Port Scanning
58.218.199.250 - 58.218.199.250 intrusion
there\'s port scanning back to back from 58.218.199.250 IP, what can be done to stop this intrusion? not interested, go away. It should be illegal...
58.218.199.58 - Port Scanning attack
This is annoying. I started getting warning from my virus scanner about
Port scanning attack 58.218.199.58 but also
58.218.199.250 and 58.218.199.147
Must be same source
...
200.144.31.37 - udp
uhhh lol
CIA PROC. DE DADOS DO ESTADO DE S PAULO- PRODESP
idk anything with that 3 letter word is screwed. port scanner caught it... i blog heavy but still wow??...
207.200.59.179 - DOS Attack: ACK Scan
This is a mess. Started like a day or so after I began hosting a minecraft server for a friend. Either the friend or the friend\'s brother logged into the server nearly immediately upon me giving the ...
58.218.199.58 - 58.218.199.58
We have been getting portscanned by this IP for a long time. I\'ve complained about it on other sites. Can anything even be done? ...
58.218.199.147 - use software against 58.218.199.147
for all you guys complaining about constant intrusion from 58.218.199.147, use fail2ban. I use it, and if I get so much as a sniff from any ip that\'s trying to intrude they get automatically banned f...
58.218.199.227 - multiple port scanning detect
multiple port scanning detect for several days
source 58.218.199.227:1200 to 192.168.0.2 on port (7212, 8080, 2479, 9000, 2301,1080, 8123, 8090, 7212, 9090, 8000, 8118, 8008, ...)...
58.218.199.58 - multiple port scanning detect
multiple port scanning detect for several days
source 58.218.199.58:1200 to 192.168.0.2 on port (7212, 8080, 2479, 9000, 2301,1080, 8123, 8090, 7212, 9090, 8000, 8118, 8008, ...)...
58.218.199.147 - firewall detect port scanning
multiple port scanning detect for several days
source 58.218.199.147:1200 to 192.168.0.2 on port (7212, 8080, 2479, 9000, 2301,1080, 8123, 8090, 7212, 9090, 8000, 8118, 8008, ...)...
58.218.199.227 - port scanning
Recently recieved alerts from my personal firewall about a port scanning attack on my personal machine. from this IP address occurred:
1:05-1:10 pm AK (Alaska time) time 5/11/2012...
58.218.199.87 - Getting scanned continuous
These guys are relentless. Port scanning all over the place. Land Attacks. China gone bad. Constant alerts. They are trying all sorts of things to hack....
58.218.199.250 - Unending port scans from 58.218.199.250
Can this be stopped. I am getting almost continuous port scans from this IP. Is there any way to stop this. ...
218.15.221.82 - Port Scanning from China
Constant port scanning from china based on my security log in Linux. I will contact my ISP and see if there is anything they can do....
121.88.201.59 - tcp syn scan
May 9 21:46:03 IDS scan parser : tcp syn scan: 121.88.201.59 scanned at least 20 ports at 81.228.153.71. (1 of 1) : 121.88.201.59 81.228.153.71 0044 TCP 44709->976 [S.....] seq 3788983629 win 4096 ...
58.218.199.227 - Port Scanning
I am being port scanned numerous times per day for the last several months from this IP address. Please shut it down! This is annoying!!!...
58.218.199.147 - 58.218.199.147
I\'m getting port scans almost daily from this Chinese IP address, it is annoying and I wish something could be done to stop it, it doesn\'t exactly speak well of China....
62.181.50.144 - кухни на заказ,шкаф купе на Ð&mi
кухни на заказ www.kuhnishkaf.ru.мебÐ&m...
74.208.70.41 - Proxyfire is a nasty scanner
They scan the entire world. Although they say that they just want to find open proxies, they use to scan ports where you wouldn\'t expect a proxy to be active. Therefore, their true intentions are muc...
62.244.25.75 - 62.244.25.75
0:10:43
62.244.25.75
Узел заблокирова...
58.218.199.147 - Detected Port Scanning
My antivirus always detect Scan Port Attack with this adress.... Its annoying and i don\'t know where is it from... any idea? Because i\'m affraid....
58.218.199.227 - Port Scanning
58.218.199.227
Port scanning from the above IP address.
Why don\'t you tell us who you are? Or, are you afraid to? Show your face here and tell us what you want....
188.130.251.9 - Port Scanning 3389
Port Scanning 3389 remote desktop from this IP 10+ times multiple times in one day, only one of many picked up by malwarebytes over many days...
212.153.88.73 - TCP Port Scan
Scanned > 10 ports unsolicited at my IP without permission. This behaviour is indicative of abuse or of compromised/unsecured equipment or malicious intent that needs to be rectified....
58.218.199.147 - PORT SCANNING
HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANNING PORTS HE IS SCANN...
58.218.199.147 - On-going scanning for several days
I am being port scanned multiple times per day for the last several days from this static IP address 58.218.199.147. Please shut it down!...
192.168.1.5 - can't log into 192.168.1.5
Hi, I haven\'t been able to log onto the above site. comes up as unable to connect.
My email address is cathy@travelhome.com.au
If you can assist asap, that would be great.
Thanks,
Cathy Dutch
Travel...
61.183.41.104 - Scanning for SQL Injection
61.183.41.104 - - [29/Apr/2012:02:25:04 +0300] \"GET /w00tw00t.at.blackhats.romanian.anti-sec:) HTTP/1.1\" 302 479 \"-\" \"ZmEu\"
61.183.41.104 - - [29/Apr/2012:02:25:04 ...
58.218.199.147 - hacking
Why is China trying to hack my computer? They should be blocked. They are making a mess out of our internet in America....
222.66.23.98 - 4 port scan attempt
4 times today.
Iako je Mletacka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala je pjesma o njihovom junastvu što ju i danas prenose goli kamen i senjska bura: \&quo...
222.66.23.98 - Port scan atempt
Third time today.
Iako je MletaÄka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala je pjesma o njihovom junaÅ¡tvu Å¡to ju i danas prenose goli kame...
180.169.38.2 - Port scan atempt
Got port scan from this ip. 180.169.38.2
Iako je MletaÄka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala je pjesma o njihovom junaÅ¡tvu Å¡to ju i d...
222.66.23.98 - Port Scanning
I was reading about Project MKULTRA on wiki when i get warning for port scan. Just get the second port scan from this ip when writhing this.
...Cuvaj se senjske ruke......
78.52.204.138 - scanning our firewall
 #  Time Priority Category Message Source Destination Notes Rule
1 05/02/2012 01:39:15.480 Alert Intrusion Prevention Probable port scan detected 78.52.204.138, 64253, X1 50...
58.218.199.147 - 58 218 199 147
Any provider to such persons that are in the habit of attacking other
computers should have his license revoked so others can enjoy the
privacy and freedom provided. This beijing isp is offensive a...
87.56.40.99 - Access Violation from 87.56.40.99 with TCP (port = 21)
Access Violation from 87.56.40.99 with TCP (port = 21) - and other ports.
Repeated logon attempts at port 80, 21 and other ports.
Please take proper action....
209.53.113.223 - We detected a port scan from this IP.
The scan is not authorized. We would like it to stop. Scan your box for possible malware. It could be infected and you not know about it. We\'ll report it to the proper authorities....
58.218.199.147 - Endless port scanning
Same complaint as all on here, endless port scans and DOS, seems like complaints about this ip go back years...not just some teen script kiddie, morelike a govt sponsored hacking factory!...
209.222.129.171 - Firewall Warings for probe2.cirn.net
This host made a portscan on portrange 33449 - 33457 on different hosts, hosted by hetzner.
Be aware, and block his ip.
IP: 209.222.129.171
probe2.cirn.net
abuse using is assumed......
58.218.199.250 - Everydary port scanning info
I get everyday Detected Port Scanning attack 58.218.199.250 information 2 or 3 times a day, It is annoying. Can anyone do with that something? ..ufff...
58.218.199.147 - Multiple port scanning on several days
This IP subnet 58.218.199.x is port scanning on a daily basis and we have blocked it at our border firewall to prevent any more attempts....
61.139.105.163 - Scanning port
250 times a day! stop this! complete pain. This has been going on for over a year... most of the time it is just twice a day, but otherr times it is in the hundreds, as it is to day....
87.56.40.99 - Access Violation from 87.56.40.99 with TCP (port=21)
Access Violation from 87.56.40.99 with TCP (port = 21) - and other ports.
Repeated logon attempts at port 80, 21 and other ports.
Please take proper action....
174.129.112.195 - Null port scan
Apr 23 23:39:57 IDS proto parser : tcp null port (1 of 1) : 174.129.112.195 81.228.154.61 0060 TCP 0->0 [....UP] seq 1548876217 win 31785
Apr 24 00:35:37 IDS proto parser : tcp null port (1 of 1) ...
221.192.199.46 - Subject looking for openings
The site 221 192 199 49 is annoyingly port scanning and an irritant to
many ,according to the reports given.
The provider of such site should see that any licence to enjoy such freedom
of the interne...
66.160.174.179 - 66.160.174.179
april 25th 2012 port scannig from this ip 66.160.174.179
blocked by the antivirus. Hurricane Electric is the internet backbone and colocation provider. why they do that?...
58.218.199.147 - Reachable on rdp
If anyone has the knwoledge or feels like giving it a shot to try and close this server, this bastards are open to reach with remote desktop. It\'s a windows enterprise server 2003. ...
210.51.37.80 - Ongoing port scan
Ip address is continuous scanning ports. Could this be blocked ?
Ip address is continuous scanning ports. Could this be blocked ?
Ip address is continuous scanning ports. Could this be blocked ?...
58.218.199.147 - portscaning my server
Maybe we should nuke em\' ... Seems portscannin is an habit from this IP and a few others with the same Class C IP....
81.52.143.34 - Repeated Port Scanning
Repeated Port Scanning from IP 81.52.143.35
Repeated Port Scanning from IP 81.52.143.34
Repeated Port Scanning from IP 81.52.143.16
Repeated Port Scanning from IP 81.52.143.15
Repeated Port Scanning f...
58.218.199.227 - Repeated Port Scanning
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.147
Repeated Port Scanning from IP 58.218.199.250
Port scanning Port scanning Port scanning Port scanning Port ...
I am noticing a port scan on one of my firewalls, which has generated an alert. TCP scanned port list, 63459, 63459, 63459, 63461, 63459 It appears that my firewall has dropped the connection, but ...
199.30.80.32 - 199.30.80.32 is from Stumbleupon
TCP scanned port list, 50480, 3089, 28586, 36683, 35247, 38199, 9694, 28795, 57700, 17141. Receives LOTS AND LOTS of ports scan from them always coming from this particular ip address. I will block ...
221.192.199.49 - Person is constant doing portscans
Someone is by or via this IP (221.192.199.49) trying to do port scans.
I ask you kindly to prevent this person to do such thing.
I\'ll also report this to our government...
166.205.137.232 - Persistent Port Scanning, ICMP Attacks
I\'ve reported this user numerous times to the ISP contact, nothing has been done to date and persistent port scanning and ICMP requests continue, my network has not yet been compromised, but this 1 I...
60.211.241.253 - detected port scanning
detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port scanning detected port sc...
58.218.199.87 - hackers
many security alerts from this ip addy, mostly port scans and trying to access TCP Port: 6515, TCP scanned port list, 27977, 8085,
9415, 2479, 8008 ...
58.218.199.147 - This IP has been port scanning my address.
My SonicWALL has been picking up port scanning from this IP since 4:11PM EST 4/18/2012. I have had multiple attempts to port scan since then.
Please take appropriate action.
Probable port scan detecte...
192.168.0.198 - Port scan from IP 192.168.0.198
IP:192.168.0.198 is scanning steadily all my ports. High activity is observed the scans were reported by my firewall. What can I do to stop this attac?...
175.180.108.163 - sonic firewall wrnings
we are getting a number of port scans against our firewall, and this is one of the addresses that has been used. is there a way to stop this?...
113.193.203.140 - complaint
hi this ayush gupta from indore madhya pradesh india, my firewall have just detected a port scanning attack from this ip adress 113.193.203.140 thanks ...
58.218.199.87 - Still scanning.
This IP and a few others in it\'s /24 have been scanning our services at a low rate for quite a while now. They keep hitting the same ports again and again, kinda weird. Since many of my customers wil...
208.83.20.130 - Port scan attact
This user is trying to hack into a UC Berkeley Account
This user is trying to hack into a UC Berkeley Account
This user is trying to hack into a UC Berkeley Account...
199.30.80.32 - Hacking?
199.30.80.32 is from Stumbleupon. Why are they port scanning us on ports:
TCP scanned port list, 29852, 50206, 14844, 25294, 27421. Are they hacking?
I\'m going to report this to our isp to see what t...
208.83.20.130 - Port Scan?
This IP showed up on my peerblock logs, trying to connect via ascending port number in what I could only assume was a port scan. Worse, since it started, it just starts over eventually, been hitting m...
79.138.3.84 - Port Scanning TCP:23
Port Scanning TCP:23
16 april 2012 16:05:56 Unrecognized attempt blocked from 79.138.3.84:1951 to 79.139.102.130 TCP:23
16 april 2012 16:05:56 Unrecognized attempt blocked from 79.138.3.84:1951 to ...
201.55.62.10 - Firewall detected an all port scan attack from 201.55.62.10
Our Firewall detected, almost daily, an all port scan attack from 201.55.62.10 ( Cia Proc. de Dados do Estado de S Paulo - Prodesp )Â Â Â
...
58.218.199.227 - Repeated Port Scanning
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Scanning from IP 58.218.199.227
Repeated Port Sc...
Over the last week, I\'ve observed 756 events... trying to connect to ports 6515, 36081, 8085. Being scanned is normal I think... but this has been about 150 packets per day for a week. Just find it...
184.173.195.64 - incoming TCP packet
incoming TCP packet from 184.173.195.64:80 to 94.215.181.229:48301 as SYN:ACK received
There have been several attempts at port scanning of our network by this IP address (184.173.195.64) over the p...
221.1.220.149 - Port scans from this range/ company
Illegal issues that I will complaint to justice. This is a criminal attitude intolerable. This scum deserves punishment by the authorities and cease to harm others. My strongest rejection to such crim...
91.205.41.175 - No need for this
IDS proto parser : tcp data on syn segment (1 of 2) : 91.205.41.175 81.228.156.211 0040 TCP 80->58998 [S.A...] seq 283376389 ack 1 win 65535...
