....
125.77.79.143 - My security detected this IP attempting a portscan on my PC
made several attempts at portscanning within 2 minutes time. This happened on August 5 2010 around 2:00am central US time. My security product detected these attempts and blocked it. The IP appears to...
94.127.72.60 - 94.127.72.60
07/08/10 21:14:14 TCP <- 86.127.74.46:49639, 94.127.72.60:80
Rule not found. Packet dropped.
07/08/10 21:16:04 TCP <- 86.127.74.46:49655, 94.127.72.60:80
Rule not found. Packet dropped....
94.127.72.60 - 94.127.72.60
07/08/10 21:14:14 TCP <- 86.127.74.46:49639, 94.127.72.60:80
Rule not found. Packet dropped.
07/08/10 21:16:04 TCP <- 86.127.74.46:49655, 94.127.72.60:80
Rule not found. Packet dropped....
221.192.199.48 - ping flood batch script
put this in an ASCII file and call it pingflood.bat
click on it
-----------------------
:start
ping 221.192.199.48
ping 111.240.151.200
ping 221.192.199.46
ping 218.8.245.123
ping 117.135.13...
60.190.90.156 - SCAN ipEye SYN scan
IPS on network Gateway detecting multiple attempts by this IP address....
60.190.90.156 - SCAN ipEye SYN scan
IPS on network Gateway detecting multiple attempts by this IP address....
218.8.245.123 - SCAN ipEye SYN scan
IPS on network Gateway detecting multiple attempts by this IP address....
91.195.7.1 - 91.195.7.1 Bucharest Romania
PORT SCAN credca stiu cine e aici cei de la Hotnews ....nu e prima data cand fac asa ceva ...niste nenorociti!!!!...
208.67.222.222 - Port scan from 208.67.222.222 at 08:32 BST
Port scan reported by router from 208.67.222.222 at 08:32 British Summer time....
87.242.79.77 - 87.242.79.77 Moscow Russian Federation
This asshole port scanned me while i was downloading Dr WEB anti virus from server.....every time you connect to their server they will port scan victim machine....fucckerssss!!!!...
221.143.46.98 - Atma.es reports that they are absolutely aware
They have been downloading the Atma deny list on almost hourly basis. Note that 221.143.46.98 is included in that list since the fall of 2009. So it is crystal clear that their actions do not come fro...
62.220.120.165 - IP address in Iran is portscanning my firewalls in USA
A portscan was detected. Details about the event:
Time.............: 2010:08:05-15:17:53
Source IP address: 62.220.120.165
...
125.45.109.166,1 - 125.45.109.166 is Port and DOS Scanning
Daily attacks.
started app. 3 weeks ago.
Thu, 2010-08-05 02:22:21 - TCP Packet - Source:125.45.109.166,12200 Destination:72.10.135.171,8008 - [DOS]
Thu, 2010-08-05 02:22:21 - TCP Packet - Source:12...
125.45.109.166 - multiple port scanning
Our firewall Astaro Security Gateway has detected especially the following misbehavior:
First time: may 1st 2010 (2010-05-01).
Always the same:
- Source IP address: 125.45.109.166 (location: CHINA)...
66.208.122.61 - Scanning our servers over & over & over
05/08/2010 03:41:41 AM Opened TCP/IP connection from 66.208.122.61,40768 to x.x.x.x,110
05/08/2010 03:41:41 AM Closed TCP/IP connection from 66.208.122.61,40768 to x.x.x.x,110
05/08/2010 03:41:42 AM...
202.102.234.71 - Lo stesso attacco anche oggi
Lo stesso attacco anche oggi. Sempre dal 202.102.234.71 . Che si può aggiungere?.. AVETE ROTTO IL CAZZO!...
58.218.204.110 - Port Scan and So on...
Port Scanning from this IP...
With something new!
GET http://216.245.205.74/judge.php HTTP...
58.218.204.110 - Many scans throughout the day
Repeated scans of ports 2479, 7212, 8129, and 8008 from 58.218.204.110...
202.102.234.71 - Port attack from 202.102.234.71
The same for me. Port attack from 202.102.234.71 ....
222.186.13.212 - Port Scan has been blocked by BitDefender
I have had a report of IP address 222.186.13.212 Port Scan is being blocked by my Bit Defender. It happens every few minutes sometimes. I would not have know if the Bit Defender did not give me noti...
58.218.204.110 - several attacks daily
firewall reports several port scans from 58.218.204.110 daily...
88.191.39.161 - Scanning our servers over & over & over
31/07/2010 04:33:54 AM Opened TCP/IP connection from 88.191.39.161,54030 to x.x.x.x,80
31/07/2010 04:33:54 AM Closed TCP/IP connection from 88.191.39.161,54030 to x.x.x.x,80
31/07/2010 04:33:55 AM O...
221.192.199.48 - won't stop. no answer to problem
just another person sick of ip 221.192.199.48 and 221.192.199.46 and 117.135.131.16 and 218.8.245.123 and 121.10.42.234 and 222.186.13.212...
221.192.199.48 - won't stop. no answer to problem
just another person sick of ip 221.192.199.48 and 221.192.199.46 and 117.135.131.16 and 218.8.245.123 and 121.10.42.234 and 222.186.13.212...
58.218.204.110 - 1-2X a day I get alerts blocking 58.218.204.110
1-2X a day I get alerts blocking 58.218.204.110 \"event type- portscan\"...
58.218.204.110 - Firewall alert port scan attack
I receive a firewall alert several times daily that it is detecting a port scan attack from 58.218.204.110. I just checked WHOIS and this IP belongs to someone in Beijing, China. Ports scanned are 941...
58.218.204.110 - Firewall alert port scan attack
I receive a firewall alert several times daily that it is detecting a port scan attack from 58.218.204.110. I just checked WHOIS and this IP belongs to someone in Bejing, China. Ports scanned are 9415...
124.237.121.106 - Port attack fro 124.237.121.106 for me too
August 1, 2010, at 2.30 PM my firewall signal port scan attack from 124.237.121.106 . F***ing China!...
221.195.73.68 - Portscanning
Typical of china really. Firewall has blocked 3 portscan attempts today alone....
222.186.13.212 - 191 connection attempts from port 12200
Jul 23 15:55:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.26.9:8085 in via ppp0
Jul 23 15:55:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.26.9:9415 in ...
88.191.39.161 - Scanning our servers over & over & over
30/07/2010 11:39:01 AM Opened TCP/IP connection from 88.191.39.161,45346 to x.x.x.x,80
30/07/2010 11:39:01 AM Closed TCP/IP connection from 88.191.39.161,45346 to x.x.x.x,80
30/07/2010 11:39:02 AM O...
222.92.40.226 - Scanning our servers
30/07/2010 01:23:53 AM Opened TCP/IP connection from 222.92.40.226,23116 to x.x.x.x,110
30/07/2010 01:23:53 AM Closed TCP/IP connection from 222.92.40.226,23060 to x.x.x.x,110
30/07/2010 01:23:53 AM...
67.82.140.135 - Scanning ports on Hosting Server
93.186.164.77 has been scanning the hosting ports and attempting a brute force attack. This IP has been defined as follows:
WHOIS Records for 93.186.164.77
#
# Query terms are ambiguous. The quer...
67.228.117.82 - RST Scan from 67.228.117.82
Router logged the following:
[DoS Attack: RST Scan] from source: 67.228.117.82, port 80, Wednesday, July 28,2010 16:36:12
...
217.79.190.98 - Port scanning the server
28/07/2010 12:59:16 AM Opened TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM Closed TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM O...
217.79.190.98 - Port scanning the server
28/07/2010 12:59:16 AM Opened TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM Closed TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM O...
87.192.50.43 - Port scanning the server
27/07/2010 10:29:01 PM Opened TCP/IP connection from 87.192.50.43,34929 to x.x.x.x,110
27/07/2010 10:29:02 PM Opened TCP/IP connection from 87.192.50.43,34935 to x.x.x.x,110
27/07/2010 10:29:02 PM C...
125.45.109.166 - multiple port scanning
almost every day I have a scan of my ports 125.45.109.166
...
10.10.174.167 - 10.10.174.167
My norton antivirus shows me that port skan attack was made from 10.10.174.167...
125.45.109.166 - Periodic Scanning
Reported site began periodic port scans every few hours. The scans consist of several TCP scan bursts within one second....
125.45.109.166 - Multiple Port Scans
This address has scanned my computer 9 times in the last day. The firewall has denied access but I find such activity annoying....
222.186.13.212 - Getting 2 or 3 port scans a week from this IP
Router firewall has kept them out, but they are scanning port 80 two or three times a week...
202.86.6.175 - Port Scanning every time I connect to net
Hi,
I am being port scanned by this IP whenever I connect to internet on a daily basis and my firewall is blocking this ip. The scan happens intermittently and is done 10-20 times daily .I need thi...
202.138.97.193 - Port Scanning every time I connect to net
Hi,
I am being port scanned by this IP whenever I connect to internet on a daily basis and my firewall is blocking this ip. The scan happens intermittently and is done 10-20 times daily .I need thi...
202.138.117.60 - Port Scanning every time I connect to net
Hi,
I am being port scanned by this IP whenever I connect to internet on a daily basis and my firewall is blocking this ip. The scan happens intermittently and is done 10-20 times daily .I need thi...
221.195.73.68 - China portscans source 221.195.73.68
221.195.73.68 is traced to:
Hebei, China
scans all ports.
related to similar China scans from IP 58.218.204.110, 222.186.13.212...
58.218.204.110 - port scan from China IP: 58.218.204.110 now with MAC address
well. portscanning every day; related to scanners from china: 58.218.204.110; 222.186.13.212,
which have the same MAC address:
4C-54-20-00-1B-00
MAC is always similar: (XX as parameter goes...
221.195.73.68 - port scan from China IP: 221.195.73.68 now with MAC address
well. portscanning every day; related to scanners from china: 58.218.204.110; 222.186.13.212,
which have the same MAC address:
4C-54-20-00-1B-00
MAC is always similar: (XX as parameter goes...
221.195.73.68 - China port scanning from 22.186.13.212
China port scanning from 22.186.13.212
Port-Scan TCP 221.195.73.68
MAC Adress:
4C-54-20-00-1A-00
same as all these Chinese scanners
...
58.218.204.110 - 58.218.204.110 port scanning from China
58.218.204.110 port scan from China
Port Scan every day at least two times, 5 common TCP Ports: 8085, 9415, 3246, 2479 , 9090
which vary slightly at each attack.
Remote MAC is 4C-54-20-00-19-00
...
222.186.13.212 - 222.186.13.212 port-Scan from China
222.186.13.212 port-Scan from China
Port-Scan from 222.186.13.212 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. 2479, 9415, 9000, 1080, 8080 8085, 9415, 9090, 247...
125.45.109.166,1 - 125..45.105.166 every 2hr 15 min send 10 scans
125..45.105.166 every 2hr 15 min sends 10 scans to various ports. This mmay be the cause of interuption in online sevice. The lrngth of interuption is about 20 seconds. The system often cannot recov...
222.186.13.212 - 204 connection attempts from 12200
Jul 15 23:58:43 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.27.19:9000 in via ppp0
Jul 15 23:58:43 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.27.19:3246 i...
217.24.240.68 - Port scanning our servers
23/07/2010 10:49:15 AM Opened TCP/IP connection from 217.24.240.68,47584 to x.x.x.x:80
23/07/2010 10:49:15 AM Opened TCP/IP connection from 217.24.240.68,47585 to x.x.x.x:80
23/07/2010 10:49:15 AM O...
125.45.109.166 - 25 connection attempts from port 12200
Jul 22 14:44:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.240.216:3246 in via ppp0
Jul 22 14:44:01 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.240.216:80...