221.192.199.49 - port scanning abusive behavior
yes i would like to stop by and report the following ip being used for scanning ports across the internet leaving dropped packed called in a router log. its been known to communicate with virus infect...
58.218.199.227 - port scanning / hacking
ip has been doing the following activity.
port scanning and dropped packets.
i would like to follow a complaint as ive been getting over 100 scans per day or more and would bet theres a compromised bo...
58.218.199.87 - Port Scanning
I have this in my router log too. No idea why this Chinese IP is trying to access my computer on port 36081 and 6515...
58.218.199.227 - Port Scanning
Over 70 Port scans from this IP address just this weekl
Just a home user, not sure the reason for all the scans
Need three more words....
58.218.199.87 - Blocked incoming TCP connection request
Because my pc had connection issues for the last half year i checked my connection logs in my router and found mainly this ip adress and some others trying to get into my system. It shows \"Block...
72.21.211.191 - ACK Scan and FIN Scan
This site is reported in my netgear router\'s log as having performed two separate DoS attacks using ACK scanning and FIN scanning. This is one of several sites reported for the ACK scans, along with ...
46.127.92.213 - ACK Scan
This site along with several others is reported in my netgear router\'s log as having used ACK scan packets to engage in a DoS attack. This is in addition to a long list of sites being denied ICMP_ech...
64.98.36.135 - ACK Scan
I found this site reported in my netgear router\'s log as having engaged in a DoS attack using ACK scans. This is in addition to a large number of ICMP_echo_req packets from a number of different site...
125.45.109.166 - 125.45.109.166 Port Scanning
ports scan 73, 1080, 2301, 2479, 3246, 6515, 6588, 7212, 8000, 8008, 8085, 8088, 8090, 8118, 8123, 9000, 9090, 9415, 27977, every day several times....
72.21.214.149 - ACK Scan
This site was reported in my netgear router\'s log as having engaged in a DoS attack using ACK scan packets. This is in addition to a long list of ICMP_echo_reqs being denied....
70.109.150.183 - ACK Scan
This site was reported in my netgear router\'s log as having engaged in an ACK scan DOS attack. This is in addition to a long list of sites being denied ICMP_echo_reqs....
72.21.214.149 - ACK Scan
This site was reported in my netgear router\'s log as having engaged in an DOS attack using an ACK scan. This is in addition to a long list of sites being denied ICMP_echo_req pings....
64.98.36.135 - ACK Scan
This site was reported in my netgear router as having made a DoS attack using ACK scanning. This attack was in with a long list of ICMP_echo_reg denials....
66.220.145.46 - No need for this
IDS scan parser : tcp port scan: 66.220.145.46 scanned at least 10 ports at 81.228.156.211. (1 of 1) : 66.220.145.46 81.228.156.211 0323 TCP 443->52504 [..A..P] seq 1903576075 ack 2871079957 win 23...
58.218.199.147 - port scanning
port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port scanning,port...
port scans from this range/ company several times these past months. What does this company do, or is it private individuals trying to glean info by port scanning?!...
189.114.238.196 - Port scaning from few days
11 kwiecień 2012 22:52:16 Unrecognized attempt blocked from 189.114.238.196:37530 to 79.139.102.130 TCP:23
11 kwiecień 2012 22:52:20 Unrecognized attempt blocked from 189.114.238.196:375...
92.52.76.67 - Blocked for porta scaning
11 kwiecień 2012 23:03:02 Unrecognized attempt blocked from 92.52.76.67:11968 to 79.xxx.xxx.xxx UDP:33438
11 kwiecień 2012 23:03:07 Unrecognized attempt blocked from 92.52.76.67:11968 to...
125.45.109.166 - 125.45.109.166 Port Scanning Attack
I\'m getting annoying port scanning attack from this IP address every 1/2 hour. I\'m sick and tired of it and it needs to be stopped at once.
...
58.218.199.147 - proxy judge.php, bandwith stealing
iptables firewall for 2 years and they sill try my domain 30 times a day... my router fw just drops the connection but they persist...
iptables -I FORWARD -s 58.0.0.0/255.0.0.0 -j logdrop ...
58.218.199.147 - Attack from 58.218.199.147 on several ports of my computer
Refport drom Norton Firewall about this computer :
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
10/04/2012 23:46:45,Info,\&quo...
176.227.211.181 - 176.227.211.181 repeated scanning many times per second
Apr 11 06:30:14 host1 named[381]: client 176.227.211.181#27966: query (cache) \'isc.org/ANY/IN\' denied
Apr 11 06:30:14 host1 named[381]: client 176.227.211.181#16996: query (cache) \'isc.org/ANY/IN\'...
58.218.199.227 - SEVERAL ATTACKS IN 3 DAYS
I HAVE HAD OVER 37 ATTACK ATTEMPTS IN THE LAST 3 DAYS FROM THIS ip ADDRESS Please make the harrassment stop now it is freezing up my computer...
91.121.3.57 - Attack on financial institution
Symantec Report:
Somebody is scanning your computer. Your computer\'s TCP ports: 6667, 6662, 6668, 6661 and 6664 have been scanned from 91.121.3.57.
The client will block traffic from IP address 91....
58.218.199.147 - is there no way to stop this
switches IP every few minutes also seen on
58.218.199.250,
221.1.220.149,
please do something about this jerk
^ as above ,really pissing me off,day in day out same thing ,every day....
58.218.199.147 - Port Scanning
I have lot of scan from this adress: 58.218.199.147
SCAN (18797, 10275, 44556, 33315, 16415, 64776, 36895)
Many times by hour !
Why China Telecom (Beijing) scan me ?
...
58.218.199.147 - Endlessly scanning for open ports on my computer
This computer is endlessly searching my computer for open ports and I think that is creepy. I wish they would stop and I am not sure why you have a 25 word minimum for complaints. I was done after abo...
58.218.199.147 - port scan
they just tried to get into my pc through my fire wall, major attack, my eset caught it in a flash, dont know what to do, eset do sth!! ...
66.42.201.218 - Unknown inbound session stopped
I have received about 250 firewall alerts the past two days for this IP on various ports in the 1000-4000 range. Will try about three times on a particular ports, then waits about 30 minutes and moves...
58.218.199.227 - Network attempts
This ip constantly attacks at my network currently kept out by my router, this is pretty rediculous. Can these people not be stopped I have no games running for it be looking for nor do I have any oth...
91.131.3.57 - To jakiÅ› czubek
Nie rozumiem dlaczego ludzie sÄ… tak gÅ‚upi, że starajÄ… siÄ™ atakować innych... oraz nie rozumiem dlaczego tutaj musi być minimum 25 sÅ‚Ã&s...
109.122.223.231 - IP: 109.122.223.231 (IR/Iran, Islamic Republic of/-)
Time: Sat Apr 7 12:23:14 2012 +0400
IP: 109.122.223.231 (IR/Iran, Islamic Republic of/-)
Hits: 11
Blocked: Temporary Block
Sample of block hits:
Apr 7 12:22:56 blade kernel: Firewall: *T...
46.251.237.226 - Port scanning mu router
This IP was doing a port scan on my router. Unable to track origin of IP. I can ping the IP and do tracert. ...
173.194.70.16 - From GOOGLE???
Apr 7 14:16:08 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 61.176.193.225:80 to 77.86.194.26:50815
Apr 7 14:18:18 HackAttack: [SPI:Illegal connection state attack] TCP ...
61.176.193.225 - Try's to find open port to my LAN.
Constant port scanning, gets anoying. Asshole has been trying for days.
Latest firewall alert.
Apr 7 14:16:08 HackAttack: [SPI:Illegal connection state attack] TCP packet from [nas0] 61.176.193.225:8...
125.45.109.166 - 125.45.109.166 Port scanning
From 221.192.199.49 - 69 packets to tcp:
(73,1080,2301,2479,3246,6515,6588,7212,8000,8008,8085,8088,8090,8118,8123,9000,9090,9415,27977)
Port scanning Port scanning Port scanning Port scanning Port ...
58.218.199.227 - Port scanning
Port scanning my server on several (mainly http(s) related) ports.
63 packets to tcp:
(73,80,1080,2301,2479,3246,5390,6588,7212,8008,8080,8085,8088,8090,8118,8123,9000,9090,9415,27977)
Port scanni...
209.15.236.190 - ZmEu.Vulnerbility.Scanner
date=2012-04-05 time=19:53:31 type=ips subtype=signature pri=alert severity=low carrier_ep=\"N/A\" profilegroup=\"N/A\" profiletype=\"N/A\" profile=\"N/A\" s...
58.218.199.147 - 58.218.199.147
getting this reported by norton free trial 2-3 times a day ,was really worried and paranoid ,feel a bit better it\'s a common attack and it reported here but have installed and scanned 4-5 top free av...
58.218.199.147 - Port Scanning
58.218.199.147 keeps scanning me. ESET is constantly warning me that I am being scanned by this and a few other IPs. It is really pissing me off. This happens multiple times every day....
123.62.24.246 - Port Scanning
Multiple times a day, every day, port scanning reported from my firewall. The IP address is from China IP 123.62.24.246. Tried to query server but no response, Unknown if this was a malicious attempt ...
58.218.199.147 - more port scanning
sent judge.php
agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Not many others seem to see the judge.php request from this ip with the port scan? Perhaps multiple attack strategies?...
58.218.199.147 - Port Scanning
Port ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ScanningPort ...
184.173.195.64 - Intrusion attempt
There have been several attempts at port scanning of our network by this IP address (184.173.195.64) over the past several days. 04-01-2012 to 04-04-2012. ...
58.218.199.147 - Continued Port Scans from this IP.
Get alot of port scans from this IP. and a few others. I think we should all repay the compliment by port scanning them back. or better still.... I think we should all send him a continued Ping of dea...
209.15.236.190 - Port scanning servers in my DMZ
date=2012-04-04 time=04:30:44 devname=AAOMSFW01 device_id=FG300B3910602911 log_id=0419016384 type=ips subtype=signature pri=alert severity=low carrier_ep=\"N/A\" profilegroup=\"N/A\&qu...
77.235.14.13 - Detected Port scanning attack
This person is trying to scan my ports so that he can gain access to my PC. Please try to stop this person from doing this again...
209.15.236.190 - ZmEu.Vulnerability.Scanner
date=2012-04-02 time=20:14:59 devname=FGT60C3G10001974 device_id=FGT60C3G10001974 log_id=0419016384 type=ips subtype=signature pri=alert severity=low carrier_ep=\"N/A\" profilegroup=\"...
58.218.199.147 - Port Scanning attack
My firewall detected a Port Scanning attack from this IP address.
Complaint complete Complaint complete Complaint complete Complaint complete Complaint complete Complaint complete Complaint complete...
58.218.199.147 - 58.218.199.147 misbehaving
at least two or three port scans each day, how can this IP be blocked??? Who ever this is in China is obviously up to no good and should be blocked....
58.218.199.147 - somebody scanns my ports all day long
I complain about this user IP.
This IP scanns my port all day long for months now.
How could I stop this???
Is it a single person or an engine?
Regards
Klaus
Germany...
58.218.199.227 - this IP keeps attacking my PC
this IP keeps attacking my PC. ESET antivirus shows me a popup windows about every 3-4 minutes, 24 hrs a day, 7 days per week.
any one can do anything about this? ...
125.45.109.166 - Port Scan
lert Intrusion Prevention Possible port scan detected 125.45.109.166, 12200, X, hn.kd.ny.adsl 172.16.2.10, 6588, X TCP scanned port list, 27977, 8085,
8088, 73, 312 lert Intrusion Prevention Possible...
58.218.199.147 - found in log in small test server
They attempted to do something, but according to the log if failed whatever it was. Perhaps it was the fact it was a Linux server and php is not functioning....
58.218.199.147 - Trying to Access external Urls
Like everyone else, it\'s still going and trying to get stuff like:
http://www.hardjob.net/proxyheader.php
It\'s very annoying, and so I just moved apache to a different port. No activity after that....
216.218.239.22 - My ports are being scanned
This IP address is scanning my ports and sending phishing emails to get into my federal student loan information. Hurricane Electric is the internet backbone and colocation provider....
88.214.207.38 - Null port scan
IDS proto parser : tcp null port (1 of 1) : 88.214.207.38 81.228.157.171 0040 TCP 0->865 [..AR..] seq 0 ack 1555227793 win 0
No need for this!...
188.116.3.177 - Port Scanning
I gat antivirus warning A port scan was detected Local IP: ... Remote IP: 188.116.3.177.Protocol: TCP ....
Iako je MletaÄka Republika propala, a hrabri senjski vitezovi davno su nestali, ostala...
75.127.150.106 - ANOTHER ASSHOLE SCANNING MY PC
4:16:35 PM Block IN TCP 75.127.150.106 35793 86.127.74.46 210 SYN Blocked by the Attack Detecton component
4:16:32 PM Block IN TCP 75.127.150.106 35793 86.127.74.46 210 SYN Blocked by the Attack Detec...
58.218.199.227 - 58.218.199.227 & 221.192.199.49
Same thing from both address\' what good does complaining about them if no one can do anything about it? Just keep those firewalls up!!
3/23/2012 19:43 Incoming TCP 58.218.199.227 88-DD-20-00-01-00 12...
96.57.7.186 - hundreds of bad logon attempts
logon type 10 from this source address using different ports. logon audit failed attempt. I have hundreds of bad logon attempts from this ip address attempting to compromise the server...
122.224.18.59 - bad logon attempts to server
numerous logon attempts and port scans from this address. The servers event viewer reports hundreds of these at logon type 10 with this source address...
89.149.242.175 - Port Scans
This ip and portscans indicates that you have ie Utorrent running.
Close Utorrent or other torrent software and it will stop asap.
It can be a broken tracker. Can also be some legal department or som...
221.1.220.149 - constant port scanning
Please make it stop.
[LAN access from remote] from 221.1.220.149:12200 to 192.168.1.6:2301 Thursday, Mar 22,2012 01:49:27
[LAN access from remote] from 221.1.220.149:12200 to 192.168.1.6:9415 Thursda...
125.45.109.166 - I"m getting logs of remote access to my LAN
here is the log from my router. Some how it is scanning the ports on my NAS drive.
LAN access from remote] from 125.45.109.166:12200 to 192.168.1.6:8088 Thursday, Mar 22,2012 01:13:37
[LAN access ...
64.14.192.236 - Tons of Alerts
Getting an alert from them literally every couple minutes; it is ridiculous.
Getting an alert from them literally every couple minutes; it is ridiculous.
Getting an alert from them literally every cou...
58.218.199.250 - attack on computer
this as happened a few times now .. . . .. . .. ... . ... ... .. . .. . ...
205.152.150.23 - 205.152.150.23 Port Scanning
Mar 3 2012
Number of security log entries : 1
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.150.23
Time at last atte...
188.116.3.177 - Próba ataku hakerskiego
Mój antywirus podał komunikat że z komputera o IP.188.116.3.177 \"Wykryto atak ze skanowaniem portów\". Pojawia się to od jakiegoś...
148.243.142.18 - Source was scanning our network for VNC
Source 148.243.142.18 was scanning one of our address blocks for VNC Port range 5900-5920, they could have been targeting our colo providers network as they did NOT scan our other address block which...
206.161.121.2 - Malware
My computer keeps trying to contact 206.161.121.2, 206.161.121.4, and 206.161.121.5; but my anti-malware program intercepts the calls. (FILLER FILLER FILLER FILLER FILLER FILLER FILLER FILLER FILLER.)...
58.218.199.227 - Port Scanning me
Multiple port scans today. Not happy.
Why do I need 25 words to post?
Why do I need 25 words to post?
Why do I need 25 words to post?...
209.85.147.106 - phishing
he dit it with more ip\'s same location 66.211.179.158 ihope have managed to block it for now with firewall help us to block him...
216.245.221.163 - Port Scan
A port scan on my IP was reported at 09:26 GMT on 03/17/12 originating from IP 216.245.221.163. This occurred one time only as far as I can establish....
38.101.125.194 - unauthorized access attempts
Several \"Audit Failure\" entries in the Security log for a domain controller. Sample entry:
An account failed to log on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domai...
24.52.21.183 - Attempted Intrusion (assumed).
This IP address has been continually scanning ports on my computer. He/she has been scanning for days; hour upon hour of scanning. j I assume this is an intrusion attempt....
88.190.30.80 - 88.190.30.80
IDS scan parser : tcp syn scan: 88.190.30.80 scanned at least 20 ports at 81.228.157.171. (1 of 1) : 88.190.30.80 81.228.157.171 0060 TCP 43310->6666 [S.....] seq 3304888716 win 5840...
Firewall detected all port scan attack from Internet Protocol (IP) address 208.80.127.4 and is making constant DNS Cache Poisoning Attacks
...
58.218.199.87 - continuous port scanning
these bastards keep pinging my network and my ISP is saying i may be pirating. could be these guys getting into my network and waking my machine from sleep...
93.89.92.20 - attacking mutiple ports
Firewall log:
Mar 10 02:58:30 kernel: PORT SCANNER ATTACK detected from 77.68.36.246. Source port is 8888, and destination port is 3306 which use the TCP protocol.
Mar 13 13:28:30 kernel: PORT SCA...
125.45.109.166 - Intrusion Prevention
16:09:55.704 Alert Intrusion Prevention Possible port scan detected 125.45.109.166, 12200, X1, hn.kd.ny.adsl xxx.xx.x.xx, 8088, Xx TCP scanned port list, 27977, 8085,
9000, 2301, 8118 16:09:55.704 Al...
89.149.242.175 - 100 attemts a minute
peerblock is blocking about 100 attempts a second from this address. They are fascists, and deserve to live with the pigs. Is this 25 words yet?...
58.218.199.250 - port scanning attack
this IP keeps coming up on my firewall as a port scanning attack, 5x in 24hrs
this IP keeps coming up on my firewall as a port scanning attack, 5x in 24hrs...
148.243.142.18 - Port Scan
I got an alert from our web server\'s firewall about this IP:
03/12/2012 20:56:13.448 - Alert - Intrusion Prevention - Possible port scan detected - 148.243.142.18, 1152, WAN - XXX.XXX.XXX.XXX, 59...
216.245.221.163 - 216.245.221.163
Port scan! From 216.245.221.163:6000 to x.x.x.x, proto TCP (zone V1-Untrust, int v1-untrust). Occurred 1 times.
2012-03-13 01:28:43 alert Port scan! From 216.245.221.163:6000 to x.x.x.x:8023, proto TC...
221.1.220.149 - Another Packet Kiddie gone wild
This person 221.1.220.149 keeps port scanning and port scanning and port scanning every single day and it\'s getting old i am going to have to report this ip to my isp also so they can take it to the...
58.218.199.87 - multiple attempts at trying to gain access
Attack from 58.218.199.87 on TCP port 12200 and destination port is 6515 knocking connection offline with this flood and it\'s annoying as hell if this doesn\'t stop going to have to go to my isp and ...
58.218.199.147 - Hacker
My firewall is blocking attacks .Port scan attack is popping up throughout the day.58.218.199.147 I have never seen anything like this happen to my computer.If you can help I would really appreciate i...
217.69.177.171 - port scanning
This IP has been logged port scanning over the past few days. Appears to randomly scan UDP ports every few minutes.
10099, 2533, 10022, 31671, 12185, 45007, 7234, 40747, 54961, 44254, 36285, 24670,2...
58.218.199.147 - more chinese port scanning
regular incoming scans from port 12000 to a range of 73,2479,3246,1080,8008,7212, 8088,8118,9415
switches IP every few minutes also seen on
58.218.199.250,
221.1.220.149,
please do something about ...
58.218.199.227 - 58.218.199.227
Port scan @ 10/02/2012 8:42 Australian WST. Damned if I understand, or have any inkling, of why Beijing is interested in a insignificant router in a residential area!...
58.218.199.147 - Very Annoying - When Blocked it disables internet connection
Category: Firewall - Activities
Inbound TCP connection from 58.218.199.147, local service Port http-proxy-1(8088) .
Inbound TCP connection from 58.218.199.147, local service Port http-proxy-1(8088...
216.171.102.18 - 216.171.102.18 ASSHOLE PORT SCANNER
1:11:02 AM Block IN TCP 216.171.102.18 40121 86.127.74.46 57910 SYN Blocked by the Attack Detecton component
1:11:02 AM Block IN TCP 216.171.102.18 40804 86.127.74.46 26649 SYN Blocked by the Attack D...
58.218.199.227 - 58.218.199.227
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port scanning
58.218.199.227 port ...
189.1.162.6 - relentless port scanning
this is only a tiny sample...
[00001] 2012-03-11 06:38:42 [Root]system-critical-00441: ICMP ping id=0! From 189.1.162.6 to 207.67.12.34, proto 1 (zone Untrust, int untrust). Occurred 1 times.
[0000...
58.218.199.147 - continuous attempts of port scanning
hack from china(?) constantly scanning my pc for open ports. It\'s about time someone sent
in seal team six!!!!! Lets get this bastard!!!! A little daylight between his ears will benefit everyone.
...
208.248.77.132 - Brutal portscanning
Been performing port scanning for days now, often followed by flooding the router with incoming traffic. Scanning several addresses in our subnets. This is by no means normal traffic....
58.218.199.227 - Da Do, Da Do"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 58.218.199.227
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Do Da, Do Da"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - " %(#%#&*$(&''
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 3/9/12 03:54:12 PM
Number of po...
58.218.199.227 - "Subject is Empty"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 58.218.199.227
Time at last attempt : 3/9/12 10:34:41 AM
Number of ports that were scanned: 5
Highest port : 8080
Lowest port : ...
98.126.118.61 - portscan
Attempted to connect to multiple ports and ip addresses with a source port of 80.
Packet Bad Length Packet Bad Length 1250 0 S230 0 0 98.126.118.61:80 osIdSource=unknown osRelevance=relevant osType=u...
58.218.199.147 - Continuous attempts at port scanning.
I\'m getting continual attempts at port scanning from IP address 58.218.199.147 please close down this IP address or weed out the jerk who is causing the problems.
...
93.146.64.162 - intrusion 93.146.64.162
This ip is only present in my pc for intrusion, i don\'t know who is and what is the matter. But I know that in this days I have some trouble with trojans.
thanks ...
58.218.199.227 - eset nod32 advises of port scanning attack from this ip
most likely a script kiddie port scanner failing to get by eset nod32 and most likely failing at like. and he\'s from china. loser....
222.186.17.160 - trying to connect to my desktop
the chink is trying to connect to my 3389 portthe chink is trying to connect to my 3389 portthe chink is trying to connect to my 3389 portthe chink is trying to connect to my 3389 portthe chink is try...
58.218.199.147 - Port Scanning
Port Scanning And Scanning my siteweb
[Mon Mar 05 XXXX] [error] [client 58.218.199.227] client denied by server configuration: /www/proxyheader.php
[Mon Mar 05 XXXX] [error] [client 58.218.199.147] cl...
184.82.73.39 - Portscan detected
The host is defenitely compromised. Revrse DNS record does not correspond to the hostname. The server tries to do port scanning and connections to the port 8090/tcp...
94.102.55.122 - port scanning
94.102.55.122 (Type: outgoing, Port: 49585, Process: iexplore.exe) i believe this is a scan port and i ask that you examine the site. thank you...
58.218.199.147 - Frequent Portscan
Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Fr...
58.218.199.227 - phishing, or other fraud
Is 58.218.199.227 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud? Report the abuser now!
Somebody is scanning your computer.
Your computer\'s TCP ports:
have been s...
85.25.109.220 - 85.25.109.220 german fagg scanning!!!!!!!!!!!!
12:31:09 AM Block IN TCP 85.25.109.220 64695 86.127.74.46 23 SYN Blocked by the Attack Detecton component
12:31:03 AM Block IN TCP 85.25.109.220 64695 86.127.74.46 23 SYN Blocked by the Attack Detecto...
183.181.217.246 - 183.181.217.246 Japanese faggot scanning
12:35:36 AM Block IN TCP 183.181.217.246 29741 86.127.74.46 1234 SYN Blocked by the Attack Detecton component
12:35:34 AM Block IN TCP 183.181.217.246 40392 86.127.74.46 1234 SYN Blocked by the Attack...
72.130.92.29 - FIN Scan
[DoS Attack: FIN Scan] from source: 72.130.92.29, port 62792, Saturday, March 03,2012 01:23:02
[DoS Attack: FIN Scan] from source: 72.130.92.29, port 62588, Saturday, March 03,2012 01:21:01
[DoS Attac...
58.218.199.147 - Frequent Portscan
Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Fr...
221.1.220.149 - Frequent Portscan
Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Frequent Portscan Fr...
17.173.254.223 - Scanning
Scanning Port 16403 Apple Computer. Several times a day. Any comment? Thank you. Nmap scan report for 17.173.254.223
Host is up (0.056s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE V...
74.94.179.17 - 74.94.179.17
8:01:56 PM Block IN TCP 74.94.179.17 1820 86.127.74.46 143 SYN Blocked by the Attack Detecton component
8:01:50 PM Block IN TCP 74.94.179.17 1820 86.127.74.46 143 SYN Blocked by the Attack Detecton co...
184.82.73.39 - port scan detected by my eset 5 !
the i.p address 184.82.73.39 trying to intrude my network , but my eset did block it , what tools do I have to prevent this in the near future ?...
85.25.109.220 - 85.25.109.220 GERMAN FAGG SCANNING!!!!
2:38:22 AM Block IN TCP 85.25.109.220 51346 86.127.74.46 49171 SYN Block Once
2:38:16 AM Block IN TCP 85.25.109.220 51346 86.127.74.46 49171 SYN Block Once
2:38:13 AM Block IN TCP 85.25.109.220 51346 ...
64.20.227.133 - repeated port scanning
Feb 28, 20:14 GMT to 20:35 GMT Several port scanning (port 23, port 25 & port80) for an hour. An other scan at 22:08 GMT.
(jeu. 1. mars 00:21:47 2012)
...
92.52.76.67 - Port Scanning
Time: Wed Feb 29 11:29:51 2012 +0200
IP: 92.52.76.67 (GB/United Kingdom/fcp.lon3.rackspace.net)
Hits: 11
Blocked: Temporary Block
Sample of block hits:
Feb 29 11:27:53 tuana kernel: Firewa...
209.200.154.254 - Portscanning
02/28/2012 13:31:03.896 Alert Intrusion Prevention Possible port scan detected 209.200.154.254, 80, X1 69.42.121.164, 60434, X1 TCP scanned port list, 10776, 56595, 31767, 36359, 14598 ...
58.218.199.227 - 58.218.199.227..
Somebody is scanning your computer.
Your computer\'s TCP ports:
8008, 7212, 5390, and 80 have been scanned from 58.218.199.227..
Dos veces hoy pero se repite todos los dias...
216.245.221.163 - Network Attack from IP [varias_at1_28_2_12]
Dear Sirs,
We are Seyrcom, a Spanish Network and Communications Company, providing network security services to our clients. Our Network Security Operations Center has detected an attack against one ...
221.192.199.49 - port scanning
There are numerous attempt of port scanning on my firewall with the mentioned ip address. Evrytime it is from port 12200 to different ports on my firewall
...
148.243.142.18 - Port Scanning
IP 148.243.142.18 scanned my ports twice over the weekend! . . . . . . . . . . . . . . . ....
46.166.149.118 - 46.166.149.118 Port Scanning
Security alert type : Port Scan
Protocol type : TCP
IP source address : 46.166.149.118
Time at last attempt : 2/19/12 10:29:54 AM
Number of p...
205.152.132.23 - UDP 205.152.132.23
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 2/7/12 12:05:03 PM
Number of po...
50.45.145.146 - USA 50.45.145.146
Security alert type : Port Scan
Protocol type : TCP
IP source address : 50.45.145.146
Time at last attempt : 2/19/12 05:04:13 AM
Number of po...
175.45.25.51 - Hong Kong 175.45.25.51
Security alert type : Port Scan
Protocol type : TCP
IP source address : 175.45.25.51
Time at last attempt : 2/3/12 12:24:35 PM
Number of port...
205.152.132.23 - 205.152.132.23 port scanning
My router said:
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 2/7/12 12:05:03...
85.17.24.101 - port scan
this ip tried to scan the ports of my machines different times. Firewall blocked this and ip is now on my own blocklist. Will see my logfiles ...
221.192.199.49 - "Little Bitch Chink"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/27/12 03:37:27 AM
Number of p...
165.254.32.43 - intrusioon attempts
6:55:47 PM 165.254.32.43 Intruder unblocked IP blocked then unblocked. Appears to be Akamai Englewood Colorodo. Who is this, does this mean they they have by passed a cisco firewall and Agnitum or is...