124.237.121.106 - IP Port scanning from China???
As previous user said, I'm getting this IP (124.237.121.106) doing a port scan but not as regularly as stated. This is happening 2, 3 maybe 4 times a day.
My firewall is warning me that this is hap...
222.186.13.212 - scanning my computer
In two days, it scans 5 times
My computer's TCP ports scaneed:
8085, 9000, 8090, and 2301
8085, 9415, 2479, and 3246
8085, 9090, 2479, and 8090
8085, 9415, 9090, and 9000
9415, 9090, 9...
221.192.199.35 - Fortigate Firewall Reporting Number Port Scans
Firewall has been reporting numerous port scans from 221.192.199.35 for several weeks now....
58.218.204.110 - Port Scans
This ip started scanning my ports several days ago, two to three times a day. Never showed up in my firewall logs before, and judging from the dates of previous complaints here, it seems to be a new o...
124.237.121.106 - i got a port scanning from this ip 124.237.121.106
automated port scanning from this ip to ports :8080, 3128, 80, and 8000 every half hour, is a pain in the ass, send a mail to ip administrator and still getting the scanning...
60.190.59.240 - i got a port scanning from this ip
automated port scanning from this ip to ports :8080, 3128, 80, and 8000...
58.60.10.10 - Various Port scanning port 12200
Various Port scanning port 12200
58.60.10.10 is scanning on port 12200 to get access to my network. Ports
9415, 3246, 9000, 9090, 8090, 8085, 3246, 2479, 9090, 8090 were scanned....
222.186.13.212 - Port scanning form 22.186.13.212
Over last 3 days, ports scanned from this IP 3 times a day. Expect this to continue. Scans are of very short duration--less than a full second....
222.186.13.212 - 222.186.13.212 port-Scan from China
it scans simple ports:
TCP 222.186.13.212
8085, 9415, 9090, 2479, 1080 scanned by 222.186.13.212 ...
58.218.204.110 - port scan from 58.218.204.110
8090, 8080, 80, 8000, 8118 scanned from 58.218.204.110 . This is a bot that comes around every 10 hours or so, no matter which IP you have. China, of course......
178.154.162.29 - port scanning
IP map can not display location of this IP adress...!!! This IP has been scanning ports for over an hour to the hosting server.
Arin Whois database displays following informatiomn:
OrgName: ...
178.154.162.29 - port scanning
IP map can not display location of this IP adress...!!! This IP has been scanning ports for over an hour to the hosting server.
Arin Whois database displays following informatiomn:
OrgName: ...
178.154.162.29 - port scanning
IP map can not display location of this IP adress...!!! This IP has been scanning ports for over an hour to the hosting server...
222.186.13.212 - systematic port scans from China
Port-Scans from 222.186.13.212, 58.218.204.110, 202.102.234.71 -- same TCP ports scanned, same pattern, same China; they scan everyday automatically the whole internets. I do not understand, why the I...
222.186.13.212 - 222.186.13.212 port-Scan from China
Port-Scan from 222.186.13.212 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. 2479, 9415, 9000, 1080, 8080
8085, 9415, 9090, 2479, 9000
port scan by 222.186.13...
58.218.204.110 - daily port-Scan from China
Port-Scan from 58.218.204.110 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. ...
95.173.175.50 - Portscan
Sat Jul 17 02:36:07 2010 Unrecognized attempt blocked from 95.173.175.50:80 to 81.228.153.93 TCP:17107
Sat Jul 17 02:41:37 2010 Unrecognized attempt blocked from 95.173.175.50:80 to 81.228.153.93 TCP...
74.125.19.100 - google port scanning
[Tue Jul 06 21:40:56 2010]:[FW] **Port Scan Detected** 74.125.87.190 -> 188.26.215.114
[Tue Jul 06 21:42:19 2010]:[FW] **Port Scan Detected** 188.244.31.100 -> 188.26.215.114
=)...
109.87.71.111 - Firewall Attack Detector
IP 109.87.71.111 blocked by Firewall Attack Detector. "host blocked. SCAN (14348, 36895, 33055, 10243, 20480, 16415)"...
61.128.110.96 - chinese port scanner
This individual invaded my computer months ago---assessing my pay-pal account by using e checks to obtain money. He continues to get thru pay-pal inspite of them being notified...
71.98.210.40 - Port Scan Attacks
The IP <71.98.210.40> has been logged by my firewall as attempting smurf attack. It has logged two today 7/14/2010....
202.102.234.71 - Port Scan Attacks
The IP <202.102.234.71> is scanning my network constantly for open ports. My firewall is logging scans from this address every few minutes. Please stop this abuse of the internet!!!...
222.247.55.163 - Port Scan Attacks
The IP <222.247.55.163> is scanning my network constantly for open ports. My firewall is logging scans from this address every few minutes. Please stop this abuse of the internet!!!...
202.102.234.71 - daily port-Scan from 202.102.234.71
Port-Scan from 202.102.234.71 every day at least two times, TCP ports 8035, 8085, 3246, 1080, 2479, 8090, 80, 9000, 9090, 9415 and more. Firewall blocks it easily....
58.218.204.110 - daily port-Scan from 58.218.204.110
Port-Scan from 58.218.204.110 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. Firewall blocks it easily.
...
221.195.73.68 - Persistent port scanning since the last couple of weeks
Sygate firewall message:
Somebody is scanning your computer.
Your computer's TCP ports:
9415, 3246, 2479, and 1080 have been scanned from 221.195.73.68.....
58.218.204.110 - Description explains it all
"GET http://proxy.adsweet.com/proxyheader.php HTTP/1.1" 404 213
I might be a nwb at setting up a server
but 5 times in the last 24 hours. Don't want it did not ask for it....
87.24.151.89 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
174.36.63.82 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
203.160.140.22 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
216.58.224.42 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
205.177.210.236 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
203.160.142.64 - Constant port scanning
This IP address has been scanning our firewall consistantly for weeks scanning 10 random ports at a time....
123.30.184.35 - Constant port scanning
This IP address has been scanning our firewall consistantly for weeks scanning 10 random ports at a time....
68.94.156.1 - Continues to look for Open Ports
Still Scanning Hundreds of Ports at a time, His computer is tight, No doubt serious criminal intent. Anybody out there with some cyber weaponry I might aquire?...
88.208.237.28 - VOIP Scan detected
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan...
70.183.193.78 - HACKER
this IP address continually attacks my site
70.183.193.78
he will use these additional IP adddresses since I try to block his main IP
166.204.202.15...
66.35.46.195 - Ports 33436 and 33437
Appears to be traceroutes, but why several hundred traceroutes to all of our public IPs/month?...
58.218.204.110 - This IP address attempted to Port Scan my computer
Net Barrier X5 on my Mac caught this IP address attempting to port scan my computer. Had just disinfected a family member's PC after discovering a number of trojans and other virii and malware....
87.24.151.89 - Port Scanning
Mon Jul 12 08:25:45 2010 Unrecognized attempt blocked from 87.24.151.89:2866 to 81.228.158.157 UDP:33381
Mon Jul 12 08:25:47 2010 Unrecognized attempt blocked from 87.24.151.89:2866 to 81.228.158.157...
58.218.204.110 - Flagged by IDS system - TCP Port Scan
Flagged by IDS system - TCP Port Scan
Date: 07/12 00:12:58 Name: (portscan) TCP Portscan
Priority: 4 Type: n/a
IP info: 58.218.204.110:n/a -> 204.xxx.xxx.xxx...
221.192.199.46 - 221.192.199.46 trying to hack my computer daily
Mostly to TCP port 8085 attempt to access my computer daily, multiple times as seen in log. I have blocked this IP address with McAfee but I am not a computer tech person, so I don't know what else t...
221.192.199.35 - Atempted Port scan
07/10/2010 09:15:33.304 - Possible Port Scan Dropped - Source:221.192.199.35, 12200, WAN -
Destination:204.195.30.19, 6588, WAN - TCP scanned port list, 8080, 7212, 8000, 1080, 8118 -...
62.3.194.146 - 62.3.194.146United Kingdom
port scan from this asshole several port probed to hack my computerinetnum: 62.3.192.0 - 62.3.195.255
netname: NILDRAM-DSL-STATIC-CUST29-01
descr: static /29 adsl customers
country: GB
adm...
62.3.194.146 - 62.3.194.146United Kingdom
port scan from this asshole several port probed to hack my computerinetnum: 62.3.192.0 - 62.3.195.255
netname: NILDRAM-DSL-STATIC-CUST29-01
descr: static /29 adsl customers
country: GB
adm...
212.227.35.235 - Why is China scanning for open ports?
I had a honeypot on a well known proxy port and a scan originated from China. What is the deal? Is it part of some sort of Chinese intelligence gathering?
I encourage you to discuss this with me vi...
71.234.102.202.h - Spaming Port Scanner
These folks been scanning least 12-20 ports all randomly ever hour on the hour.. I am using Norton FIrewall part of the security suite.. anyone else having theses troubles from this IP address?
...
scanning my port doing an executable file listed as an outgoing file using TCP...of course always goes thru a company router alot of times i backtarce and it comes up thru microsoft..i have learned ...
112.201.54.124 - [DoS Attack: RST Scan] from source 112.201.54.124
[DoS Attack: RST Scan] from source 112.201.54.124, port 4348, Wednesday, July 07,2010 14:56:27...
221.195.73.68 - Causing intermittent interruptions in service
7 07/06/2010 20:13:18 Unrecognized attempt blocked from 61.176.216.102:4463 to 24.206.117.104 TCP:2967
8 07/06/2010 20:34:11 Unrecognized attempt blocked from 61.164.148.11:6000 to 24.206.117.104 TC...
202.102.234.71 - Busy, busy China-men
Eight port scans in 2 seconds once a day from this IP and another 8 scans from 221.195.73.68 (you guessed it, also Hebei China) each day. My Zone Alarm firewall is catching them but this is annoying....
221.192.199.46 - 221.192.199.46 info from McAfee's Visual Tracer
Re 221.192.199.46 attacking TCP port 8085
using McAfee\'s Visual Tracer in Network View, I obtained this:
inetnum: 221.192.0.0 - 221.195.255.255
netname: UNICOM-HE
descr: China Unicom Hebei Prov...
I have this IP and few others from same location constantly scanning my router... It is sometimes starting to result in internet service loss or distruption. Is there any way to stop this ?...
68.142.233.94 - DOS Attack
admin login] from source 192.168.1.80, Monday, July 05,2010 15:39:35
[admin login failure] from source 192.168.1.80, Monday, July 05,2010 15:12:33
[admin login] from source 192.168.1.80, Monday, Jul...
15.216.110.140 - Port Scanning
Port scanning my home router. Afterwards repeated Lan access from remote entries in Router log to various computers behind my firewall. ...
87.24.151.89 - Port scan reported at 17:39 BST
Netgear router reported a port scan from 87.24.151.89 at 17:39 BST on July 05 2010....
202.102.234.71 - Getting hits 15 to 20 times a day
221.195.73.68 and 71.234.102.202.ha.cnc are trying to get at the MAC kernel. So far Norton has stopped them but it is very aggravating. I believe it is only a matter of time before they crash my sys...
202.102.234.71 - 202.102.234.71
Whoever that is he is trying to get access to my computer -.- Can I block him somehow?...
68.94.157.1 - Scanning 200 ports at a time, several attempts so far.
Appears to be looking for an entrance or specific port. scanning 200 ports at a time counting back from 10,000. Serious hacker, having scanned his IP found it locked tight. Most certainly only uses...
68.94.156.1 - Scanning 200 ports at a time, several attempts so far.