193.33.237.205 - UKRAINIAN ASSHOLE PORT SCANNER 193.33.237.205
1:18:49 AM Block IN TCP 193.33.237.205 2923 86.127.74.46 8000 SYN Blocked by the Attack Detecton component
1:18:49 AM Block IN TCP 193.33.237.205 2947 86.127.74.46 8080 SYN Blocked by the Attack Detec...
221.192.199.49 - "Haki Saki"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/26/12 08:20:06 PM
Number of p...
221.192.199.49 - "64,000 to Go"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
125.45.109.166 - Port scanning
Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Chiness Port scanning Ch...
221.192.199.49 - "Port Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
109.230.216.250 - GET A LIFE ASSHOLE 109.230.216.250
9:02:17 AM Block IN TCP 109.230.216.250 1414 86.127.74.46 9000 SYN Blocked by the Attack Detecton component
9:02:17 AM Block IN TCP 109.230.216.250 1413 86.127.74.46 4869 SYN Blocked by the Attack Det...
221.192.199.49 - "Rats Nest"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Non-Stop Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
175.45.25.79 - THE SAME CHINESE ASSHOLE LIKE FEW WEEKS AGO 175.45.25.79
12:54:55 AM Block IN TCP 175.45.25.79 12200 86.127.74.46 9000 SYN Blocked by the Attack Detecton component
12:54:54 AM Block IN TCP 175.45.25.79 12200 86.127.74.46 8888 SYN Blocked by the Attack Detec...
184.173.195.64 - Randomly hitting ports with SYN:ACK
This IP has been hitting my DSL line with a large number of SYN:ACK packets. There is no apparent pattern in the port number chosen for each packet....
221.192.199.49 - "China Prowler"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
174.34.177.194 - ASSHOLE PORT SCANNER FROM ARIZONA 174.34.177.194
10:04:45 PM Block IN TCP 174.34.177.194 33199 86.127.74.46 4869 SYN Blocked by the Attack Detecton component
10:04:42 PM Block IN TCP 174.34.177.194 33199 86.127.74.46 4869 SYN Blocked by the Attack D...
221.192.199.49 - "Continuous Harrassment"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "China Peepers"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Chinese Tax Dollars at Work"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "How many ports are there?"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Hello, Is there anybody out there?"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Continuous Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "port by port"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Constant Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 5
Time at last attempt : 2/25/12 1...
71.95.170.26 - Port Scanning
Still port scanning over and over again
Obviously has nothing better to do.
...
221.192.199.49 - "Ongoing"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 5
Time at last attempt : 2/24/12 0...
221.192.199.49 - "Very Consistent"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 10
Time at last attempt : 2/24/12 ...
221.192.199.49 - "Duck & Cover"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Cosmic Debris"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/24/12 0...
221.192.199.49 - "China China China"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/24/12 1...
221.192.199.49 - "Guess"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Non-Stop Scanning"
I intend to post each & every infraction committed by this IP until cessation of this aggesion.
Security alert type : IP Subnet Broadcast Amplification
IP source address ...
58.218.199.250 - 58.218.199.250
looks like a hijacked machine to me
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-23 22:33 CST
NSE: Loaded 0 scripts for scanning.
Initiating Ping Scan at 22:33
Scanning 58.218.199.250 [4 ports]...
221.192.199.49 - Causing Lag Spikes in Game Due to Port Used
Wed, 2012-02-22 02:16:36 - TCP Packet - Source:221.192.199.49,12200 Destination:62.49.7.5,27977 -
[SWTOR 2 rule not match]
Wed, 2012-02-22 11:05:59 - TCP Packet - Source:221.192.199.49,12200 Destinat...
208.46.117.203 - DOS & Port Scanning of our IP
Source:208.46.117.203,3478 Destination:58.6.116.200,62477 - [DOS] UDP Packet - Source:124.40.51.159,3478 Destination:58.6.116.200,62477 - [DOS] UDP Packet - Source:208.46.117.203,3478 Destination:58.6...
221.192.199.49 - "Persistent Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 5
Time at last attempt : 2/23/12 0...
221.192.199.49 - "Persistent Scanning"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/23/12 0...
221.192.199.49 - "Tapping on the Windows"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
IP destination address : 76.227.65.191
Number of attempts ...
221.192.199.49 - "Still There"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 9
Time at last attempt : 2/23/12 0...
58.218.199.227 - port scanning from this ip
port scanning from this ip : 58.218.199.227
port scanning from this ip : 58.218.199.227
port scanning from this ip : 58.218.199.227
port scanning from this ip : 58.218.199.227
port scanning from this ...
58.218.199.147 - Multiple Attempts
This particular IP address was detected by my firewall as attempted to scan my ports. It was blocked and it is trying to hack into my computer....
221.192.199.49 - "Persistent"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 7
Time at last attempt : 2/22/12 0...
221.192.199.49 - "Constant Hack"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 10
Time at last attempt : 2/22/12 ...
86.127.74.46 - portscan TCP Syn
Portscan : ports / 21,22,23,25,114,145,3306
Originating IP: 86.127.74.46
inetnum: 86.127.74.0 - 86.127.74.255
netname: RO-RDS-SB-CABLELINK
descr: Romania Data Systems
descr: Cablelink Sib...
58.218.199.147 - 58.218.199.147
looks like an infected machine
Scanning 58.218.199.147 [1000 ports]
Discovered open port 199/tcp on 58.218.199.147
Discovered open port 23/tcp on 58.218.199.147
Discovered open port 554/tcp on 58....
221.192.199.49 - constant port scans
this address is port scanning my machine perhaps 10 or 15 times per day. Scans are reported from my firewall software. Address is 221.192.199.49. Please note....
58.218.199.227 - Constant Attack
We\'re under a constant attack from this IP address.
We\'re under a constant attack from this IP address.
We\'re under a constant attack from this IP address. ...
221.192.199.49 - Scanning my ports about 10x per day
Scanning my ports about 10x per day
TCP scanned port list, 8090, 2479, 8088, 73, 8008
02/22/2012 02:24:47.912 Alert Intrusion Prevention Possible port scan detected
This email was generated by: Son...
221.192.199.49 - "Endless"
Security alert type : IP Subnet Broadcast Amplification
IP source address : 221.192.199.49
Number of attempts : 8
Time at last attempt : 2/22/12 1...
221.192.199.49 - "Guess Who"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/22/12 09:16:23 AM
Number of p...
221.192.199.49 - "Piss Ant"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/22/12 07:28:30 AM
Number of p...
221.192.199.49 - "Cock Sucker"
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.49
Time at last attempt : 2/20/12 09:58:55 PM
Number of p...
209.222.129.169 - attack
--------Incoming-------
DateTime From IP To Port
[2012-02-21 19:28:49] | From:[209.222.129.169] | Port:[33450] | [Blocked]
[2012-02-21 19:28:51] | From:[209.222.129.169] | Port:[33451] | [Blocked]
[20...
212.54.35.25 - Intrusion attempt, DOS attack, phishing
The log snapshot tells the storry
2012-02-21 14:36:44 [DOS][Block][port_scan][212.54.35.25:53->xx.xx.xx.xxx:51208][UDP][HLen=20, TLen=73]
2012-02-21 14:36:44 [DOS][Block][port_scan][212.54.35.25:...
221.1.220.149 - Continual port scanning and DOS attack
Last twenty four hour we have had repeated attempts to access our network.
How do you stop this malicious behavour?
TCP Packet - Source:221.1.220.149,12200
TCP Packet - Source:221.1.220.149,12200 ...
216.52.242.80 - port scanning and trying to get unauthorized access
since this morning i see alternate ip\'s trying to get access to my machine. i know i daont have the best security around but i see lately more and more blocked attempts to infiltrate my machine, and ...
74.125.31.132 - Google, are you being evil?
Getting varied port scanning from this address for the last few hours.
Some ports being scanned are:
24721, 35373, 52650, 45689, 59545,
38479, 54632, 25645, 33964, 24891,
37147, 31063, 10895, 20875,...
58.218.199.87 - Multiple Scans
From Logs on Router:
Mon Feb 20 10:20:04 2012
=>Found attack from 58.218.199.87.
Source port is 12200 and destination port is 6515 which use the TCP protocol....
120.136.16.4 - Trying to scan my router.
From my security logs:
Mon Feb 20 10:15:59 2012
=>Found attack from 120.136.16.4.
Source port is 2418 and destination port is 5952 which use the TCP protocol.
...
88.208.222.99 - Port scan
IP in question is trying to connect to FTP via port 21 from a range of TCP source ports (41431-50153). Automatically blocked via LFD. Reporting to fasthosts....
70.38.54.89 - alert
this user has scanning my mac from Canada...im in Uruguay, the log in my system points to him(her) and the mac address 002511d711ed, please take an eye on it......
58.218.199.147 - port scanning
hello,
this IP scan my port: 58.218.199.147
IP address region: 22 Beijing
This user is from Beijin, in CHina.
This is really annoyng, can you please do something about that ?
Thanks you in advance.
...
85.17.24.101 - Port scanning and DOS
This IP address is probing all my ports with Port scanning and Dos attacks. Firewalls doing there job. Address belongs to Internet company from The Netherlands....
58.218.199.147 - 58.218.199.250
I port scanned this address till if went offline. Everyone should do this. That\'ll teach them ... Eye for an eye, tooth for an tooth......
85.17.24.101 - Portsentry triggered
Hello, this ip has tried to run a port scan on my server, it was caught by portsentry trying to connect to TCP port 1080...
58.218.199.147 - 58.218.199.250
Multiple port scan from this address on my firewall blocked.
Can\'t we ddos this address ?
Anonymous please help and hack this address (take it out permanently please)...
79.176.195.34 - Israelian asshole port scanner 79.176.195.34
8:51:48 PM 79.176.195.34 Subnet blocked for 60 min SCAN (20480, 47873)
8:51:27 PM 79.176.195.34 Detected attack, host not blocked SINGLE_SCAN_PORT (20480)
IP Address Region: 05 Tel Aviv
IP Address Cit...
58.218.199.147 - Several IP Block Instances
This IP has been attempting to scan us several times. Firewall keeps catching and blocking it, so I extended the block for a little while longer....
209.222.129.169 - DOS attack
Scanning multiple ports searching vulnarabilities for hacking purposes?
Scanned ports: 33442 - 33455
IP range used by this hacker: 209.222.129.169 -178
Part of my router log:
2012/02/15 16:04:08 -- ...
58.218.199.147 - Security Alert
TCP connection dropped - Source:58.218.199.250, 12200, WAN - Destination:, 8080, LAN - \'Possible Port Scan\'
Continuously get reports about this IP address on port scanning various ports....
219.78.210.127 - Port Scanning Attack
ESET Smart Security 5 identified 219.78.210.127 as the origin of a port scanning attack on my machine.
Doubt it\'s malicious activity from the company, probably just piggy backing off their network....
219.38.210.127 - Firewall Detected a port scanning attack
This IP address was registered by ESET Smart Security 5. It detected a port scanning attack from 219.38.210.127 at around 20h00.
Wonder what a Japanese corporation wants with me?...
221.192.199.49 - today twice, Eset told me about port hack
twice today in the past 30min i\'ve had 2 port attacks from 2 address 221.192.199.49 and another 222.192 dont remember the other 2 numbers are the popup closed. considering this is a fresh install, an...
221.1.220.149 - shanning my ports
A user from thid ip address is attepting to scan ports on my pc it is not the first time this ip has attacked me i only found this by installing new security software be aware!!...
58.218.199.87 - Keep gettting port scanned
I\'ve been getting continuous pings scanning for open ports from this IP and several other IPs, but all are from the same server. They aren\'t getting in, but it\'s annoying....
213.108.209.2 - 33
333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG333 SDFSAFD FSD GDFG DSFG DG...
85.19.217.237 - IP attempting to ssh
Failed password for invalid user internet from ::ffff:85.19.217.237 port 41817 ssh2
Invalid user server from ::ffff:85.19.217.237
input_userauth_request: invalid user server
Failed password for inva...
58.218.199.227 - We have 99 complaints about 58.218.199.227
Is 58.218.199.227 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud? Report the abuser now! Is 58.218.199.227 misbehaving (engaging in SPAM, brute-force, DOS attack, phi...
217.69.177.171 - Trying to get in
Getting rejected packets from this IP, trying to do \"something\" on port 52139. No idea what it can be...i am not into filesharing or anything so is a pure attack out of the wild...
95.168.173.155 - 95.168.173.155
SOMEONE AT THIS IP (95.168.173.155)
WANTS TO HACK INTO COMPUTER !
2012/02/11 05:56:33 -0500 HOME COMP IP-BLOCK 95.168.173.155 (Type: outgoing, Port: 52428, Process: ...
175.45.25.87 - ASSHOLE PORT SCANNER FROM HONG KONG
10:59:36 PM Block IN TCP 175.45.25.87 12200 86.127.74.46 1337 SYN Blocked by the Attack Detecton component
10:59:35 PM Block IN TCP 175.45.25.87 12200 86.127.74.46 36081 SYN Blocked by the Attack Dete...
175.45.25.51 - intrusion: Port scan
My Norton Internet Security program detected an intruder with the IP address as 175.45.25.51(12200) on 02/10/2012 at 2:57 Am, made my risk at medium, and they should been shut down for life...
222.208.183.218 - Constant port scanning and probe attempts
remote address 222.208.183.218
remote port 12200
1080 <- 222.208.183.218:12200
8080 <- 222.208.183.218:12200
9090 <- 222.208.183.218:12200
constant port scanning of my router
constant port s...
221.192.199.49 - Detected Port Scanning attack
2/9/2012 5:53:30 PM Detected Port Scanning attack 221.192.199.49:12200 192.168.0.116:8088 TCP
2/9/2012 11:37:16 AM Detected Port Scanning attack 221.192.199.49:12200 173.27.157.166:8123 TCP
2/9/...
221.1.220.149 - Multiple port scanning attacks from 221.1.220.149
2/9/2012 5:58:18 PM Detected Port Scanning attack 221.1.220.149:12200 192.168.0.116:1080 TCP
2/9/2012 10:06:24 AM Detected Port Scanning attack 221.1.220.149:12200 173.27.157.166:6588 TCP
2/9/20...
58.218.199.250 - 58.218.199.250
2/9/2012 6:37:28 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.0.116:2301 TCP
2/9/2012 3:56:16 PM Detected Port Scanning attack 58.218.199.250:12200 192.168.0.116:73 TCP
2/7/201...
58.218.199.147 - 58.218.199.147 running port scans on my network
58.218.199.147 running port scans on my network. Attack coming from Port 12200 of offending IP. My firewall has blocked the attempts, but this could lead to Ping of Deaths or DDOS on other networks....
175.45.25.51 - Port Scan sourced from IP 175.45.25.51
Start from Feb-08-2012, i start seeing numerous port scan activity sourced from IP 175.45.25.51, blocked it. But it is still continued . ...Checked the IP, it is from Hong Kong. ...
206.161.121.3 - Internet attack
This jerk is trying to get into my system port constantly. My firewall stops it but it may fail at some time. It\'s very annoying....
58.218.199.227 - port scanning attacks
I Keep receiveing Port Scanning Attacks. Is there any way to prevent these attacks on my computer? Is there any free softwares out there to help prevent these net work intrusions? last port scanni...
173.194.34.73 - Aggressiv PortScans
The IP is sending to many unrequestet \"ack-syn\" packets with invalid SEQ numbers.
There are also heavy Portscans, nearly once a minute, 5-7 ports variating range.
...
41.135.1.62 - port scanning
bit defender found this trial and i found this site could be helpful and decided to post this complaint
...
after dots is only to make this message 25 words long...
68.94.156.1 - Port Scan Attack
This IP is hitting me every few days or so it says it originates with SBC. If they breach my network, then its game on. ...
203.88.70.76 - scaning
Why is AE Armed Forces Europe, Middle East, & Canada scaning???
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan
...
46.234.116.187 - Scaning
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan
Scanning for some reason? ...
78.141.181.1 - Port scan
Several port scans from 78.141.181.1 on the fire wall logs
ICMP Destination Unreachable Host Unreachable
...
193.107.16.23 - ET SCAN
Scanned by 193.107.16.23
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan
Is there such a thing as a friendly scan? ...
121.101.221.144 - ET SCAN Sipvicious Scan
Being scanned repetedly by 121.101.221.144
ET SCAN Sipvicious User-Agent Detected
ET SCAN Sipvicious Scan
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
Whats a friendly scanner? ...
81.7.71.165 - 81.7.71.165 ASSHOLE PORT SCANNING MY PC
THIS ASSHOLE WAS PORTSCANNING MY PC ON PORT 80 AND 8080 two timesIP Address: 81.7.71.165
IP Address Country: Lithuania (LT)
IP Address Region: 57 Kauno Apskritis
IP Address City: Jonava
IP Postal Co...
122.228.219.172 - china port snooping
[INFO] Tue Feb 07 01:06:07 2012 Blocked incoming TCP connection request from 122.228.219.172:6000 to xxx.xx.xx.xx
[INFO] Tue Feb 07 00:55:24 2012 Above message repeated 1 times
Blocked incoming TCP co...
58.218.199.227 - Port scaning
Port scanning on a regular basis. Constantly have reports from Router that attempts are made by them on a daily basis. Router blocks - but tired of the constant messages from the Router that it atte...
58.218.199.227 - Hacker ass hole cand
He just attemp to scan 5 time my computer i detected him with zone alarm firewall and i tried to replicate by dos attack because he IS a preak...
58.218.199.227 - port scanning attacks
I keep getting port scanning attacks from #58 218 199 227.. I do not like my computer being attacked like this.. Please stop these attacks and see if you can let me know who is doing this thank you...
79.131.104.124 - Attack with port scann detected.
My ESET firewall said \"Attack with port scann detected\" so I just reporing it . . . . . . . . . . ....
221.1.220.149 - HELP
This ip adress is attacking me more then four times by now and I am asking you to to something about it my antivirus is showing me that i am under port scanning attack.My PC is olso slowing down ...
58.218.199.250 - Scan is bouncing from china, but its original source is from Russia
After further investigation on my part, the scan is bouncing from china, but its original source is from Russia.
Secondly, after changing IPs 3 times, port scanning continued, so my IP is being upda...
58.218.199.147 - Bouncing from China, but originally from Russia
After further investigation on my part, the scan is bouncing from china, but its original source is from Russia.
Secondly, after changing IPs 3 times, port scanning continued, so my IP is being upda...
58.218.199.227 - 58.218.199.227
On Wed, 2012-02-01 at 10:12:43 hrs, I suffered a port scan, from the designated ip address. If others are reporting the same source, my little story adds to the picture....
194.145.58.29 - continous udp connections
194.145.58.29 this ip try to connect to various udp ports in 3343? range, 3 to 15 connections per minute.
This is one line example of firewall log
Blocked Prot=17, 194.145.58.29:11695 > *:33438 -De...
221.1.220.149 - Source:221.1.220.149 Destination:86.200.188.228 - [PORT SCAN]
inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadmissible ! inadm...
82.130.102.46 - Enjoy Captcha-free communication
I love you very march, I love you very march? I love yoe and my baby? and all people very march , I love you very march ? I love you very march , I kill you ...
82.130.102.46 - Hide your real IP address in the author field in comments
I love you , I lovr yoy , I love you Michel? oh Michel. Bye, Bye Nina? good bye Mina/ I lovw you with your smalie...
82.130.102.46 - Receive e-mail
I love you very march ? I love you very very murch I like my brother ? I love my baby bey n...
58.218.199.227 - Port Scanning
My router has received repeated Port Scans from this address for several days.
Looking back over my logs I can see that in fact this address has been used for several months....
58.218.199.227 - 58.218.199.227 port sacanning
58.218.199.227 is trying to scan and is very annoying, the good thing my antivirus firewall blocks it
it has been attempting several times a day grrrr!!!!...
175.45.25.51 - Repeatedly port scanning my computer
For the past several weeks this IP has been port scanning my computer. My antivirus software has blocked it. I have requested my network administrator to block this IP address....
217.156.169.195 - ASSHOLE PORT SCANNIG MY PC 217.156.169.195
12:00:47 AM Block IN TCP 217.156.169.195 80 86.127.74.46 49666 FIN ACK Blocked by the Attack Detecton component
12:00:47 AM Block IN TCP 217.156.169.195 80 86.127.74.46 49665 FIN ACK Blocked by the At...
175.45.25.51 - Port scanning attack
My ESET virus program reported \"port scanning attack\" from this ISP on Feb 2 at 8:27am CST. This is the first from this address. Previously, on Jan 23 and 30, I got the same thing from 221...
58.218.199.147 - Port Scanning
I don\'t know whether this a hijacked computer or a bad one but I got several Port Scans from this IP
I don\'t know whether this a hijacked computer or a bad one but I got several Port Scans from this...
67.172.36.98 - Port Scan
kernel: Intrusion -> IN=ppp0 OUT= MAC= SRC=67.172.36.98 DST=67.214.5.222 LEN=56 TOS=0x00 PREC=0x20 TTL=43 ID=22838 DF PROTO=TCP SPT=42391 DPT=23 WINDOW=5840 RES=0x00 SYN URGP=0
there was more in sa...
174.140.145.212 - he's a backdoor man
websql Anonymous
warning page not found 02/01/2012 - 23:23 sqlweb Anonymous
warning page not found 02/01/2012 - 23:23 webadmin Anonymous
warning page not found 02/01/2012 - 23:23 phpmy-admin Anonym...
58.218.199.147 - Port Scanning
Likewise this IP addy keeps scanning my ports. Firewall catches but its really getting old. I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on ...
221.1.220.149 - Porat Scanning
Likewise This IP addy keeps scanning my ports. Firewall catches but its really getting old. I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on ...
221.1.220.149 - Complaint 221.1.220.149
Been port scanning my IP Address for a few days now!!! Likewise I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on my machine....
221.1.220.149 - 221.1.220.149
this IP address continues to scan my computer 24/7 the past month. Very anoying. Forewall is doing its thing...for now.To bad China can not be permanently blocked from the internet....
87.229.24.138 - Port scan
Firewall alert:
Your computer\'s TCP ports:
8000, 443, 8080, and 81 have been scanned from 87.229.24.138.
Several port scans been made recently... very active indeed...
221.1.220.149 - why
16h4,18 gmt
c\'est annormal de se voire scaner ses ports. ca cache des manoeuvres frauduleuses.c\'estc\'est annormal de se voire scaner ses ports. ca cache des manoeuvres frauduleuses
c\'est annormal...
193.107.16.124 - 193.107.16.124/script.js
firefox kept on open 193.107.16.124/script.js, using anti-malware engine helped nothing, but recently the script was reported as malware by avast, searching for help to get rid of this...
2.89.105.26 - attack
m device haked .... and then i recieve the maessage from eset there port scanning attack ....i am not sure what happen...... please help me...
67.100.86.132 - Port scanning
Continuous Port scanning and DOS.
[DoS Attack: FIN Scan] from source: 67.100.86.132, port 2075, Tuesday, January 31,2012 14:43:16
[DoS Attack: FIN Scan] from source: 67.100.86.132, port 2582, Tuesday,...
63.206.102.171 - At it again!
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, 15.46 HOURS.
7th time in the space of 2 months....
58.218.199.227 - Port scan
port scanned me, i got a firewall alert ( I use mandriva linuzx) then i blacklisted them then they scanned me from this adress: 58.218.199.147...
94.75.215.26 - scanning
94.75.215.26 has been scanning all our addresses on random ports for months now. Every day all day. There doesn\'t seem to be any pattern to the ports....
193.107.16.124 - 193.107.16.124/script.js
ESET firewall blocked
Detected Port Scanning attack,
Source 84.218.199.227:12200 Target 10.128.192.7.8088
Source 84.218.199.250:12200 Target 10.128.192.7:73
Source 84.218.199.147:12200 Target 10.1...
63.206.102.171 - Again and again!
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, 15.46 HOURS.
3rd time in the space of 2 months....
195.91.174.161 - Detected Port Scanning attack 195.91.174.161:4916 TCP
Port scanning onTCP.
Complaint must be at least 25 words long. You wrote 4 words.
Complaint must be at least 25 words long. You wrote 4 words.
Complaint must be at least 25 words long. You wrote 4 wor...
77.69.239.163 - Port scan from yellow niggers
getting constant port scan nearly every day from filthy yellow niggers fucking squint eyed filth 58.218.199.227 someone should fucking nuke bejing dirty yellow scum and squint eyed bastards....
58.218.199.227 - attempt to connect
in the reports of my firewall I noticed several dates of attempt to connect by an attack by port scanning:
5-12-2011
4-1-2012 (two times!!!)
10-1-2012
12-1-2012
16-1-2012
20-1-2012 (two times!!
today ...
58.218.199.227 - attack on my computer
my firewall has blocked an attempt from IP adress 58.218.199.227 to enter my computer. Please make steps toward the person behind this ip adress...
190.248.24.244 - Heavy port scanning from Columbia
CSF/ LFD picked up several port scans from this IP and other in the 190.248 B class. here is the full info - *Port Scan* detected from 190.248.24.244 (CO/Colombia/cable190-248-24-244.une.net.co) EPM T...
190.144.77.10 - Multiple Port scanning from 190.144.x.x block
webserver getting hammered by IP in the 190.144.x.x block. All from Columbia. Triggered several netblocks on my server. 190.144.77.10 is just one of the many...
66.185.181.137 - Port Scanner by Cybersource Corp.
This ip 66.185.181.137 has been constanlty scanning our network all week long
starting at 8:00 am to about 6:00 pm at night. 66.185.181.137 from Cybersource Corp....
175.45.25.51 - Попытка ÑканированиÑ
Ñй saaki.net Гонконга, оÑтанов...
58.218.199.227 - Complaint about 58.218.199.227
The user of IP address 58.218.199.227 is continually trying to get into my network.
I have more than 50 attempts by this user to get in to my network.
Please do something about it as soon as possibl...
221.1.220.149 - port scan
221.1.220.149 This IP like other from China bot-net several times daily scans my ports . Its all redy on black ip lists
You can defend your hosts by using block lists from http://www.iblocklist.com/ ...
58.218.199.227 - Port scanning attacks several times/day.
There are 2 IP addresses that alternately attempt a port scan, which are blocked by my firewall. More annoying than anything, glad to know I\'m not the only one....
66.185.181.137 - 66.185.181.137 scanning our ports again
Yep this ip which belongs to Cybersource has been caught yet again scanning our ports. WTF!
Stop scanning our ports you scum bags. This is the 3rd time we\'ve caught these guys scanning....
203.169.6.51 - mysql port scanning activity
This IP-address was found to scan 4 of our servers for possible mysql connections on different ports. We took immediate action to block the IP completely from all of our servers....
175.45.25.51 - Port Scanning
Antivirus blocked an attempted port scanning attack at 4:30 AM on 1/24/2012. From the looks of it, this is a rather common occurrence, motives are unknown but they definitely didn\'t find anything...
74.208.109.169 - Port Scanning
My anti-virus tells me I was the victim of an attempted port scanning attack coming from this IP address at about 9:00 PM on 1/23/2012...
217.111.43.178 - Intrusion into my NAS
Dear,
Could you please check that
2012-01-21 01:53:54 guest 217.111.43.178 vmpro-d SAMBA --- Login OK
2012-01-21 01:53:54 admin 217.111.43.178 vmpro-d SAMBA --- Login Fail
2012-01-21 01:53:54 admin...
83.20.197.156 - Port Scanning
ashole be careful a a a a a a a a a a aa a aa a a aa a a a a a a a a a aa ...
175.45.25.51 - Nice try...but blocked
Security alert type : Port Scan
Protocol type : TCP
IP source address : 175.45.25.51
Time at last attempt : 1/22/12 03:58:27 AM
Number of por...
78.147.30.15 - Port scanner attack
ESET detected a TCP port attack originating from this IP, any inbound connections should be blocked. It is evidently a dangerous IP. Be warned and aware...
58.218.199.147 - Thx to the Canuck in B.C. for the NMAP params
nmap -sU -T4 -A -v -PE -PP -PS21,22,23,25,80,113,31339 -PA80,113,443,10042 -PO --script all 58.218.199.147
Starting Nmap 5.00 ( http://nmap.org ) at 2012-01-20 22:42 EST
NSE: Loaded 59 scripts for sc...
175.45.25.91 - Port scanning
This is scanning my computer and has attempted to do a scan several times today. It tried to do it since early this morning PST today ...
221.192.199.49 - continous attempts
yesterday I reported this IP address attempt to do a portscan several times, today it again attempted to do it numerous times. this is getting to be a serious threat and very annoying...
58.218.199.147 - Port Scan again
I continue to receive an attack from this IP address, yesterday January 19, 2012 I reported it and again today it got several more attempts
Is there anything to do to block this IP address from scanni...