Appears to be looking for an entrance or specific port. scanning 200 ports at a time counting back from 10,000. Serious hacker, having scanned his IP found it locked tight. Most certainly only uses...
202.102.234.71 - 202.102.234.71
Port scans against my edge router from China; 8085, 9090, 2479, 9000, 3246, 8090. Multiple attempts....
221.192.199.46 - 221.192.199.46 221.192.199.48
I've had 10 of them already in the last hour please do something about this!...
202.102.234.71 - 202.102.234.71
and after 5min again with other ports
Your computer's TCP ports: 8085, 9415, 9090, 2479 and 9000 have been scanned from 202.102.234.71 ...
202.102.234.71 - 202.102.234.71
Your computer's TCP ports: 8085, 9090, 9000, 3246 and 1080 have been scanned from 202.102.234.71 ...
202.102.234.71 - scanning abuse ... I wish to prosecute
Somebody is scanning your computer.
Your computer\\\'s TCP ports:
8085, 9415, 9090, and 9000 have been scanned from 202.102.234.71..
I\\\'ve been having issues all night and was forced to dir...
74.208.221.132 - TCP port scans from 74.208.221.132
Your computer's TCP ports:
80, 3389, 110, and 1433 have been scanned from 74.208.221.132...
202.102.234.71 - Someones looking for open ports
Ports scanned 8085,8090,9000,2479,9090,9415 and 3246 from 202.102.234.71...
202.102.234.71 - TCP scans from 202.102.234.71
Somebody is scanning your computer.
Your computer\\\'s TCP ports:
8085, 9415, 2479, 3246 and 8090 have been scanned from 202.102.234.71....
87.248.217.254 - what the hell does this guy wants ???
**TCP FIN Scan** 192.168.2.101, 1874->> 87.248.203.254, 80 (from ATM1 Outbound)...
87.248.217.254 - what the hell does this guy wants ???
**TCP FIN Scan** 192.168.2.101, 1874->> 87.248.203.254, 80 (from ATM1 Outbound)...
87.248.217.254 - what the hell does this guy wants ???
**TCP FIN Scan** 192.168.2.101, 1874->> 87.248.203.254, 80 (from ATM1 Outbound)...
87.248.217.254 - what the hell does this guy wants ???
i have a port scan from this adress and he s from netherland.how can i block that ?...
125.45.109.166 - twelve connection attempts from port 12200
Jun 25 20:59:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.113:8080 in via ppp0
Jun 25 20:59:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.113:80...
125.45.109.166,1 - Non-stop scans daily
This must be blocked at the country\'s border by routers!!! Dont let this traffic slow down America\'s Internet....
125.45.109.166,1 - 125.45.109.166 is Back
24 June 2010 22:55:59 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]
21 June 2010 22:56:22 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]...
80.121.201.140 - This ip is scanning my firewall every 25 minutes
UTC 06/24/2010 14:31:55.208 - Alert - Intrusion Prevention - Possible port scan detected - 80.121.201.140, 62128, X1 - my ip address, 48329, X1 - UDP scanned port list, 29083, 35915, 23834, 47445,...
84.119.41.172 - This ip is scanning my firewall every 25 minutes
UTC 06/24/2010 20:49:15.400 - Alert - Intrusion Prevention - Possible port scan detected - 84.119.41.172, 55432, X1, 84-119-41-172.dynamic.xdsl-line.inode.at - my ip, 12200, - UDP scanned port li...
202.102.234.71 - 202.102.234.71
This address scanned 7 times each to a different port all at 15:56:54 MDT on 6/24/10. Router dropped packet each time....
125.45.109.166 - 40 connection attempts from port 12200
Jun 24 18:14:25 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.131:8080 in via ppp0
Jun 24 18:14:25 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.131:80 i...
222.45.112.59 - port scans from 222.45.112.59
every day port scans, 9415, 9090, 2479, 9000 and 1080 where scanned, we know where he lives, lets get him!...
125.45.109.166 - Here we go again
In the space of two seconds, 125.45.109.166's port 12200 scanned my local ports 50050, 29505, 3246, 9415, 2479, 6588, 553, 554, 8888, 8000, 8080, 8085, 8088, 80, 3124, 3127, 3128, 7212....
222.59.180.204 - Starting to piss me off!
Security alert type : Port Scan
Protocol type : TCP
IP source address : 222.45.112.59
Time at last attempt : 6/20/10 07:21:17 AM
Number o...
125.45.109.166 - 20 connection attempts from port 12200
Jun 21 16:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.33:8080 in via ppp0
Jun 21 16:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.33:80 in ...
212.227.35.235 - [Port Scan] + [DOS]
Sat, 2010-06-19 21:52:51 - TCP Packet - Source:212.227.35.235,1107 Destination:00.000.000.000,15000 - [DOS]
Sat, 2010-06-19 21:52:51 - TCP Packet - Source:212.227.35.235,1108 Destination:00.000.000.0...
87.24.151.89 - Port scan reported at 07:16 BST
TCP Packet - Source:87.24.151.89 - [PORT SCAN]
Reported at 07:16 British Summer Time
...
125.45.109.166 - 40 connection attempts from port 12200
Jun 20 20:52:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.38:8080 in via ppp0
Jun 20 20:53:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.38:80 in ...
221.195.73.86 - More noob chinks
01:10:33 221.195.73.86 Subnet blocked for 1 min SCAN (16415, 14340)
If my firewall doesn't block them I got PeerBlock set to filter all China IPs anyways....
125.45.109.166 - 20 connection attempts from port 12200
Jun 20 00:02:23 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.66:8080 in via ppp0
Jun 20 00:02:23 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.66:80 in ...
77.40.130.251 - i have 30 events per day by this ip scanning my ports
77.40.130.251 this ip has been scaning my ports it shows me in mcafee log viewer - it is going 20-30 times a day for about week or two now, please advise what to do...
125.45.109.166 - Port scans
Somebody is scanning your computer.
Your computer's TCP ports:
8088, 553, 554, and 808 have been scanned from 125.45.109.166.....
119.48.58.38 - port scan attack
Port scan attack
Firewall protection
6/19/2010 12:04:...Blocked
Source IP address: 119.48.58.38
xxxxxxxxxx and xxxxxxxxxxxx
Port scan attack
Firewall protection
6/19/2010 11:00:... Blocked
So...
119.48.58.38 - port scan attack
Port scan attack
Firewall protection
6/19/2010 12:04:...Blocked
Source IP address: 119.48.58.38
xxxxxxxxxx and xxxxxxxxxxxx
Port scan attack
Firewall protection
6/19/2010 11:00:... Blocked
So...
64.29.219.134 - DoS Attack: ACK Scan
[DoS Attack: ACK Scan] from source: 64.29.219.134, port 35947, Monday, June 14,2010 00:51:05
[DoS Attack: ACK Scan] from source: 64.29.219.134, port 15082, Monday, June 14,2010 00:50:33
[DoS Attack:...
125.45.109.166 - nineteen connection attempts from port 12200
Jun 18 03:25:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.148:80 in via ppp0
Jun 18 03:25:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.148:3128 i...
125.45.109.166 - 40 connection attempts from port 12200
Jun 17 21:47:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.93:8080 in via ppp0
Jun 17 21:47:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.93:80 in ...
125.45.109.166 - 40 connection attempts from port 12200
Jun 17 11:23:03 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.25:8080 in via ppp0
Jun 17 11:23:03 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.25:80 in ...
68.105.28.11 - UDP Port Scans from 68.105.28.11 - Random ports
Random UDP (i.e., 5, 59396, 59908, 61956) port scans occur several times a day. These attempts are blocked and reported from the firewall (Comodo) application. All system related scans with various ma...
222.208.183.218 - Port 8000,8080,80,7212 scanning
This person/organisation was blocked at firewall on 6th June. Port scanning by them continues right through on the 17th June 2010...
125.45.109.166 - 20 connection attempts from port 12200
Jun 16 12:24:41 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.233:8080 in via ppp0
Jun 16 12:24:41 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.233:80 i...
125.45.109.166,1 - port scanning dirt bag
The commies are attacking by port scanning. At least this hacker is not succeeding....
125.45.109.166 - 39 connection attempts from port 12200
Jun 16 02:10:56 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.194:8080 in via ppp0
Jun 16 02:10:56 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.194:80 i...
125.45.109.166 - Repeated scans over the past month
Just suffered another attack. Same ports that were scanned earlier were scanned again from remote port 12200, in the exact same order as before. All in one second. Seems to be be automated....
125.45.109.166 - Repeated scans over the past month
This ip address has been scanning my computer twice a day for the past month. Each incident involves the scanning of several ports. Just a while ago, it scanned multiple ports in the space of a single...
125.45.109.166 - 74 connection attempts from port 12200
Jun 14 04:59:10 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.132:8085 in via ppp0
Jun 14 04:59:10 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.132:3246...
125.45.109.166 - fifteen connection attempts from port 12200
Jun 14 02:33:48 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 14 02:33:48 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:3246...
213.5.71.85 - Dolph Lambert
http://acleris.com/dls/dlsjs-07x/78/aerial-maps167.html Aerial Maps , bsqwqv , http://diverswest.biz/aspnet_client/system_web/061/motorcycle-gear194.html Motorcycle Gear , 43988 , http://consumed.co...
125.45.109.166 - seventeen connection attempts from port 12200
Jun 13 23:56:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 13 23:56:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:3246...
125.45.109.166 - nineteen connection attempts from port 12200
Jun 13 21:36:27 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 13 21:36:27 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:9415...
125.45.109.166 - 20 connection attempts from port 12200
Jun 13 19:16:14 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 13 19:16:14 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:9415...
221.192.199.46 - Scanning my ports everyday
Not sure how many weeks this has been going on, but I\'ve been checking my logs and this guy is constantly scanning them....
125.45.109.166 - 40 connection attempts from port 12200
Jun 13 08:29:39 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.72:8085 in via ppp0
Jun 13 08:29:39 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.72:9415 i...
222.59.180.204 - Constantly port scanning, firewall blocks all activity
Keep getting port scanning from
222.45.112.59
CHINA RAILWAY TELECOMMUNICATIONS CENTER
causing firewall to shut down all activity for a period of time. This is getting on my nerves now....
218.8.245.123 - this ip is connected with skyfleck.com
this IP is trying to connect to skyfleck.com
skyfleck.com/perfmonss.bin, 218.8.245.123, -, trojan Refpron
and
skyfleck.com/snmp.bin, 218.8.245.123, -, trojan Refpron
related IP\'s 221.19...
125.45.109.166 - 20 connection attempts from port 12200 in two seconds
Jun 11 22:36:51 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:8085 in via ppp0
Jun 11 22:36:51 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:3246...
125.45.109.166 - Fifteen connection attempts from port 12200 in one second
Jun 11 18:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:8085 in via ppp0
Jun 11 18:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:2479...
125.45.109.166 - 125.45.109.166
multiple port scans in a few minutes. Can we just smart bomb the site and get it over with?...
125.65.165.184 - script '/var/www/prx2.php' not found or unable to stat
This user tried to execute the script prx2.php...
125.45.109.166 - 82 connection attempts from port 12200
Jun 9 09:21:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.121:8080 in via ppp0
Jun 9 09:21:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.121:8085...
129.33.82.58 - 129.33.82.58 Durham United States
PORT SCAN FROM IBM HEADQUARTERS IN NORTH CAROLINA PORT RANGE 33452....33463 AND ICMP ECHO REPLYES.....DID THEY HACK COMPUTERS IN LUNCH BREAK?????...
193.88.6.12 - Keeps port scanning twice a day
Noticed this a while ago and the trend is almost alway the same, two port-scans per day directed to a single IP in my network....
125.45.109.166,1 - Unsolicited port scans on my Router
Unsolicited port scan on my Router
No.001 Apr 29 20:41:17 - [Firewall Log-PORT SCAN] TCP Packet - 125.45.109.166 --> 213.46.72.115
No.002 Apr 30 06:29:55 - [Firewall Log-PORT SCAN] TCP Packet - ...
221.192.199.46 - Excessive
Blocked incoming TCP connection request from 221.192.199.46:12200 from Hebei, China
I logged a couple hundred tcp attempts from the IP address, in a couple minutes. Enough is enough Is this legal?...
125.45.109.166 - IF This was my house
347 Blocked incoming TCP connection request from 125.45.109.166:12200 in less then 20 minutes, a bit excessive? ...
125.45.109.166,1 - Unsolicited Port Scan 8088, 8888, 808, and 29505
See this IP hit my firewall every six to seven hours....
218.3.204.139 - Tried requesting Remote Desktop Access
I was working online through my BSNL Broadband service in India. Suddenly, I received a remote desktop access request from this IP. It seems person at this IP had been analyzing my system, scanning fo...
125.45.109.166 - 80 connection attempts from port 12200
Jun 6 02:15:02 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.191:8080 in via ppp0
Jun 6 02:15:02 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.191:8085...
125.45.109.166 - 28 connection attempts from port 12200 in four seconds
Jun 5 05:59:28 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:8080 in via ppp0
Jun 5 05:59:28 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:80...
125.45.109.166 - 27 connection attempts from port 12200 in four seconds
Jun 5 05:18:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:8080 in via ppp0
Jun 5 05:18:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:80...
125.45.109.166,1 - 125.45.109.166 is Port Scanning
This IP address (125.45.109.166) is port scanning my router daily...
222.45.112.59 - Unsolicited Port Scan TCP ports 8085,9415,2479 & 9090.
Why is the Beijing Rail Company scanning Australian home PC\\\'s???
What is their intent?????...
222.45.112.59 - Unsolicited Port Scan TCP ports 8085,9415,2479 & 9090.
Why is the Beijing Rail Company scanning Australian home PC\'s???
What is their intent?????...
122.164.179.21 - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them. Recent Security logs:
Wed Jun 2 22:28:59 2010
=>Found attack from 122.164.179.21.
Source port is 10496 and...
221.192.199.48 - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them. Recent Security logs:
Wed Jun 2 21:04:07 2010
=>Found attack from 221.192.199.48.
Source port is 12200 a...
221.192.199.49 - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them. Recent Security logs:
Wed Jun 2 20:44:47 2010
=>Found attack from 221.192.199.46.
Source port is 12200 a...
116.87.165.13. - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them....
221.192.199.46 - He's been scanning my ports on my router consantly
His constant scanning has been filling my router\'s security log. I'd would really like something to be done about this guy cuz its beginning to piss me off....
62.220.120.165 - Port scans, sub7 attacks and net spy attacks
A zombie or a little hacker? If you try to enter that IP address in your browser you'll see an ISS message so they're running a windows-based system....
124.237.84.206 - Post scan detected from IP address 124.237.84.206
Port scan reported by Netgear router at 07:01 GMT from IP address 124.237.84.206...
221.195.73.86 - attempts to connect on ports 1080 and 8000
attempts coming from port 12200 knocking on ports 8000 and 1080 every few minutes. piss off you a-holes....
125.45.109.166,1 - Port scanning entire 68.&69. netblocks repetitively
I ignored the few I reviewed at first. Still dont care...but its showing up on all the Comcast Resi IP connections I monitor, multiple times a day, since at least 4/27/10.
I still Love how people th...
125.45.109.166 - 41 connection attempts from port 12200 in five seconds
May 29 19:22:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.4:8080 in via ppp0
May 29 19:22:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.4:8085 in ...
212.227.35.235 - Port Scan
Port Scan from 212.227.35.235 occured 1 time on 29/05/2010 at 13:24 BST....
125.45.109.166 - 41 connection attempts from port 12200
May 29 10:39:18 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.168:8080 in via ppp0
May 29 10:39:18 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.168:8085...
212.227.35.235 - Portscans
Port scan! From 212.227.35.235:1094 to 87.54.108.171:6666, proto TCP (zone Untrust, int ethernet0/0). Occurred 1 times.
Port scan! From 212.227.35.235:1084 to 87.54.108.171:10000, proto TCP (zone Unt...
222.45.112.59 - Port Scanning
Getting scanned twice a day for the month of may 2010 so far not stopping...
222.186.30.249 - Portscan 24/7
2010-05-27 22:31:19 12613: May 27 21:31:24.208 PST: %SEC-6-IPACCESSLOGP: list 102 denied tcp 222.186.30.249(12200) (FastEthernet0/0 001d.70cc.60e2) -> (Local IP)(3128), 1 packet
2010-05-27 22:38:13 1...
125.45.109.166 - PITA server
This bot keeps port scanning 10-15 times a day!
[Firewall Log-PORT SCAN] TCP Packet - 125.45.109.166 --> xx.xx.xxx.xx...
125.45.109.166 - 84 connection attempts from port 12200
May 28 17:32:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.175:8080 in via ppp0
May 28 17:32:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.175:8085...
61.183.15.9 - Regular Port Scanning
Noticed our ZoneAlarm Pro software firewall (resident behind our router hardware firewall) picking up single port scanning attempts from 61.183.15.9 on May 13/10, May 24/10 and May 28/10. ZA Pro preve...
207.190.52.41 - Port Scanned
Our Network was port scanned at 00:03 GMT+1 by this IP Address. This IP address/company should be disconnected from the internet for criminal activity....
222.45.112.59 - how to stop this scanner
is possible to sue this chinese for the constant port scans?...
125.45.109.166,1 - 125.45.109.166 attacking multiple times a day
This IP address has been attempting to access my system for over a month. It's the same IP every time and it won't give up!...
61.183.15.9 - 61.183.15.9 - - [22/May/2010:19:20:53 -0400] "GET http://www.wantsfly.com/prx2.php HTTP/1.0" 403 210
61.183.15.9 - - [22/May/2010:19:20:53 -0400] "GET http://www.wantsfly.com/prx2.php HTTP/1.0" 403 210
What are the Chinese up to?...
222.45.112.59 - 8085, 9415, 2479, and 1080 have been scanned
Port scanning more ports today (seems to alternate):
8085, 9415, 2479, and 1080 have been scanned...
125.45.109.166,1 - Firewall alert to port scan attack
I get alerted by my firewall at least five times a day that the i.p. address 125.45.109.166 is attempting to scan my tcp ports. It happens at least five times a day. It makes several attempts to scan ...
222.45.112.59 - 222.45.112.59 scanning ports: 9415 9090 9000 8090
222.45.112.59 was caught and blocked by my firewell attempting to scan ports:
9415
9090
9000
8090...
198.186.192.44 - not sure what
198.186.192.44 - - [23/May/2010:21:35:54 -0400] "GET / HTTP/1.1" 200 110
...
61.183.15.9 - remote access attempt
perhaps a few of them:
64.2.64.167 - - [23/May/2010:18:00:44 -0400] \"GET /webmail/README HTTP/1.1\" 404 212
64.2.64.167 - - [23/May/2010:18:00:44 -0400] \"GET /roundcube/README HTTP/1.1\" 404 214...
125.45.109.166 - Another port scan
Yet another port scan from those dirty yellow niggers in China
Port scan attack Firewall protection 24/05/2010 20:06:29 Blocked Source IP addres...
125.45.109.166 - 45 connection attempts from port 12200
May 24 18:44:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.250:3246 in via ppp0
May 24 18:44:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.250:2479...
221.192.199.35 - prx2.php
[error] [client 221.192.199.35] script \\\\\\\'/var/www/vhosts/default/htdocs/prx2.php\\\\\\\' not found or unable to stat...
125.45.109.166 - 16 connection attempts from port 12200 in three seconds
May 24 00:11:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.194:8080 in via ppp0
May 24 00:11:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.194:80...
222.45.112.59 - Port Blockling Successful
Several times daily 222.45.112.59 has been scanning ports; 8085, 2479, 9090, 9000, 8080, 7212, 9415, 3246, 3128, 8090 - this is ridiculous. How do we stop this!! AARRGH...
125.45.109.166 - 54 connection attempts from port 12200
May 23 13:35:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.137:8080 in via ppp0
May 23 13:35:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.137:8085...
212.227.35.235 - 212.227.35.235 Karlsruhe
syn flood and after port scan 2:42:46 PM 212.227.35.235 Subnet blocked for 60 min SCAN (40960, 26385, 13572)
...
222.45.112.59 - eset detected port scanning attack since 5/18/10
it seams to know when to scan right after pc restores from sleep mode
but i cant find no malicious files with anti virus
...
125.45.109.166 - 38 connection attempts from port 12200 in four seconds
May 22 15:18:16 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.144:8080 in via ppp0
May 22 15:18:16 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.144:8085...
I dont understand what all this is but I know Panda antivirus was recommended to me along time ago and on this case as well as many other has worked wonderfully at stopping what ever someone is trying...
74.125.127.118 - ZIOGOOGLE caught port scanning agian
Another address from which google uses to carry out port scan attempts and other malicious attacks on internet users
everyone boycott google now and switch to the safe alternative of yahoo or scroo...
74.125.19.100 - ZIOGOOGLE caught port scanning agian
I'm also contiunually getting port scanning attempts/attacks on my IP from the zionist monster google
why cant they just f*k off filthy bastards...
222.45.112.59 - Port scan
Same here, been getting port scans for the last month from those filthy yellow niggers
Panda Global Protection 2010 incident report
...
125.45.109.166,1 - Port scan
Had yet another port scan from dirty yellow niggers from Bejing
Panda Global Protection 2010 incident report
...
222.45.112.59 - Endless port scanning 3128 9000 8085 1080 ....
till only scan... no problem! But is so annoying! would like to smash it down ;)...
125.45.109.166 - 39 connection attempts from port 12200 in four seconds
May 20 12:51:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.43:8080 in via ppp0
May 20 12:51:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.43:8085 i...
125.45.109.166 - This ip seems to be looking for proxies to attack
Doing a quick scan every couple of days. Always the same ports:
Tue, 2010-05-18 06:31:32 - TCP Packet - Source:125.45.109.166,12200 Destination:70.111.62.37,6588 - [DOS]
Tue, 2010-05-18 06:31:32 - T...
125.45.109.166 - 22 connection attempts from port 12200 in three seconds
May 19 23:31:17 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.165:8080 in via ppp0
May 19 23:31:17 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.165:80...
222.45.112.59 - port Scan
Another scan of my ports of China Address:222.45.112.59
these idiots not understand that any attempt was blocked.
Have a good firewall...
125.45.109.166 - 31 connection attempts from port 12200 in three seconds
May 18 23:45:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.175:8080 in via ppp0
May 18 23:45:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.175:24...
66.35.46.194 - Various Port scanning port 12462 & 10672
58.60.10.10 is scanning on ports 12462 & 10672 to get access to my network...
58.60.10.10 - Various Port scanning port 12200
58.60.10.10 is scanning on port 12200 to get access to my network...
200.75.107.161 - Various Port scanning port 63479
200.75.107.161 is scanning on port 63479 to get access to my network...
220.162.207.62 - Various Port scanning port 4545 & 4547
220.162.207.62 is scanning on ports 4545 & 4547 to get access to my network...
41.224.105.218 - Various Port scanning port 63441 & 63643
41.224.105.218 is scanning on ports 63441 & 63643 to get access to my network...