66.185.181.137 - trying to break into ports
66.185.181.137 is Scanning for open ports, starting @33437, escalating upward. Approximately 100 attempts to break into my system, using different ports on the attacking system, starting at 13951 and ...
221.192.199.49 - Constant ports scanning
this IP address continues to ping my computer unrelentlessly throughout the day. It makes it difficult to concentrate on my work because it will never stop ...
192.168.1.217 - IP Camera from China doing Port Scanning
I bought a small pan-tilt IP camera China with default LAN IP address 192.168.1.217. I connected this camera to my GT704WG Rev B Actiontec wireless router and setup port forwarding on this router (e.g...
221.1.220.149 - continues portscan
this IP address continues to scan my computer on an hourly basis and is becoming very annoying. Norton Utilities blocks it but it continues to scan my computer...
58.218.199.147 - consistent portscan of my computer
This IP address scans my computer numerous times a day and continues to do it - I have seen it ping my computer for several months now...
46.105.124.26 - Repeated port scanning
IP repeatedly scanned ports. Somebody is scanning your computer.
\"Your computer\'s TCP ports: 6664, 6665, 6666, and 6668 have been scanned from 46.105.124.26. \"
Apparently it\'s a French...
221.192.199.49 - Port attacks to svchost.exe
Malwarebytes log
2012/01/19 16:21:54 GMT <compname> <logon> IP-BLOCK 221.192.199.49 (Type: incoming, Port: 9415, Process: svchost.exe)
2012/01/19 16:21:54 GMT <compname> <logon&g...
58.53.147.114 - Probing port 5900 (vncprobe)
Address 58.53.147.114 is attempting to authenticate via the vnc port 5900. From Dragon Research Group this is a known address being used to port scan for open vnc servers....
175.45.25.83 - I have complaint about 175.45.25.83
This ip Attack Scanning many time
my virus software show MSG
try to hack network daily i geting this attack MSG on my virus software
please block this ip
Thank You
...
175.45.25.51 - Somebody is scanning your computer.
From the Sygate report log
Somebody is scanning your computer.
Your computer\'s TCP ports:
1690, 1455, 1768, and 2018 have been scanned from 175.45.25.51.....
205.152.37.23 - I am tired of this ip continuously port scanning our router
I keep getting security alerts for 205.152.37.23, an IP address belonging to bellsouth/ ATT in Atlanta GA, it is port scanning my router as follows:
Security alert type : Port Scan
Protoc...
88.231.136.168 - port Scanning
this Ip is scanning ports. All antivirus say the same. Tt wont stop, i get the same messages. ...
221.1.220.149 - Again and again
This IP several times daily scans my ports.
Firewall blocks, but it is annoying.
The computer does not have any viruses.
How to completely block these f...... attacks?...
221.1.220.149 - port scanner
Little chinese bastard. Keeps scaning my ports. It;s so anoying! So far firewall is blocking him, but i am sick of red window on my screen saying he was trying again....
221.192.199.49 - Keeps scanning
scanning my computer alot i dont know if its bad but i dont appreciate it. please stop them it\'s very harrasing and idk what else to write because this has to be long....
175.45.25.51 - This IP Address is scanning my router for open ports
4 times in one day, started 1-12-12
They seem to be fishing. Here is the router log file:
Number of security log entries : 2
Security alert type : Port Scan
Protocol type ...
221.1.220.149 - Port scanning
This IP is port scanning customers
Firewall is stopping it but still trying to get through - has been blocked for now but really not impressed...
58.218.199.147 - 58.218.199.147 repeatedly port scanning
This IP user is repeatedly scanning my ADSL modem. Is there any way that this user can be knocked off the internet or his ISP be blocked enterely?...
175.45.25.51 - 175.45.25.51.saaki.net
175.45.25.51.saaki.net is port scanning repeatedly.
IP Address: 175.45.25.51
IP Address Country: Hong Kong (HK)
IP Address Region: 00
IP Address City: Central District
IP Postal Code
IP Address Are...
175.45.25.51 - wtf
hey saaki.net of Hong Kong, stop scanning and attacking my computer. why is yahoo and att letting them do this through their services?!
what can be done about this sort of tactic. are they data mini...
91.214.44.212 - constant attempts
Malware security constantly blocking attempted acces via explore.exe - this constant bombardment is annoying and a clear attempt at gaining entry into my computer. despite manual blocking of this ip ...
58.218.199.147 - 58.218.199.147
01/13/2012 07:01:42.752 - Possible Port Scan Dropped - Source:58.218.199.147, 12200, WAN - Destination:xx.xx.xxx.xxx, 7212, WAN - TCP scanned port list, 2479, 8088, 8008, 8118, 73 - ...
188.25.241.221 - network attack win.mssql.worm.helkern
I got the above mentioned IP from kaspersky internet security 2011 saying it is attacking my computer with win.mssql.worm.helkern. Attack has been blocked by kaspersky internet security n traced this ...
195.71.93.141 - RST Scan
Had a random check and just found out this in the router protocols
[DoS Attack: RST Scan] from source: 195.71.93.141, port 80, Thursday, January 12,2012 xx...
209.18.47.61 - Port scans followed by syn-flood attacks
This person port scans my pc all day and all night and when ever I open a browser syn-floods my pc and uses all the stack space till my pc or browser become non responsive crashes. the syn flood packe...
58.218.199.250 - Port Scanning
Port Scanning Attack caught by Eset Firewall Source IP : 58.218.199.250:12200. Have been receiving this intrusion attempt several times. Not sure why this is happening hopefully it can be stopped or d...
58.218.199.250 - CHINA AGAIN!
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. Well over 100 attempts over the last few days from this address and others fr...
221.192.199.49 - China AGAIN
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. Well over 100 attempts over the last few days from this address and others fr...
113.105.169.250 - China again!!
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. To the best of my knowledge I have no malware or virus in on my machine...
62.128.151.144 - Attempting to gain access
Firewall catches but its really getting old. I have had 4 other IP\'s from the UK doing port scans in the last couple days. To the best of my knowledge I have no malware or virus in on my machine....
221.1.220.149 - Starting again
Firewall catches but its really getting old. I have had 4 other IP\'s from China doing port scans in the last couple days. To the best of my knowledge I have no malware or virus in on my machine....
74.103.104.34 - Port Scanning...
In my Antivirus Eset Smar Security today i see \"Attack detected by port scans. Source Object: 74.103.104.34:59164\"
I\'m from Poland and i don\'t know what next......
72.251.194.218 - 72.251.194.218 Port Scanning
Outpost Security Firewall caught ip address 72.251.194.218 scanning ports on my pc. WHOIS says it\'s: Voxel Dot Net, Inc. in New York City. Other than that I have no clue......
189.5.199.126 - Brute Hacking attempts
This IP has been attacking our servers. the IP has attempted to penetrate our servers over 10 thousand times in one night. the attacks are brute force using an automated user and password guessing sch...
175.45.25.83 - Somebody is scanning your computer
From the Sygate firewall report log
Somebody is scanning your computer.
Your computer\'s TCP ports:
1049, 2174, 12582, and 4033 have been scanned from 175.45.25.83.....
178.238.233.153 - Continuous Attempts to Access
This address keeps attempting to get data from my PC. My anti-malware applcation blocks it but it is constantly pinging my computer and this is not welcome. I have been the victim of System Check vi...
221.192.199.49 - Port Scanning
Im getting scanned on several different ports almost everyday from 221.192.199.49. This along with three other IP\'s from China are trying to gain access to my PC. This addy is coming up about once a ...
221.1.220.149 - Port Scanning
This IP addy keeps scanning my ports. Firewall catches but its really getting old. I have had three other IP\'s from China doing port scans in the last couple days. No malware or virus in on my machin...
220.107.95.228 - Report Port Scanning IP Address
11 01/08/2012 20:39:43.750 Possible port scan detected 220.107.95.228, 25149, WAN 76.22.178.3, 12745, WAN UDP scanned port list, 16205, 16241, 21815, 21771, 16253
12 01/08/2012 20:38:59.600 UDP pac...
61.115.213.183 - Report Port Scanning IP Address
01/08/2012 20:41:42.450 Possible port scan detected 61.115.213.183, 17868, WAN 76.22.178.3, 19381, WAN UDP scanned port list, 12745, 19369, 16205, 24021, 21789
5 01/08/2012 20:41:14.466 Administrat...
58.218.199.227 - Attaque de DOS ou tentavive d'intrusion
Je commence à en avoir assez de ces individus de Beijing qui continuellement essaient de s\'infiltrer dans les ordinateurs des autres et cherchent de ce fait à leur causer de...
58.218.199.227 - Post scanning
My antivirus block 10 times each day this IP for port scanning. I don\'t know why, I have nothing important on my computer... My router firewall don\'t seem to block this attack....
189.216.119.125 - Dos attack
[admin login] from source 192.168.1.4, Sunday, January 08,2012 09:19:55
[DoS Attack: RST Scan] from source: 189.216.119.125, port 38454, Sunday, January 08,2012 09:18:07
[DoS Attack: RST Scan] from so...
58.218.199.147 - this ip attempted a port scan
my firewall just blocked a port scan from this IP i have a feeling they are trying to make a botnet if you see this ip trying to port scan....block that shit...
209.85.147.188 - This IP has been port scanning my IP address
This IP has been port scanning my IP address. It slows the connection down until I reset the connection. It then returns 10 minutes or so later....
58.218.199.147 - Block this IP
58.218.199.147 is port scanning for the fouth time.
Please contact his/her ISP to stop his/her attacks and floods.
58.218.199.147 scanned ports : 8085, 9415, 9000, 3246, 8008, 7212 and 8080
Kind reg...
194.109.21.230 - firewall overloaded
We think portscans and / or Denial of Service attacks were occurring from this IP address (194.109.21.230). Once we blocked it on our firewall, things returned to normal....
8.15.7.117 - NON STOP PORT SCANNING
Keeps port scanning, so today I started scanning back. Maybe the asswipe will get the mesage or maybe he\'s just not that brite. ...
209.73.188.28 - Likes to port scan/ sweep
Likes to port scan, probably looking for something. Needs to leave people alone, he may come accross someone with no sense of humor. ...
74.201.117.247 - port scanning
That bastard scanned my ports. Dunno what to do. I can only urge:
dear 74.201.117.247, plz, go fu*k yourself. Otherwise we will find you and kick the sh*t out of you.
sincerely,
society
...
218.87.16.135 - unauthorized LAN access
IP shows up in firewall logs as having attempted access to a host on my Local Area network. remote access on that host is disabled no other ...
58.218.199.227 - Keep getting loads of connections from this ip
My server program keeps getting loads of attempted connections from this ip and its trying to crash the server. Ive seen serveral complaints and would like to see this person stopped....
61.184.196.122 - Morfeus Scanner soapCaller.bs
I got few hits from the bot on this address , it\'s probably a victims address but anyway, this might save him after all.
61.184.196.122 - - [02/Jan/2012:01:01:14 +0100] \"GET /user/soapCaller....
113.16.169.195 - Port Scanner
2012-01-02 11:12:20 SCAN nmap TCP 113.16.169.195
2012-01-02 10:41:42 SCAN nmap TCP 113.16.169.195
2012-01-02 06:42:06 SCAN nmap TCP 113.16.169.195
2012-01-02 00:27:19 SCAN nmap TCP 113.16.169.195 ...
124.239.195.131 - Network Attack by 124.239.195.131
Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434
IP Address: 124.239.195.131
IP Address Country: China (CN)
IP Address Region: 22 Beijing
IP Address City: Beijing
IP Posta...
192.168.1.101 - IP address 192.168.1.101
Constant firewall detections of port scanning. See sample below.
Category: Firewall - Activities
Date & Time,Risk,Activity,Status,Recommended Action,Category
12/31/2011 8:14...
192.168.1.103 - IP address 192.168.1.103
Norton security checks show this IP address in constantly scanning for open ports on my computer. See entries from firewall log:
Category: Firewall - Activities
Date & Time,...
221.194.46.176 - scanning my ports
this ip address has been scanning my ports
his ip address has been scanning my ports
his ip address has been scanning my ports ...
31.44.184.99 - Many Domains (CIA Operated)
31.44.184.50
IP Address Organization: Laveco
IP Address ISP: DoD Network Information Center
IP Country Name: Russian Federation
IP Country Capital: Moscow
IP Language: Russian
IP Currency: Ruble...
85.114.135.36 - Port Scanning
Cette DOS Attack me semble tout à fait inadmissible, illégale et répréhensible.
Cette DOS Attack me semble tout à fait inadmissible, il...
94.75.215.26 - 94.75.215.26
For the past 3 months, we have been under attach from this IP 94.75.215.26 address. It is using multiple port scans with ports from 18000 to 49999. ...
91.202.61.170 - Fraud
This ip-adress/user tried to access my computer, see below but was blocked
Fri Dec 30 11:16:17 2011 Blocked incoming TCP packet from 91.202.61.170:80 to 83.250.170.254:41871
Thanks for your attentio...
63.206.102.171 - Possible hack attept
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, 02.00 HOURS.
2nd time in the space of a month....
58.218.199.250 - 58.218.199.250
Security log:
Thu Dec 29 01:09:48 2011
=>Found attack from 58.218.199.250.
Source port is 12200 and destination port is 8085 which use the TCP protocol.
Thu Dec 29 01:09:48 2011
=>Found att...
31.44.184.50 - allrequestsallowed.com
This ip has been submitting multiple GET request for allrequestsallowed.com to my webserver. Please see the apache2 log excerpt below:
31.44.184.50 - - [27/Dec/2011:17:23:51 +0000] \"GET http://...
85.112.217.46 - Port Scan Intrusion attempt
IP in Poland has been attacking our network server under the guise of POS software on port 2525 (Port 2525 has been used in some cases as an alternative SMTP port in case the ISP blocks port 25. So sc...
58.218.199.227 - 58.218.199.227
i.p. address 58.218.199.227 has been attemping several times a day to scan my computer.
I would like to know if there is anything I can do about it?
I can\'t believe the amount of IP scans that are tr...
58.218.199.147 - I get more attacks in the area by various ip
Hello everyone, I had a doubt, if you use a dyndns service? I think using a flaw in the site to find and attack the PC. thanks...
221.194.46.176 - and they scan again :)
scanned for the x\'d time
Source port : 12200
Destination ports = 27977,9000,1080,9415,6588
this is the sequence every few hours *sigh*
(and typing 25 words is a bit overkill)...
175.45.25.83 - Hacking / port scanning from 175.45.25.83
I have my router reporting port scanning / hacking from the IP address 175.45.25.83. The recent ports scanned by this IP address where:
1518
1565
1065
1268
1658
1205
1533
1863
1143
1596
1846...
58.218.199.147 - continuous alert
I get continuous alerts about this site.
Can\'t anyone stop it. very anoying. It is trying to attack 4 routers of mine.
stop stop stop stop stop stop...
50.2.43.37 - Scanning ports from this ip!!!!
Scanning ports from this ip!!!!
I\'m scare...)) Please, help me!
Scanning ports from this ip!!!!
I\'m scare...)) Please, help me!
Scanning ports from this ip!!!!
I\'m scare...)) Please, help me!...
50.2.43.37 - port scan
Somebody is scanning your computer.
Your computer\'s TCP ports:
1627, 1877, 1455, and 1283 have been scanned from 50.2.43.37..
Same IP scanning ports many times...
175.45.25.83 - Porn Scaning
This ip Attack Porn Scanning many time
my virus software show MSG
try to hack network daily i geting this attack MSG on my virus software
please block this ip
Thank You...
58.218.199.147 - Modem log report attempts to connect from this IP
As many others, I too have sustained port scans attempts from this IP. 4 times in the last hour only...
When this guy tries to connect, I suffer some severe lag in my internet connection... ...
175.45.25.83 - Port scan from 175.45.25.83
my Firewall alerted of the following -:
Somebody is scanning your computer.
Your computer\'s TCP ports:
1627, 1236, 1971, and 1252 have been scanned from 175.45.25.83.....
77.109.171.19 - MALWARE BOTNETS OR HACKER GANG PORT SCANNING 77.109.171.19
4:37:16 PM 77.109.171.19 Subnet blocked for 60 min SCAN (9666, 24002, 9410)
4:37:13 PM 77.109.171.19 Detected attack, host not blocked SINGLE_SCAN_PORT (9666)
4:37:13 PM 77.109.171.66 Subnet blocked f...
58.218.199.227 - I Keep getting port scans from these !%^!^!^!#$!@#@!@!#
I Keep getting port scans from these !%^!^!^!#$!@#@!@!# messes up my ping when playing online games. An example:
58.218.199.227 80
58.218.199.227 8080
58.218.199.227 9090
58.218.199.227 8000
58.2...
74.125.226.138 - Google **stealth mode** port probe attack from 74.125.226.138:80
One of several examples (varying Google IP addresses): note the timestamps to indicate the rapidity of this attack: 78 attempts in ~90 seconds (which was probably actually being bandwidth-limited on...
208.248.77.132 - portscan
The router detected port scan from that IP address and eventually flushed my computer off of it leading to DNS errors.
syn ack port scan attack from 208.248.77.132...
205.152.132.23 - Port Scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 12/21/11 07:52:25 aM
Number of ports that were scanned: 12
Highest port : 1038
Lowest port...
221.194.46.176 - constant annoying portscanning
constant annoying port scanning. None stop, even as I write this report I\'m being port scanned repeatedly by this IP. Unsure about the purpose of these portscans, but seems like spam....
206.161.121.2 - IP Protection started successfully
01:56:48 Ciprian Ionita IP-BLOCK 206.161.121.2 (Type: outgoing, Port: 55134, Process: svchost.exe)
01:56:56 Ciprian Ionita IP-BLOCK 206.161.121.2 (Type: outgoing, Port: 55139, Process: svchost.exe)
01...
221.192.199.49 - Port scanning
Port Scanning 12/19/2011 7:09:07 PM Detected Port Scanning attack 221.192.199.49:12200 192.168.0.10:8090 TCP continuous port scanning every few minutes. This has been happening for a couple months an...
221.192.199.49 - won't stop
Non stop port scanning of network. Please do something to stop this as many other people on the net also have this issue. Bad IP....
58.218.199.227 - Attempt to break into my server
Please block this user 58.218.199.227 as his practices are cracking into private domains. If you will not react on this message I will sue you as a provider in the court of law! I will forward this wa...
125.39.91.178 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
222.184.232.2 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
121.201.247.2 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
202.102.153.70 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178, 123.62.24.246 . From some adres...
61.138.254.34 - port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178, 123.62.24.246. From some adress...
123.62.24.246 - Port scaning
From one week, every day, port scaning reported from my firewall. all ip adress from china. 61.138.254.34 , 202.102.153.70, 121.201.247.2, 222.184.232.2, 125.39.91.178. From some adresses respond serv...
50.2.43.37 - 50.2.43.37
Very very Excessive Port Scanning 1 Sample: Possible port scan detected - 50.2.43.37, 12200, X1 - TCP scanned port list, 1221, 1190, 1644, 1815, 1158...
58.218.199.227 - 2nd report, explanation below.
This was the 3d attack, the first 2 your sight said was wrong IP, that is incorrect, I checked the other 2 IP\'s several times, don\'t tell me they are wrong, ESET logged them, and I verified several ...
58.218.199.227 - Attempting port scan from several differant IP's after visiting the DHS C6 security clearance wiki page.
The above IP and several others have attemped to scan my ports in the last half hour at least 4 times. It started after I was checking to see what a DHS C6 security clearance is on the Wiki page. ...
58.218.199.147 - Constantly scanning
My firewall blocks the attack., bans it for 300 seconds, then the scan will scan my ports 9415 ,8000,8008,8118,7212,6588,8080 all over again!It just keeps looping!...
118.34.239.99 - 118.34.239.99 KOREANS AR STILL HACKING
THEY ARE FUCKING STUPID ......SCANNING MY MACHINE LIKE HELLLLLL10:21:22 PM 118.34.239.99 Subnet blocked for 60 min SCAN (5888, 5632)
10:21:11 PM 118.34.239.99 Detected attack, host not blocked SINGLE_...
121.144.199.37 - 2 KOREAN ASSHOLES HACKERS121.144.199.37&118.44.123.181
10:03:07 PM 121.144.199.37 Subnet blocked for 60 min SCAN (5888, 5632)
10:02:57 PM 121.144.199.37 Detected attack, host not blocked SINGLE_SCAN_PORT (5888)
10:02:56 PM 118.44.123.181 Subnet blocked fo...
74.201.117.247 - trying to hack my computer
This IP address is trying to send spam from my computer and I want it to end and for them to fuck off and die relativley soon....
50.2.43.37 - port scans
firewall blocked port scans from this IP. Several within a few minutes of each other. . . . . . . . . . . . . . . . . . ...
58.218.199.227 - sonicwall port scanning attack
attempting access to my sonicwall device. Logs show probe on specific port, then a port scan, then attempted administration access to device. Was unable to login...
58.218.199.147 - Port scanning and malware attack
It happens more and more often!! The attacks happen at least 6 or 7 times every hour. Luckly I run ESET Smart Security. Norton would never block these attacks....
50.2.43.37 - TCP Scans
I have received several TCP scans from 50.2.43.37 on four occasions the last two days. The Firewall alerts reads-:
Somebody is scanning your computer.
Your computer\'s TCP ports:
1955, 4965, 11155...
88.80.10.1 - 88.80.10.1 - apenas fazendo testes em servidores?
eu registrei acesso deste sistema no meu IIS, somente neste horário:
88.80.10.1 - - [10/Dec/2011:01:54:26 -0200] \"GET /pp/anp.php?a=U%5C%5DHWW_FAE%5CRE&b=6979&c=07aa HTTP/1...
75.74.84.157 - fuck off
złodziej !!!
fuck off!!!fuck off!!!fuck off!fuck off!!!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck off!!!fuck...
58.218.199.227 - stopped by Virus Barrier X6
Virus Barrier X6 signaled an alarm and blocked this address for port scanning. I know only that is from China. I do not know anything else about it....
58.218.199.227 - 58.218.199.227 port scan
has been trying to scan my computer at least 40 plus times in 2 days my firewall has blocked it each time its becoming very irritating...
89.149.242.175 - Constant port spamming
Would like my IP to block this domain from trying to get through my ports. Outside of my log files being congested with this address, seems to be harmless so far....
58.218.199.147 - 58.218.199.147 Port scanning
Non stop port scanning. Getting hits every day.
18:07:59 work IP-BLOCK 58.218.199.250 (Type: incoming, Port: 8080, Process: unrealtournament.exe)
22:15:27 work IP-BLOCK 58.218.199.227 (Type: incomin...
209.18.47.61 - Port Scanning
This IP has been running a continuous port scan on my current IP for days now. I presume this is not standard protocol for any legitimate services....
221.194.46.176 - damm chinks!
have these damm chinks got nothing better to do with their timeport than scanning us.? nnn nn nn nn xx xx xxx xx xxx xx...
58.218.199.147 - 58.218.199.250
i cant even count the number of blocks of this IP on my router\'s block list right now from today alone. At one point I counted around 20 in one minute.
...
221.194.46.176 - Continous Port Scanning.
Address: 221.194.46.176:12200. 10 Hebei China. ISP: China Unicom Hebei province network.
Triggered warning from firewall and logged 4 times in 3 hours. This individual is a persistant attemptive hack...
125.45.109.166 - Tese guys keep scanning
these guys has been scanning my computer on a daily bases for the last week and i am really getting sick of it. can someone please do something about it....
88.40.179.242 - probe
Time: Wed Dec 7 23:33:03 2011 -0500
IP: 88.40.179.242 (IT/Italy/-/-/host242-179-static.40-88-b.business.telecomitalia.it)
Failures: 60
Interval: 60 seconds
Blocked: Temporary Block
Log en...
183.16.203.102 - Site is attempting to access server
Site has been attempting to log into server. There have been multiple attempts on multiple ports. Server has been off during these attempts....
67.137.238.164 - Trying to access home server
Site is trying to access home server even though server has been off. There have been multiple attempts on multiple ports. Don\'t know if this is normal or not....
122.155.165.89 - north face sale
mens north face outstanding company!
Fantastic vendor and service! <H1><a href=\"http://www.saleskarenmillenoutlet.com/\" title=\"karen millen sale\">karen millen sale&...
125.45.109.166 - port scanning
the ip address 125.45.109.166 on a daily basis roughly every 20 - 30 minutes keeps trying to to hack my pc by performing port scan ...
94.231.109.47 - Minecraft Hack Attempts with Port Scanning
Minecraft Hack Attempts with Port Scanning.
https://en.unoeuro.com owns this server. I reported this to the web hosting provider, https://en.unoeuro.com, that linux19.unoeuro.com is causing massive p...
63.206.102.171 - port scanning
[Mon Dec 05 01:22:09 2011] [error] [client 63.206.102.171] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /w00tw00t.at.ISC.SANS.DFind:)
serveur compromise ? or fucking sc...
58.218.199.147 - port scanner Chinies hacker attacking
29.11.2011 23:19:10 Detected Port Scanning attack 58.218.199.147:12200 <my ip:port> TCP
28.11.2011 23:21:35 Detected Port Scanning attack 58.218.199.147:12200 <my ip:port> TCP
Eset Smar...
221.192.199.49 - Port scan
Port scan at 9:25 CET 2011/12/05
I found this in my router\'s security log
TCP Packet - Source:221.192.199.49 Destination:<My ip address> - [PORT SCAN]
Now is back listed!...
221.194.46.176 - port scanning
this ip is port scanning my pc every few minuets. Hope tey have a earthquate, flood, fire or other disaster in that area very soon,...
58.218.199.227 - repeat port scanning
I have been getting repeat port scans from this site evry 10 to 15 minutes. Pity we can\'t call down a earthquake or flood on this area...
27.4.209.173 - 27.4.209.173 is port scanning my computer
From the past several days, ip address - 27.4.209.173 has been scanning ports on my computer. My firewall has caught the ip address. I am on Hathway cable broadband...
221.194.46.176 - annoying
Firewall has blocked over 100 tcp attempts by this IP over the last week.
Believe all were stopped yet wondering why the attacks since all of my ports are in stealth mode. Have done scans both intern...
64.126.41.129 - 64.126.41.129
64.126.41.129 is port scanning for some strange reason. multiple attacks today. appears to be a ton of port scanning activity for some reason. strange days...
86.42.249.170 - Had this address attempting to connect to my router/firewall
Blocked incoming TCP connection request from 86.42.249.170:62234 to xxx.xxx.xxx.xxx:56425
Saw this whilst viewing logs for my router, saw the other chinese IP addresses that are reported as well.
...
90.154.201.34 - port scanning
got this ip addres that my firewall detected while doing a port scanning attack.it started recently and it\'s pretty annoying,anyone knows what to do ?...
58.218.199.147 - Somebody kill this person IRL please
DDOS-style port scans, countless per second. Fuck China.
Fuck China up the ass, if we go to war I hope we nuke every last one of the lawless degenerate fucks and I say this as an asian person.
Fuck...
58.218.199.250 - many tries
new win7 installed today and every hour 2 port scans. what a luck i installed also a trial firewall which is logging all tries on my system...
58.218.199.147 - Port Scanning Attack
IP: 58.218.199.147
Location: China
Port scanning attack.
Blocked!
<3 you eset!
http://www.eset.com/
This is about the 5th time he/she/it has done a port scanning attack. It does not bother me but...
117.243.250.249 - port vnc
1st december 2011 (in the afternoon GMT)
this IP performs only one try on vnc port
as this port scanning leads to no success so there has been no other port probing...
However this is still a port sca...
58.218.199.227 - 58.218.199.227 port scanning
I found this IP address scanning me several times over the last few days, and apparantly I\'m not the only one. Here\'s three more words....
eset smart firewall detected port scanning attack from this ip, port 12200
i don\'t have anything more to say
i don\'t have anything more to say
i don\'t have anything more to say...
83.151.38.219 - Heads up!
This ip is scanning my ports. If anyone have this message, please report it as soon as possible. Other people would really appreciate it. Bye.
...
46.19.141.244 - scann
port scanning from 46.19.141.244:12200 Hacking, Port scan, Proxy IP, SQL Injection, VPN IP, FTP Brute-force, Phishing, Ping Of Death, Spoofin, Email Spam asshole lol adawez...
58.218.199.250 - Port Scanning
Port scanning for several days on my system.. several layers/protocols to be protected TCP/UDP Detected... Should be shut down... and blocked from communication.... Problematic..Thank You....
221.194.46.176 - Problematc..
Port scanning for four days to attempt to reach through several layers of security.. Problematic constant notification windows and filtering.. several layers and protocols to be protected.. Should be...
122.132.26.56 - port scanning
Hello,
the above ip is trying to make a PORT SCANNING attach on other systems.
the above ip is trying to make a PORT SCANNING attach on other systems....