125.45.109.166,1 - Random Port Scan
Symantec firewall detcted the port scan from TCP 12200 to my port 9000. It was blocked by default. I just reinstalled my OS and was updating windows service packs when it came up. It only happened onc...
75.125.39.74 - Intrusion.Generic.TCP.Flags.Bad.Combine.attack TCP from 75.125.39.74 to local port 1234
75.125.39.74 Intrusion.Generic.TCP.Flags.Bad.Combine.attack TCP from 75.125.39.74 to local port 1234...
125.45.109.166 - 36 connection attempts from port 12200 in three seconds
May 17 22:40:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:8080 in via ppp0
May 17 22:40:14 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:80...
222.45.112.59 - Somebody is scanning your computer from 222.45.112.59
222.45.112.59 - Geo Information
IP Address 222.45.112.59
Host 222.45.112.59
Location CN, China
City Beijing, 22 -
Organization CHINA RAILWAY TELECOMMUNICATIONS CENTER
ISP CHINA RAILWAY TE...
75.125.39.74 - Internet Protocol (IP) half scan IP 75.125.39.74
Internet Protocol (IP) half scan IP 75.125.39.74...
66.196.65.172 - 66.196.65.172&66.196.65.174
SUNNYVALE DESPERATE PORT SCANNING LIKE CRAZY SLEEZY SLAVES FROM CALIFORNIA INKTOMI CORPORATION WHO ARE THOSE GUYS WHO ARE SO CURIOUS TO ENTER WITH BRUTE PORT SCANNING INTO MY COMPUTER , I WILL LOOK FO...
66.196.65.172 - 66.196.65.172&66.196.65.174
SUNNYVALE DESPERATE PORT SCANNING LIKE CRAZY SLEEZY SLAVES FROM CALIFORNIA INKTOMI CORPORATION WHO ARE THOSE GUYS WHO ARE SO CURIOUS TO ENTER WITH BRUTE PORT SCANNING INTO MY COMPUTER , I WILL LOOK FO...
125.45.109.166 - 34 connection attempts from port 12200 in two seconds
May 17 13:37:04 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:8080 in via ppp0
May 17 13:37:04 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:80...
125.45.109.166 - port scan from 125.45.109.166
been getting port scans from this filth every day for the last month.
Port scan attack Firewall protection 17/05/2010 12:38:43 Blocked Source ...
125.45.109.166,1 - Constant daily attacks
My DSL router has been receiving daily DOS and PORT SCANS from this IP for several weeks.
Fri, 2010-05-14 18:58:30 - TCP Packet - Source:125.45.109.166,12200 Destination:70.252.56.222,8088 - [DOS]
...
125.45.109.166 - 37 connection attempts from port 12200
May 16 18:45:08 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.177:3246 in via ppp0
May 16 18:45:08 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.177:80 i...
125.45.109.166 - 37 connection attempts from port 12200 in four seconds
May 16 09:38:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.18:8080 in via ppp0
May 16 09:38:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.18:8085 i...
222.45.112.59 - What the hell...
What the hell is wrong with these Chinese idiots from Beijing irritating us by scanning our ports.
We know you guys live for $3 a day...but we have better things to do so stop annoying us....
125.45.109.166 - 33 connection attempts from port 12200 in two seconds
May 15 09:23:33 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.178:8080 in via ppp0
May 15 09:23:33 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.178:80...
125.45.109.166 - 28 connection attempts from port 12200 in three seconds
May 14 14:09:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.186:8080 in via ppp0
May 14 14:09:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.186:32...
125.45.109.166,1 - Router shows constant activity on incoming various ports
Router log shows constant activity on incoming various ports,
I don\\\'t know what to do. I put it in the restricted sites in internet optons....
125.45.109.166 - 56 connection attempts from port 12200
May 13 19:34:58 localhost kernel: ipfw: 55003 Deny TCP 125.45.109.166:12200 4.154.26.141:8080 in via ppp0
May 13 19:34:59 localhost kernel: ipfw: 55003 Deny TCP 125.45.109.166:12200 4.154.26.141:3246...
218.30.22.82 - continues to attack daily
5/10/2010 11:43:22 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.30.22.82. Protocol/service: UDP on local port 1434. Time: 5/10/2010 11:43:22 PM...
122.225.100.154 - continues to attack daily
5/11/2010 1:47:18 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker\'s IP address: 122.225.100.154. Protocol/service: UDP on local port 1434. Time: 5/11/2010 1:47:18 PM...
122.225.100.154 - continues to attack daily
5/11/2010 1:47:18 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 122.225.100.154. Protocol/service: UDP on local port 1434. Time: 5/11/2010 1:47:18 PM
...
60.161.78.155 - continues to attack daily
5/11/2010 3:23:41 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 60.161.78.155. Protocol/service: UDP on local port 1434. Time: 5/11/2010 3:23:41 PM
...
190.202.117.178 - continues to attack daily
5/12/2010 6:47:44 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker\'s IP address: 190.2.29.193. Protocol/service: UDP on local port 1434. Time: 5/12/2010 6:47:44 PM...
124.40.51.146 - This IP has been scanning ports on my firewall.
I've been watching this IP address scan ports on my firewall. I'm getting UDP packet dropped as he scans each one....
221.192.199.35 - TCP port scans daily 221.192.199.35
TCP port scan from 221.192.199.35 several times a day (Hebei, China).
...
221.192.199.48 - How long?
"Report the abuser now!"?? FOR WHAT?? I see 35 reports here going back over 3 months and current reports keep coming in. WHEN will anything get done? HOW MANY reports does it take? Does this site comp...
125.45.109.166 - 60 connection attempts from port 12200
May 12 04:49:21 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.242:8080 in via ppp0
May 12 04:49:21 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.242:3246...
125.45.109.166,1 - Constant scanning, 1 minute apart
This IP has been port scanning my system, one minute apart at times....
95.100.105.83 - Port scan from AKAMAI TECHNOLOGIES
16:41:05 95.100.105.83 Subnet blocked for 60 min SCAN (40688, 42480, 41200)ASSHOLES!!!!
...
125.45.109.166 - 41 connection attempts from port 12200 in two seconds
May 11 08:54:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:8080 in via ppp0
May 11 08:54:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:80...
125.45.109.166 - 41 connection attempts from port 12200 in three seconds
May 11 07:03:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:8080 in via ppp0
May 11 07:03:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:80...
222.45.112.59 - Constant Port Scanning
Every 2 hours this guy is scanning my ports. I\\\'ve changed my ip address and he seems to be able to tack me down....
222.45.112.59 - Constant Port Scanning
Every 2 hours this guy is scanning my ports. I\'ve changed my ip address and he seems to be able to tack me down....
125.45.109.166,1 - This IP has been port scanning our network for weeks now.
Router log...
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destination:213.41.191.190,9090 - [DOS]
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destin...
125.45.109.166,1 - This IP has been port scanning our network for weeks now.
Router log...
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destination:213.41.191.190,9090 - [DOS]
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destin...
125.45.109.166 - Several port scan daily
Several port scans every day now for two weeks. Cisco firewall blocks them thank goodness.
Emailed a few formal complaints to operators of IP\'s ISP but no replies....
125.45.109.166 - 62 connection attempts from port 12200
May 10 04:17:42 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.178:8085 in via ppp0
May 10 04:17:42 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.178:3246...
125.45.109.166 - Almost daily port scanning from port 12200.
This person tries every port possible one after another then has lunch and tries them all again. Everything gets blocked, but I just don't like it. 50 attempts on 05-09-2010....
83.85.97.43 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he\\\\\\\'s using rippers everytime he view my website....
83.85.99.29 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he\\\'s using rippers everytime he view my website. can...
81.204.56.105 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he\'s using rippers everytime he view my website. can y...
82.170.234.57 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he's using rippers everytime he view my website. can yo...
125.45.109.166 - Firewall Port Scan continually
09.05.10 12:56:45 kernel Symantec Intrusion Prevention has detected and blocked a portscan from 125.45.109.166 ...
125.45.109.166,1 - This IP has been port scanning my router frequently many times a day
This IP has been port scanning my router frequently many times a day...
125.45.109.166,1 - I've been receiving security bulletins from my wireless router that this china located address is port scanning
Does this site do anything to stop any reported abuse?
is it even possible to stop them as he may be using an IP masking software such as hideip etc etc and
the person may well be a 45 year old ...
222.45.112.59 - Same as everyone else...
Small sample:
05/07/2010 04:17:36.032 - Possible Port Scan Dropped - Source:222.45.112.59, 12200, WAN - Destination:76.14.238.90, 8090, WAN - TCP scanned port list, 8085, 9415, 2479, ...
78.188.215.105 - Scanning RDP port 3389
This IP is logged as connecting to various workstations RDP port 3389 and attempting a brute dictionary style attack to guess the login credentials....
222.45.112.59 - Persistent Port Scanning
Every day some one from China is constantly scanning my ports. This ip address 222.45.112.59 among others has several attemps per day. Ports 3128, 9000, 9090, 3246, 8090 and 1080...
125.45.109.166,1 - Persistent attack from IP 125.45.109.166
This IP has been port scanning our network for weeks now. Reviewing the logs, it appears the (source port) Src 12200 is hitting a variety of of destination ports. The firewall appears to be doing it...
125.45.109.166,1 - Constant attacks daily trying to get into my ports
Constant attacks daily from IP 125.45.106.66 trying to gain access at port 12200...
222.45.112.59 - Constant port scanning
Scans either at 20min or at 4-hour intervals.
Scans ports 9420, 8085, 8090, 9415, 3246, 3128, 2479, 9000, 9090. Always from port 12200....
117.87.35.251 - china unicom henan province network doing portscans daily on pc
Scans my pc 2-3 times a day it seems...
221.192.199.46 - attacking router
attempts from this IP day and night every 5 minutes or so. Log is filled with attempts by this IP. Have home office, very concerned about the persistent attempts....
221.192.199.48 - Several port scanns by this guy, wide range of ports
Wed May 5 12:45:35 2010
=>Found attack from 221.192.199.48.
Source port is 12200 and destination port is 3246 which use the TCP protocol.
Wed May 5 12:52:15 2010
=>Found attack from 221.192.199.46...
221.192.199.46 - Port Scanning
Port scanning as others reported...phishing for open ports.
221.192.199.46...
10.0.69.187 - Port Scanning from 10.0.69.187 and 10.0.69.61
My Bitdefender reported me some port scan attempts.
I checked the logs of the Firewall.
\\\"A port scan generated by the IP 10.0.69.187 has been detected
Event Type: Port scan Detected
Action T...
125.45.109.166,1 - attempted port entry
Constant attacks daily from IP 125.45.106.66 trying to gain access at port 12200...
125.45.109.166,1 - 125.45.109.166,12200 is continuing to scan ports and has for several days
125.45.109.166,12200 is continuing to scan ports and has for several days...
125.45.109.166 - regularly attacking my ports
I get about an attack an hour from this Chinese IP. Hopefully my firewall is successfully blocking it....
125.45.109.166,1 - Attempted port entry
Port scan entry 125.45.109.166,12200 attempts to attack daily, couple of times during the day....
125.45.109.166,1 - Attempted port entry
Port scan entry 125.45.109.166,12200 attempts to attack daily, couple of times during the day....
115.178.60.138 - Failed login attempts from this IP
5 failed login attempts to account root (system) -- Large number of attempts from this IP: 115.178.60.138...
222.45.112.59 - Port Scanning
Logs showing portscan attempts every other 5-10 minutes that I'm online ...
125.65.112.161 - prince philip was right
why is it all tiddlywinks that are doing this,theyre already buying all our metal.never eating chinky food again...
125.45.109.166 - 125.45.109.166 TCP 12200 to (my IP tcp 9000)
this is the latest ipfrom china attempting to portscan my ip addy. fortunatly autoblock takes care of these pests.this is second one from beijing,usually from ningbo,i think it might have something to...
23.128.240.85 - Repeated port scans on port 49154
This IP address has run port scans repeatedly, every 7 to 8 minutes. The address is reserved to IANA. I will send them an abuse report....
221.12.160.198 - Apr 30 15:13 found (again from China) 11 attempts to connect
Apr 30 @ 15:13 found (11) attempts to connect continuously each time with warning: this IP is sending large amounts of various TCP/IP packets. Receiving IP addresses (some previous and some new) from ...
221.12.160.198 - 5 connections
router log has flagged up five attacks from this address
"Fri, 2010-04-30 19:48:45 - TCP Packet - Source:221.12.160.198,12200 Destination:89.242.250.95,8008 - [DOS]
Fri, 2010-04-30 19:48:45 - TCP Pa...
221.192.199.48 - Another Chinese idiot messing with our computers.
I still keep getting port scans from these morons.
It is sad that the Chinese government is so weak in technology that it cannot catch these port scanner in their country and arrest them or give ch...
221.192.199.48 - Another Chinese idiot messing with our computers.
I still keep getting port scans from these morons.
It is sad that the Chinese government is so weak in technology that it cannot catch these port scanner in their country and arrest them or give ch...
125.45.109.166 - Another Chinese idiot messing with our computers.
Another Chinese idiot messing with our computers. You port scanners have no life.
I feel sorry for you or your job (if you are getting paid for doing this shit)...
218.30.22.82 - Detected: Intrusion.Win.MSSQL.worm.Helkern
25.4.2010 13:48:22 Network attack, blocked. Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 218.30.22.82 to local port 1434...
122.225.100.154 - Detected: Intrusion.Win.MSSQL.worm.Helkern
28.4.2010 21:38:08 Intrusion.Win.MSSQL.worm.Helkern UDP from 122.225.100.154 to local port...
60.161.78.155 - Detected: Intrusion.Win.MSSQL.worm.Helkern
30.4.2010 15:31:19 UDP from 60.161.78.155 to local port 1434...
125.45.109.166 - 27 portscans in 3 days from 125.45.109.166
Notice this occuring through Norton's and had pop-up notifications 5 times in 2 minutes for this IP. This is what I can get out of it...
Activity: An intrusion attempt by 125.45.109.166 was blo...
125.45.109.166 - They have scanned us the last two days
There was no harm. Firewall blocked all access. This is not the first time we have been scanned from a China IP. About a month ago there were several all in one week. It was the same result, our fi...
125.45.109.166 - portscan from 125.45.109.166
125.45.109.166 has been running portscans for the last two days...
125.45.109.166 - attempts to attack
I\\\\\\\'m a home computer user , don\\\\\\\'t know why this computer in China tries to attack my computer, my anti-virus program blocked an attack right now and I had another attack attempt two days ...
125.45.109.166 - scanning hourly
scanning hourly and weekly, router is blocking, but concerned because I also have a home office and running router behind another router (Cisco for home office use). D-link only router that allows Cis...
121.134.150.3 - Constant Port Scanning by 222.45.112.59
triggers IDS all the time when machine is on public wan
Event Description: Somebody is scanning your computer. Your computer\\\'s TCP ports: 8085, 9415, 2479, 3246 and 9090 have been scanned from 2...
222.45.112.59 - Constant Port Scanning by 222.45.112.59
triggers IDS all the time when machine is on public wan
Event Description: Somebody is scanning your computer. Your computer\'s TCP ports: 8085, 9415, 2479, 3246 and 9090 have been scanned from 222...
222.45.112.59 - Constant Port Scanning by 222.45.112.59
Router logs are filling up with \"Blocked incoming TCP connection request from 222.45.112.59:12200\" notifications. There are 2 every 3 hours around the clock.
Scanning ports: 3128, 2479, 9415, 9...
125.45.109.166 - Port Scans from 125.45.109.166
Multiple port scans from this IP address over the last few hours...
218.206.235.130 - Nmap TCP Scan
attempt to scan and access router on TCP port. Reported and blocked by software firewall....
125.45.109.166 - 125.45.109.166 Multiple TCP packets on port 12200
More attacks from China. According to Whois from China Unicom Henan province network.
Two - three times a day.
More info here http://forums.remote-exploit.org/general-discussion/11321-serious-offsho...
125.45.109.166 - Port scanning and DOS attack
Normal China attacks... The big problem is that it is continuous and very annoying.
What we need is some way to stop the router from even responding to this batch of IPs....
89.187.31.106 - Port Scanning by Infostealer Snifula.B
Every time I get onto the internet, Norton Protection Center says it has blocked an intrusion attempt by this IP address. Again this occurs almost every time I surf the web....
125.45.109.166 - Multiple attempts to connect
April 27 (11) attempts to connect within 6 secs. continuously. Alerts stating: This IP sending a large amount of various TCP/IP packets....
Can't we do something to stop this!!
The only way to stop clogging up the router email is to turn off all router warnings.
Regards,
John...
Can't we do something to stop this!!
The only way to stop clogging up the router email is to turn off all router warnings.
Regards,
John...
221.12.160.198 - Portscan warning from 221.12.160.198
I just received a Portscan warning from 221.12.160.198. I seem to be getting quite a bit of attempted Portscans from China these days. This one cam at 1:45 pm Pacific....
221.192.199.46 - Repeated attacks on router
Port scans throughout they day.
[LAN access from remote] from 221.192.199.48:12200 to my local IP:8085. ...
123.11.240.130 - Continuous connecting attempts
Apr 23 10:13:59 - Sending a large amount of various TCP/IP packets.(11) connecting attempts in 4 sec. ...
114.47.171.19 - annoying logs
so many attempts during the past days scanning the same ports over and over.
cleaned logs numerous times and they just keeps filling up, once they are refreshed...
124.40.51.150 - Port Scanning
ISA Server detected an all port scan attack from Internet Protocol (IP) address 124.40.51.143....
123.4.42.80 - Port Scan detected
Time: 5:04AM
Date: 4/23/2010
Intrusion: Portscan.
Intruder: 123.4.42.80(12200)
Risk Level: Medium.
Protocol: TCP
Attacked Port: 9000...
222.45.112.59 - Port scan by 222.45.112.59
Same thing as described earlier - the same ports were scanned....
123.4.42.80 - 11 connection attempts in 3 secs
Apr 21 11:05:53 was last attempt. Found 11 connection attempts in 3 secs. My security message stated that this IP (China, again) was sending a large amount of various TCP/IP packets....
222.136.98.98 - possible intruder
firewall is blocking this stupid kiddo/bot from getting on my computer...someone take him out plz...
221.192.199.49 - Source port is 12200 and destination port is 8000
About a hundred attempts at ports 8080 and 8000 over the past few days from CHINANET Hunan province network....
222.136.98.98 - Portscans von 222.136.98.98
At 3 times (3 different days) BD's firewall indicated me that IP 222.136.98.98 was scanning my PC. Kill the rat !...
221.192.199.46 - Repeated attacks on router
This IP [221.192.199.46 ] consistently and repeatedly attacks my router with port scanning...
221.192.199.46 - Repeated attacks on router
This IP [221.192.199.46 ] consistently and repeatedly attacks my router with port scanning...
221.192.199.46 - Repeated attacks on router
This IP [221.192.199.46 ] consistently and repeatedly attacks my router with port scanning...
Apr 19 18:40:01 cs1 kernel: [821357.125652] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=40:40:49:92:1d:9b:88:43:e1:08:de:ff:08:00 SRC=92.52.76.67 DST=173.203.105.107 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID...
93.183.135.113 - port scanning
from this ip my firewall detected port scanning on date 20:59 19.4.2010 ...
222.59.180.204 - Port Scan by 222.45.112.59 CHINA RAILWAY TELECOMMUNICATIONS CENTER
inetnum: 222.45.0.0[Who Is IP][trace][Reverse IP Search] - 222.45.255.255[Who Is IP][trace][Reverse IP Search]
netname: HTECH
descr: Kunde Htech Ltd Co
descr: 11 Yanan Road No398,Hangzhou,Zhejiang...
123.11.242.231 - Another chinese port scanner
Several scans in past 48 hours - specifically, ports 3128,1080,8000,9000,8085,3246,2479,9415 were probed. Appears to be automated, since a few other ports are scanned within half a second or so of the...
221.45.122.59 - More annoying port scans
This is the third IP address doing port scans on my computer: 221.45.122.59
I thought it was just the Chinese doing these scans, and now there\'s Japan too. I wonder what they get with all these mill...
99.165.229.47 - router blocked attack
=>Found attack from 99.165.229.47.
Use the ICMP protocol.
Sat Apr 17 00:31:16 2010 ...
61.155.58.151 - router blocked attack
=>Found attack from 61.155.58.151.
Source port is 6000 and destination port is 1433 which use the TCP protocol.
Sat Apr 17 03:35:38 2010...
123.11.242.231 - More annoying port scans
This is the second IP address doing port scans on my computer: 123.11.242.231
The previous one was: 221.192.199.48
How the hell do we stop these Idiots. They have no life and too much time in th...
77.45.164.126 - router blocked attack
Found attack from 77.45.164.126.
Source port is 1152 and destination port is 8085 which use the TCP protocol.
Sat Apr 17 06:31:16 2010
...
125.128.105.249 - router blocked attack
Sat Apr 17 17:19:02 2010
=>Found attack from 125.128.105.249...
61.183.15.9 - Asian Monkey
61.183.15.9 - - [17/Apr/2010:09:35:28 -0400] \"GET http://www.wantsfly.com/prx2.php HTTP/1.0\" 404 529 \"-\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\"...
77.75.232.236 - scanned at least 10 ports
Recent connectivity problems with broadband - sorted by provider - now being scanned by MURPHX INNOVATIVE in EASTLEIGH HAMPSHIRE - suspiciously physically rclose to my locality. No problems prior to o...
222.45.112.59 - Consistent scanning
This IP has been scanning several ports at very close to 4-hour intervals for about a week now. Ports are 3128, 3246, 2479, 8085, 9090, 9415, 1080, and 9000 so far. ...
119.188.7.31 - on going Port Scan
Firewall tracked an IP port scanning our external address for most of the ngiht - Starting a New Port Scan every 4 sec - this has happened before - actually shuting down the older unit - but not any m...
193.43.134.114 - Infostealer Snifula.B HTTP Activity
Every time I get on the internet, this IP address Port Scans my computer. This occurs every time I switch to another webpage. It shows up in Norton Protection Center 2008. Norton placed the IP address...
89.187.37.106 - Infostealer Snifula.B HTTP Activity
Every time I get on the internet, this IP address Port Scans my computer. This occurs every time I switch to another webpage. It shows up in Norton Protection Center 2008. Norton placed the IP address...
66.35.46.194 - Ports 33436 and 33437
Apr/14/2010 19:56:40 Drop UDP packet from WAN 66.35.46.195:10596 65.25.237.67:33436 Rule: Default deny
Apr/14/2010 19:56:35 Drop UDP packet from WAN 66.35.46.195:10596 65.25.237.67:33436 Rule: De...
221.192.199.35 - Multiple IPs, all originate in Beijing
firewall detected port scan attack on 4/13/10 at 9:35PM EST. several other IP addresses also originating from this providence in beijing have either tried a DoS or a DNS cache poisioning attack....
221.192.199.48 - Getting scaned repeatedly by
This person\\\'s name is Kong Lingfei. He is located somewhere in China, just west of Beijing (? - spell). I located him using : IP-address.com . It turns out this \\\"Mo****F****** is working in ta...
221.192.199.48 - Getting scaned repeatedly by
This person\'s name is Kong Lingfei. He is located somewhere in China, just west of Beijing (? - spell). I located him using : IP-address.com . It turns out this \"Mo****F****** is working in tandom...
222.45.112.59 - Read this!
UPDATE: I decided to screw with this hacker\'s IP and started scanning ALL of their ports in fragments. To add to their confusion I use a VPN and kept changing IP\'s while I was doing it to send a mes...
221.192.199.48 - Read this!
I can't find the same thread with the IP that keeps scanning me but wanted to share some info you might find useful. I've been scanned by 222.45.112.59 every day, every hour for awhile. I launched a l...
222.45.112.59 - Many scanned as well daily
I've been using Comodo firewall and appears it is blocking all of the port scans. It wasn't until I really started looking into my own security that I noticed the 222.45.112.59 IP constantly every day...
221.192.199.48 - port scan attacks
i keep getting port scans from this ip address it is always blocked but is still an unwanted intrusion can i stop them anyway?...
66.196.65.168 - 66.196.65.168 a bunch of wankers assholes!!!
2/10/2010 10:32:16 PM 66.196.65.168 Subnet blocked for 60 min SCAN (46275, 46787, 46531)
2/10/2010 10:32:15 PM 66.196.65.170 Subnet blocked for 60 min SCAN (46019, 47299, 45763)
2/10/2010 10:32:15 P...
221.192.199.48 - No Action from 221.192.199.48 abuse site - suggest PING flood
These jerks won\\\'t quite.
I suggest a multihost, coordinated PING flood of 221.192.199.48. Simple, but highly effective if several hundred hosts start doing it right now....
222.45.112.59 - Multiple Scans daily
Receiving continous Port Scanning daily from this IP. Examples of Ports: 9415,3246,8085,2479,1080. As in prior complaints, it is being managed by my Firewall as well as Banned...
98.174.29.24 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.147 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.144 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.59 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.83 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.9 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.72 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.88 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.48 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.35 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.24 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits. ...
221.192.199.48 - consistent daily mutiple attempts at penetration
this ip 221.192.199.48 shows up in my router firewall logs and Commodo firewall logs daily , multiple instances , repeated in quick succession 3x/sec tcp probes every 7 minutes from thier port 12200 t...
221.192.199.46 - consistent daily mutiple attempts at penetration
this ip 221.192.199.46 shows up in my router firewall logs and Commodo firewall logs daily , multiple instances , repeated in quick succession 3x/sec tcp probes every 7 minutes from thier port 12200 t...
221.192.199.46 - Scanning following ports every few minutes...
Filling up my firewall log with these blocked requests:
[INFO] Sat Apr 03 05:59:49 2010 Blocked incoming TCP connection request from 221.192.199.46:12200 to ip:3246
[INFO] Sat Apr 03 05:59:49 201...
221.192.199.35 - Ports Scanned and Amplitude Modulation
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.35
Time at last attempt : 3/30/10 04:46:10 PM
Number ...
193.120.212.47 - UDP Port scans every 4 minutes
This IP has started port scans on my network 2 days ago. My logs are full of scans from this IP every 4 minutes on different UDP ports....
63.138.203.17 - Port Scan Into Smurf Aplification attack
Weird thing this morning my sonic wall get reset at at 8:00 a.m. est. not even 2 minutes later we get a port scan from IP: 63.138.203.17, on this same network in the same connection we then get a Smur...
222.136.98.98 - Portscan from 222.136.98.98
Yesterday and today my Bitdefender's firewall have blocked some port scan from IP 222.136.98.98.
I hope someone will stop him....
216.240.129.237 - port scanning every 5-15 seconds
every 5-15 seconds this ip address scans my port, out of the blue it just happened....
222.186.25.29 - port scanning - constant connection attempts
122.227.164.71 keeps trying every port imaginable, trying to find a way to make a connection through my router....
66.235.184.210 - Port Scanning
107 port scans on ports 53 and 80 over a course of 6 hours and 54 minutes. All scans rated "high" by ZoneAlarm....
221.192.199.46 - Scanning following ports every few minutes
Not sure how long this has been going on.
[INFO] Tue Jan 12 20:46:18 2010 Blocked incoming TCP connection request from 221.192.199.48:12200 to Port :2479
[INFO] Tue Jan 12 20:36:53 2010 Blocked...
66.35.46.193 - scanning
he keeps scanning from his port 10524 and keep it going on for a while, firewall is stopping him though...
192.168.1.114 - port scan attempts.
MANY port-scan attempts. All blocked by Bitdefender thankfully....
221.192.199.48 - several attempts at scanning local ports on my PC
Norton Internet Security Suite prevented inbound TCP connection from 221.192.199.48 targeting my local service ports: (2479)(3246)(8085)...
222.215.230.49 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
61.183.15.9 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
221.192.199.35 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
221.195.73.86 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
222.186.25.29 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
122.227.164.71 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
115.89.24.180 - trying to attack through firewall
=>Found attack from 115.89.24.180.
Source port is 12200 and destination port is 3246 which use the TCP protocol.
=>Found attack from 115.89.24.180.
Source port is 12200 and destination port is 8...
89.148.38.149 - atemp made to scan my computer
this ip address atemped to search my pc for open ports ...
81.208.123.221 - Scanning my System by sending large amount of Various TCP/IP Packet
My Security stopped and displayed 12 attempts to access within 5 minutes. Stating that this IP is attempting to Scan by sending large amount of Various TCP/IP Packets and secure sockets....
67.36.220.70 - TCP NUll Scans Several Times a day.
This ip address continues to be detected by our firewall as scanning our ports. Have sent email, but did not stop the scanning....
124.40.51.150 - I am getting 24/7 UDP port scanning from these IP's.
124.40.51.150
124.40.51.149
124.40.51.147
124.40.51.146
124.40.51.145
124.40.51.143
124.40.51.142
It started on 3/12/10 and it seems to be hitting in a sequence of the scanners IPs with ajoynin...
87.0.40.124 - Portscans IP 87.0.40.124
3 Portscans from Italy on my router:
No. Time Source IP DestinationIP Note
1|03/14/2010 22:59:31 |87.0.40.124:2538 |84.245.32.12:6662 |ATTACK
ports scan TCP
End of Alert
No. ...
141.223.23.36 - Port Scanning & Brute Force FTP Login Attempts
Looks to be a script setup to find IPs where port 21 is open, then it attempts to brute force/guess Administrator passwords. Thankfully remote administration is disabled for my server. The attempts se...
222.136.98.98 - Portscans van 222.136.98.98
Yesterday and today my firewall blocked 4 portscans from IP 222.136.98.98 on my port 6000. As I read i'm not the only one. I wish I could get that chinese in my hands......
188.243.250.101 - Many attempts to access my Ports
Unable to ID what Country this IP is coming from. My software reports 16 attempts within 45 minutes to access my Ports....
122.227.164.71 - looking for http port 8000 /intl/zh-CN from 122.227.164.71
Looking for web based protocol on my port 8000. Obviously the wrong protocol yet they found it....
115.89.24.180 - scanner
Found attack from 115.89.24.180.
Source port is 12200 and destination port is 8085 which use the TCP protocol. ...
221.195.82.100 - Port Scanning
Total Attacks Blocked 40 252
High Risk 0 0
Med Risk 0 0
Low Risk 40 252
TCP Port Scan Detected, Packet Dropped 40 252 ...
218.207.71.223 - 218.207.71.223......BEIJING CHINA MONKEY
21:50:32 218.207.71.223 Subnet blocked for 60 min SCAN (10243, 16415, 47138, 36895, 14348, 64776, 38175)
...
121.12.107.194 - attack
This ip address has been trying to access my pc. I went to sleep with it on and when i got up my malware protection was telling me it had blocked this I.p. address from accessing my computer 20 times....
221.195.73.68 - Scanning stopped after third report.
Daily port scanning stopped as of 02 March 2010 after third abuse report to Unicom....
194.109.21.230 - port scan
I have tried to contact the provider of this ip and here is their response: That box is proxyscan.xs4all.nl. Every time you connect to one of our irc servers, this box will scan for open proxies which...
222.136.98.98 - port scan from 222.136.98.98
From three month this boy (with the IP 222.136.98.98) scanning my ports. My Firewall block his attacks. My ports was scaned by 222.186.25.125 and 222.186.25.7, too( maybe the same little boy)....
222.215.230.49 - Cyber Warfare
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
119.145.149.38 - Cyber Warfare
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
74.125.19.100 - GOOGLE PORT SCAN IP RANGE....WTF???
02:23:07 74.125.19.100 Detected attack, host not blocked SINGLE_SCAN_PORT (4803)
02:23:07 74.125.87.190 Detected attack, host not blocked SINGLE_SCAN_PORT (4291)
02:23:06 74.125.87.91 Detected attac...
189.127.142.34 - Port scanning HACK
Firewall log:
Mon Mar 8 19:30:47 2010 =>Found attack from 189.127.142.34. Source port is 1837 and destination port is 61043 which use the TCP protocol....
Firewall log:
Mon Mar 8 04:35:12 2010 =>Found attack from 221.192.199.48. Source port is 12200 and destination port is 3246 which use the TCP protocol. Mon Mar 8 04:35:12 2010 =>Found attack from 221...
222.208.183.218 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
58.215.75.62 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sun Mar 7 23:57:19 2010 =>Found attack from 58.215.75.62. Source port is 4982 and destination port is 10000 which use the TCP protocol....
115.89.24.180 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sun Mar 7 21:53:16 2010 =>Found attack from 115.89.24.180. Source port is 12200 and destination port is 3246 which use the TCP protocol....
74.69.105.64 - uninvited port probe
Sun Mar 7 14:12:34 2010
=>Found attack from 74.69.105.64.
Source port is 60864 and destination port is 443 which use the TCP protocol....
71.36.188.21 - uninvited port probe
Sun Mar 7 12:12:21 2010
=>Found attack from 71.36.188.21.
Source port is 46053 and destination port is 51215 which use the TCP protocol.
This is from my security log on my router....
115.89.24.180 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sat Mar 6 23:05:23 2010 =>Found attack from 115.89.24.180. Source port is 12200 and destination port is 8085 which use the TCP protocol. Sat Mar 6 23:05:23 2010 =>Found attack from 115...
61.14.72.182 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Fri Mar 5 17:07:03 2010 =>Found attack from 61.14.72.182. Source port is 2278 and destination port is 5900 which use the TCP protocol....
118.169.207.62 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Mar 4 17:34:16 2010 =>Found attack from 118.169.207.62. Source port is 40163 and destination port is 25 which use the TCP protocol. ...
221.195.73.86 - Just cut the chinks off...
I have various port scanning going on from this primary provider: China-Network-Communications-Group China Network Communications (CNC Group)
Just find the main line and cut the chinks off until th...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
61.183.15.9 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
204.236.206.235 - Possible Bot
Host ISP: AMAZON.COM INC
Host Name: ec2-204-236-206-235.compute-1.amazonaws.com
.
Firewall log:
Wed Mar 3 15:49:06 2010 =>Found attack from 204.236.206.235. Source port is 29046 and destinatio...
221.192.199.46 - port scanning every 5 minutes
Like the other report, firewall is dropping connections from this IP with origin port 12200 to either 3246 or 8085 internal ports. The pattern is repeating every 5 minutes filling the logs....
200.57.68.15 - Wetback Hacker or Bot Net Dupe?
Firewall log:
Tue Mar 2 17:07:49 2010 =>Found attack from 200.57.68.15. Source port is 1816 and destination port is 5900 which use the TCP protocol. ...
218.4.58.82 - 218.4.58.82 PORT SCAN CHIPMUNK
23:43:05 218.4.58.82 Subnet blocked for 60 min SCAN (13568)
...
190.34.74.210 - Central American MONKEY MONKEY MONKEY
Firewall log:
Tue Mar 2 14:30:12 2010 =>Found attack from 190.34.74.210. Source port is 33410 and destination port is 22 which use the TCP protocol....
58.221.34.18 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
201.160.123.211 - Wetback Port Scanner
Firewall log:
Sun Feb 28 23:23:54 2010 =>Found attack from 201.160.123.211. Source port is 1161 and destination port is 34365 which use the TCP protocol.
...
65.55.50.85 - Port Scanning
PORT SCANNER ATTACK detected from 65.55.50.85. Source port is 62423, and destination port is 8000 which use the TCP protocol...
121.214.200.159 - 121.214.200.159 Port scan successfully blocked the bastard
121.214.200.159 Port scan successfully blocked the bastard...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sat Feb 27 22:36:54 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 8080 which use the TCP protocol. Sat Feb 27 22:36:54 2010 =>Found attack from 2...
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
190.43.245.118 - Peruvian FLAKE!
Firewall log:
Fri Feb 26 15:22:00 2010 =>Found attack from 190.43.245.118. Source port is 2065 and destination port is 23 which use the TCP protocol....
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
202.108.254.228 - Asian MONKEY MONKEY MONKEY MONKEY
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
93.186.118.142 - multiple DOS attempts on multiple ports
Tue, 2010-02-23 23:26:03 - TCP Packet - Source:93.186.118.142,3611 Destination:88.79.124.196,7474 - [DOS]
Tue, 2010-02-23 23:26:04 - TCP Packet - Source:93.186.118.142,3565 Destination:88.79.124.196,...
221.192.199.35 - Asian MONKEYS MONKEYS MONKEYS MONKEYS
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.35 - Asian MONKEYS MONKEYS MONKEYS MONKEYS
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
80.239.242.252 - 80.239.242.252
Hostname: global-turbo-1-lvs-seele.opera-mini.net
ISP: TeliaSonera AB
Organization: Opera Software ASA
Proxy: None detected
Type: Broadband
Assignment: Static IP PORT SCAN01:55:37 80.239.242.252 ...
61.163.6.227 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Mon Feb 22 19:54:20 2010 =>Found attack from 61.163.6.227. Source port is 6000 and destination port is 1433 which use the TCP protocol.
...
217.132.88.100 - Have a Bagle and some Lockes you knikajou!
Firewall log:
Mon Feb 22 16:30:15 2010 =>Found attack from 217.132.88.100. Source port is 10396 and destination port is 44566 which use the TCP protocol....
93.186.118.142 - Port scanning attack
on 02/20/2010 at 11:12:47 this IP was logged 13 times in my router: ports scan TCP 93.186.118.142 ATTACK.
...
221.192.199.48 - ISPs just need to do an upstream block
I wish ISPs and major providers would take the hint that there's nothing of value coming from this IP address and it's cohort 221.192.199.46 and block it up stream. Yes it's drastic, but since they've...
61.183.15.9 - Asian Monkey Monkey Monkey Monkey Monkey
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.48 - chink keeps scanning my ports
Why are these jerks scanning my ports? I allowed my neighour access to my internet network and now all of a sudden I get these awful breed of people trying to steal identity. Shut them down. Stop wast...
174.129.122.100 - Port Scanner
Firewall log:
Sun Feb 21 15:20:31 2010 =>Found attack from 174.129.122.100. Source port is 32386 and destination port is 5900 which use the TCP protocol....
221.192.199.35 - 221.192.199.35 Scanning port 80, 8080, 8443
This IP along with other China based IP showed up in Router log to be trying to access ports 80, 8080 and 8443....
93.186.118.142 - DOS attempted on port 7878
DOS Attack on port 7878 failed as detected by firewall. Message from firewall: TCP Packet - Source:93.186.118.142,3609 Destination:84.58.16.119,7878 - [DOS]...
221.192.199.35 - This site has been scanning my camera ports
We have several IP cameras at our business and 221.192.199.35 has been scanning our ports 8080 and 8081...
221.192.199.35 - This site has been scanning my camera ports
We have several IP cameras at our business and 221.192.199.35 has been scanning our ports 8080 and 8081...
221.192.199.35 - This site has been scanning my camera ports
We have several IP cameras at our business and 221.192.199.35 has been scanning our ports 8080 and 8081...
66.165.164.254 - Puerto Rican MONKEYS!
Attacking From Miami, FL
Firewall log:
Sun Feb 21 01:41:53 2010 =>Found attack from 66.165.164.254. Source port is 27381 and destination port is 5900 which use the TCP protocol....
188.134.1.141 - Russian Hacks!
Firewall log:
Sat Feb 20 20:34:25 2010 =>Found attack from 188.134.1.141. Source port is 3067 and destination port is 4899 which use the TCP protocol....
221.192.199.48 - Asshole chink keeps scanning my ports
See numerous chink IP addresses in my logs every time I look. This particular sh!thead (+/- a few numbers on the last IP octet) has been scanning for at least 5 hours now. Dumb@ss keeps scanning the...
90.58.44.157 - Freaking Frogs!
Firewall log:
Sat Feb 20 17:58:57 2010 =>Found attack from 90.58.44.157. Source port is 1771 and destination port is 34365 which use the TCP protocol....
217.58.115.114 - Hacker WOPs
Firewall log:
Sat Feb 20 15:42:19 2010 =>Found attack from 217.58.115.114. Source port is 4526 and destination port is 32000 which use the TCP protocol.
...
24.87.34.195 - Scanning and DOS attacking my ip
am receiving alot of dos attacks in all my ports on my router......
90.58.44.157 - Freaking Frogs!
Firewall log:
Fri Feb 19 16:55:58 2010 =>Found attack from 90.58.44.157. Source port is 3547 and destination port is 34365 which use the TCP protocol.
...
98.246.22.77 - 98.246.22.77- Newton or Oregon, Portland spoofed IP????
03:50:14 98.246.22.77 Subnet blocked for 60 min SCAN (54770, 2035, 14323)
those IP are scanning ports from Europe daily on this net range so i will call Chinese to spank them ALL!!!!!...
65.126.184.164 - 65.126.184.164 COLORADO DUMBASS HACKER
03:49:47 65.126.184.164 Subnet blocked for 60 min SCAN (21750, 26102, 31990)
wtf is going on with those sleezy yankee worms????...
62.39.109.24 - Haven't done anything really, yet
Have been trying to access my FTP server without any username and password....
130.94.69.111 - Haven't done anything really, yet
Have been trying to access my FTP server a few time without any username and password....
66.240.231.154 - Monkeys! Monkeys! Monkeys! Monkeys!
Amature Attack on Port 80...
Firewall log:
Thu Feb 18 03:05:05 2010 =>Found attack from 66.240.231.154. Source port is 17272 and destination port is 80 which use the TCP protocol. ...
61.183.15.9 - Asian Monkey Monkey Monkey Monkey
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
222.208.183.218 - Port Scaning
17.02.2010 22:24:16
222.208.183.218 SCAN (16415, 36895, 14340)
17.02.2010 21:14:21
222.208.183.218 SCAN (16415, 36895, 14340)
17.02.2010 19:43:44
222.208.183.218 SCAN (16415, 36895, 1434...
222.136.98.98 - more Port scan from 222.136.98.98
Since December I have experienced more than 30 intrusion attempts of the Chinese 222. 136.98.98 fortunately blocked by my firewall...
62.146.210.52 - 62.146.210.52 AVIRA HEADQUARTERS PORT SCAN 2 TIMES
General Information
Hostname: www1.avira.com
ISP: IP Partner
Organization: Avira GmbH
Proxy: None detected
Type: Corporate
Blacklist:
Geo-Location Information
Country: Germany
State/...
62.146.210.52 - 62.146.210.52 AVIRA HEADQUARTERS PORT SCAN
General Information
Hostname: www1.avira.com
ISP: IP Partner
Organization: Avira GmbH
Proxy: None detected
Type: Corporate
Blacklist:
Geo-Location Information
Country: Germany
State/...
222.208.183.218 - port scanning
Constant port scanning. Reported twice to their service provider to no avail....
92.30.36.138 - 92.30.36.13- north u.k PORT SCAN
18:08:17 92.30.36.138 Subnet blocked for 60 min SCAN (22013, 27645, 31229)
all the bastards are from U.K AND USA....i will bann you forever ...
89.144.195.33 - Vienna 89.144.195.33
14:42:27 89.114.195.33 Subnet blocked for 60 min SCAN (10221, 17389, 26861)
another port scan another jerk blocked...
64.13.192.122 - 64.13.192.122 CULVER CITY port scan
14:34:54 64.13.192.122 Subnet blocked for 60 min SCAN (61164, 60908, 30189)
SUCKERS......LOL...
67.228.100.146 - Every Day an attack by them
It's not the first attempt, now I am going to do everything to get them down....
75.72.178.147 - 75.72.178.147 Minneapolis -USA
04:00:22 75.72.178.147 Subnet blocked for 60 min SCAN (5350, 12006, 17126)
ARE THOSE GUYS DUMBASSES????? WHO KNOWS???...
99.228.172.207 - 99.228.172.207 Brampton Canada
PORT SCAN 03:55:56 99.228.172.207 Subnet blocked for 60 min SCAN (39652, 46564, 52196)
......i think those guys are in vain trying to hack me LOL...
63.160.235.197 - PORT SCAN
PORT SCAN FROM THIS BASTARD 2 TIMES IN 5 MINUTES , IP IS BLOCKED :P.....I WILL SEND YOU POLICE HOME MTF.....:p02:56:41 63.160.235.197 Subnet blocked for 60 min SCAN (2260, 16596, 30676, 44244, 59860, ...
219.238.46.170 - Yet AGAIN... Asian Monkeys!
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.195.73.86 - AGAIN--- Asian Monkeys!
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
83.136.12.22 - nmap null scan attacks
repeated..about 3-4 a day nmap null scan attacks are blocked by norten...
221.195.73.86 - Asian Monkeys!
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sun Feb 14 02:03:28 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 7212 which use the TCP protocol. Sun Feb 14 02:03:28 2010 =>Found attack from 2...
112.72.212.5 - Korean MONKEY MONKEY MONKEY MONKEY
Firewall log:
Fri Feb 12 19:53:38 2010 =>Found attack from 112.72.212.5. Source port is 40132 and destination port is 21 which use the TCP protocol....
221.192.199.48 - 221.192.199.46 scanning ports 8000 and 8085
I'm seeing repeat scans of ports 8000 and 8085 from IP address 221.192.199.46. It seems to scan my IP addresses about once every few minutes. Usually SYN scans.
A sample log is listed below.
...
218.61.126.21 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Feb 11 20:15:11 2010 =>Found attack from 218.61.126.21. Source port is 6000 and destination port is 2967 which use the TCP protocol....
174.129.136.236 - Hacker MONKEY
Firewall log:
Thu Feb 11 17:29:48 2010 =>Found attack from 174.129.136.236. Source port is 7265 and destination port is 5900 which use the TCP protocol....
221.214.140.228 - The Asian MONKEY again...
Firewall log:
Thu Feb 11 16:40:42 2010 =>Found attack from 221.214.140.228. Source port is 6000 and destination port is 2967 which use the TCP protocol....
118.161.248.236 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Feb 11 13:48:08 2010 =>Found attack from 118.161.248.236. Source port is 1154 and destination port is 25 which use the TCP protocol. ...