31.7.59.139 - constant dos attacks
I\'m receiving constant logs and alerts of port scanning and DOS attacks coming from 31.7.59.139 starting 11/24. I\'ve added them to blocked IP list and reported to my ISP for further investigation....
58.218.199.227 - 58.218.199.227
come on, nmap back shows its some infected machine as all the ports are open at 58.218.199.227
Discovered open port 199/tcp on 58.218.199.227
Discovered open port 3306/tcp on 58.218.199.227
Discovere...
63.206.102.171 - Port Scan Alert!
Eset Smart Security flagged a port scan alert from this IP Address.
I\'m using a VPN in the UK, This has never been a problem before.
28/11/2011 23:21:34 Detected Port Scanning attack 4.79.142.206:430...
31.7.59.139 - router dos attacks
31.7.59.139 is doing nightly port scans to my cox IP address and generating multiple DOS attacks. I have put them in a deny ACL list, but the attempts persist....
31.7.59.144 - 31.7.59.144
This IP address has conducted several port scans and has attempted to access the network. I have now blocked this IP address in the router firewall....
Consistent port scanning over the past two weeks. Blast these people, will you? Multiple forum mentions of this address doing this. Results in DOS to Xbox services....
31.7.59.144 - 31.7.59.144
block
Nov 26 08:56:47 WAN 31.7.59.144:12200 x.x.x.x:1455 TCP:S
block
Nov 26 08:56:47 WAN 31.7.59.144:12200 x.x.x.x:1049 TCP:S
block
Nov 26 08:56:46 WAN 31.7.59.144:12200 x.x.x.x:1393 TC...
31.44.184.99 - port attacking
80,135,445 , created a limited user on my os,
my os is Windows Vista.
and deleted my \"Report Folder\"(about my work).
attacker ip : 31.44.184.99 company : Laveco LTD...
58.218.199.147 - Reporting a port scan
why do I need to write twenty five words such as a bit more than this to pad this out till i get to 25 words or more si this enought...
31.7.59.144 - Port Scans from this IP over last 2 weeks
My Netgear router has been giving Port Scan reports for this IP address for the last 2 weeks or so, very unusual to receive so many from a single address. ...
72.130.22.240 - 72.130.22.240 is running port scans
The 72.130.22.240 is running ports scans to router it should not.
Please stop this port scan it should not be doing this kind of activity.
Please address the matter....
71.202.110.217 - Ip address is portscanning
the device is doing a port scan.
ip address is trying to portscan my router
Please deal with this infected pc it should not be scanning a router....
58.218.199.227 - Scanning all ports constantly
Another China outlaw. This IP is hitting my firewall constantly looking for any open port. Is there anything somebody can do? This is frigging rediculous!...
eset nod 32 is deticting port scan attack from 31.7.59.144 several times a day
eset nod 32 is deticting port scan attack from 31.7.59.144 several times a day
eset nod 32 is deticting port scan attack ...
216.171.102.24 - 216.171.102.24CANADIAN ASSHOLE SCANNING HACKER
THIS ASSHOLE WAS SCANNING AROUND 10-15 PORTS TO GET IN MY PC ...IP Address: 216.171.102.24
IP Address Country: Canada (CA)
IP Address Region: ON Ontario
IP Address City: Guelph
IP Postal Code
IP Add...
31.7.59.144 - Numerous Port Scans from this IP
31.7.59.144 25023
31.7.59.144 12072
31.7.59.144 1459
31.7.59.144 1329
31.7.59.144 1221
31.7.59.144 2006
31.7.59.144 2002
31.7.59.144 1252
31.7.59.144 1752
31.7.59.144 1658
31.7.59.144 1299
...
221.194.46.176 - been scanning for years
11:10:03 Firewall default policy: UDP (W to W/ZW) 88.100.199.247:13106 76.104.149.136:50733 ACCESS DROPPED
3 2011-11-23 10:58:54 Firewall default policy: TCP (W to W/ZW) 58.218.199.250:12200 76.104....
58.218.199.147 - been scanning for years
2 2011-11-23 11:10:03 Firewall default policy: UDP (W to W/ZW) 88.100.199.247:13106 76.104.149.136:50733 ACCESS DROPPED
3 2011-11-23 10:58:54 Firewall default policy: TCP (W to W/ZW) 58.218.199.250...
58.218.199.227 - Port Scanning
My Software blocks this from scanning my computer regularly.. Also have A lot more Scans also Coming from China... And south Asia Also seeing some from Panama......
125.45.109.166 - Back at it again
Looks like this IP is back at it again:
Nov/22/2011 13:04:03 Drop TCP packet from WAN 125.45.109.166:12200 xx.xx.xx.xx:3128 Rule: China7 deny
Nov/22/2011 13:04:03 Drop TCP packet from WAN 125.45.10...
58.218.199.227 - port scanned
I just got port scanned by this person,and its prob not the first time either.
I am writing down the ip adresses now. Twenty five words huh?...
58.218.199.227 - getting hit by thie ip daily
for about the past 6 months i have been getting numerous attempts at network access from this IP.
I have blocked it for incoming and outgoing traffic and now instead of being hit by 58.218.199.227 i a...
192.168.1.102 - Constant scanning
I\'ve had over 60k hits from these guys in the last 20min or so. Not sure what they want but it\'s annoying, make it stop!! lol...
221.194.46.176 - Repeated Port Scans From this IP
I receive daily port scans from this ip and subnet and it is very irritating:
221.194.46.176 5390
221.194.46.176 3246
221.194.46.176 73
221.194.46.176 9415
221.192.199.49 7212
221.192.199.49 23...
111.118.177.111 - adminstrator block my ip
dear sir Administrator of this site blocked my ip (14.102.80.2) thats why my user cant see the result of kuk,plz unblock that
i shall be thankful...
89.149.242.175 - 89.149.242.175 port scanning
Getting port scanned from IP address 89.149.242.175, resolved as \"netdirekt e.K\" about 10 times per second. This is unauthorized and I am requesting it be stopped.
...
77.69.239.163 - Port scan from yellow niggers
Getting a port scan from filthy yellow niggers 58.218.199.250, get a life you squint eyed bastard scumbag or go kills yourselves ya filth.
Stupid yellow bastards
...
221.192.199.49 - Scanning ports as well as trying to connect many times.
This guy from China appears to be scanning my ports while also trying to connect via port 12200. I would really appreciate thos annoying guy to get a life....
67.215.242.139 - all port scan attack from Internet Protocol (IP) address 67.215.242.138 / 67.215.242.139.
Forefront TMG detected an all port scan attack from Internet Protocol (IP) address 67.215.242.138 / 67.215.242.139.
trys to attack my computer every 5 to 10 minutes. but i have a malware blocker/remov...
188.165.234.50 - FRENCH ASSHOLE SCANNING 188.165.234.50
2:13:57 AM 188.165.234.50 Subnet blocked for 60 min SCAN (24261, 24517, 25029)
2:13:57 AM 188.165.234.50 Detected attack, host not blocked SINGLE_SCAN_PORT (24261)IP Address: 188.165.234.50
IP Address...
58.218.199.147 - 58.218.199.147
My router reports IP 58.218.199.147 port scanning. Complaining to CHINANET achieves nothing; is there anything that can be done to stop people attempting to infiltrate?...
58.218.199.227 - 58.218.199.227 Port Scan and DOS attacks
My router reports numerous port scans and DOS attacks from IP 58.218.199.227. At the worst, more than 30 port scans in approximately 20 minutes. ...
91.202.61.170 - Port scan from 91.202.61.170
Runs a port scan since 13 hours
Probable port scan dropped - Source:91.202.61.170, 80, WAN - Destination:x.x.x.x, 54216, WAN - TCP scanned port list, 50492, 47388, 55830, 50770, 35786, 51339, 5967...
58.218.199.147 - My TMG Box is detecting this ip.
Keeps trying for a port scan attack on my Microsoft Threat management gateway, it does appear to be blocking it fine but having read this thread i will perminently block it....
68.94.157.1 - scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 68.94.157.1
Time at last attempt : 9/13/11 11:03:08 AM
Number of port...
58.218.199.227 - Communist country trying to scan
ip address 58.218.199.227 keeps attempting to scan my computer. ESET blocked it. Now why is a computer from a communist country trying to scan my computer?...
31.7.59.184 - I have gotten numerous port scans from them.
Here is my firewall log showing that they have been scanning me:
Firewall log:
Sat 2011-11-12 01:16:59 TCP flood From 31.7.59.137 port:12200 To 76.190.191.171 port:1674 droped
Sat 2011-11-12 01:16:59 ...
221.194.46.176 - 221.194.46.176
Nov/15/2011 14:59:42 Found a SYN Flood
Nov/15/2011 14:58:43 Drop TCP packet from WAN 221.194.46.176:12200 68.81.73.111:8008 Rule: msnmsgr deny
Nov/15/2011 14:58:43 Drop TCP packet from WAN 221....
124.239.195.131 - Network attack
I have seen many network attack forming by China basis. Here is my msg.
11/15/2011 10:05:10 PM Unknown Denied: Intrusion.Win.MSSQL.worm.Helkern UDP from 124.239.195.131 to local port 1434
and inf...
173.244.177.45 - Unauthorized port scan from 173.244.177.45
Unauthorized port scans have been coming from 173.244.177.45 on the follow date and times. Nov 11 01:23:25, Nov 12 13:48:15, Nov 13 04:49:21, Nov 13 20:15:09, Nov 14 06:56:39 ...
208.93.140.80 - Port Scan
11/15/2011 17:04:23.816 Alert Intrusion Prevention Probable TCP FIN scan detected 94.127.75.80, 80, X1, LB150.PARS.COTENDO.net 217.109.99.201, 18216, X1 TCP scanned port list, 51719, 56424,
51072, 36...
118.122.188.27 - IP Attempting FIN scan of our entire /24
[00003] 2011-11-15 09:21:43 [Root]system-critical-00438: FIN but no ACK bit! From 118.122.188.27 to 128.91.252.100, proto 6 (zone Untrust, int ethernet1). Occurred 1 times.
[00004] 2011-11-15 09:15:00...
89.149.242.175 - Port Scanning
The IP-address 89.149.242.175 is portscanning about 500 scans per second and keep going on engaging in SPAM, brute-force, DOS attack, phishing, or other fraud.Scanning my PC...
69.171.229.13 - FACEBOOK ASSHOLE HACKER SCANNING-69.171.229.13
6:51:29 PM 69.171.229.13 Subnet blocked for 60 min SCAN (50371, 50883, 50627)
IP Address: 69.171.229.13
IP Address Country: United States (US)
IP Address Region: CA California
IP Address City: Palo ...
192.168.0.1 - ip address 192.168.01
i had my laptop hacked and shut down a few days ago i have just bought new laptop with bitdefender on and im forever getting port scan attemps blocked by the same ip address: 192.168.0.1 and 192.168.0...
66.6.152.144 - HAS BEEN STALKING ME I HAVE PROOF
KEEP GETTING EMAILS FROM
THIS ADDRESS AND I DO NOT HAVE SERVICES WITH COX!!! AS WELL SHE IS SQL HIJACKING ETC.. HELP!! THE PERSONS THAT HAVE THIS IP WORKS FOR COX IN TULSA! PLEASE HELP!!...
131.234.154.6 - Scan port TSE 3389
Top 50 signature matches:
\"MISC MS Terminal Server communication attempt\" (tcp), Count: 2, Unique sources: 1, Sid: 100077
...
58.218.199.227 - Please STOP!!!
I\'m getting scanning and DOS attacks from this computer against my router constantly. Seems like every day now. I\'ve blocked the IP, but this should not be allowed to continue....
24.37.170.192 - Viideotron Ltee
This was listed as a HIGH risk attack from this. What is unnerving is that it can be used with many electronic devises. ...
112.216.149.218 - Massive scan
This is attempted a multitude of port today
Massive scan on all TCP ports and detection of scan HTTP also. Try many urls and escape code....
221.1.220.174 - Blocked incoming TCP connection request from 221.1.220.174:12200
Blocked incoming TCP connection request from 221.1.220.174:12200
I am constantly seeing this listed on my router logs list with a couple other ports and ip listed in there as well.
...
124.255.45.190 - attack to port 110, from b4dbe.static.pacific.net.au
nonstop port 110 connections from name, b4dbe.static.pacific.net.au.
This attack has been going on for over seven hours. I had to bleck all of port 110 to stop. NsLookUp shows IP address as 124.255.45...
66.35.46.194 - Hacker Port Scan
Started port scanning me today.
Here\'s from the log-
[INFO] Sun Nov 06 21:23:31 2011 Blocked incoming UDP packet from 66.35.46.195:10575 to MY_IP:33436
[INFO] Sun Nov 06 21:23:07 2011 Above message...
78.8.177.34 - attack
Hi there my kaspersky internet security tells me that an attack from this ip 78.8.177.34 please someone there can explain me what is going on with this person??...
58.218.199.147 - 58.218.199.147
ip adres try scan my ports early got ip 221.192.199.49 but is the same operator in china fuckin hackers shuld die like rats sry my bad english...
89.149.242.175 - Scanning my PC
Is 89.149.242.175 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud.Scanning my PC. They keep on doing post scans on my machine and it never stop....
221.194.46.176 - port scanning ATTACK
Continuouly port scanning from 221.194.46.176.:12200 . Only have OS AND Security software Installed on my computer. Wipe out my OS and started for scrach did all updates on windows and security but...
91.202.61.172 - all port scan attack
Detected an all port scan attack from Internet Protocol (IP) address 91.202.61.172.
Got this warning in the log several times on the firewall during the past days....
209.18.68.13 - was just port scanned by this ip address
I was just port scanned by this ip address. the ports that were scanned is as follows. do not know if this is bad or not.
TCP scanned port list, 63326, 38287, 5252, 27358, 38014...
202.96.199.150 - 202.96.199.150 Actively Scanning Access to Router
Received several access attempts from this IP trying to gain access to home network.
Reccommend a complete block of all associated domains:
202.96.199.0 - 202.96.199.255
It\'s about time that we st...
221.192.199.49 - port scanning attacks
2011-11-01 18:26:57 Detected Port Scanning attack 221.192.199.49:12200 1xx.1xx.x.x:8008 TCP they tried to scan my ports and they do it many times a day what can i do with it? need some help...
221.192.199.49 - Port scanning
ils font chier les chinois
01/11/2011 15:04:59 Attaque par balayage de ports détectée 221.192.199.49:12200 192.168.0.1:73 TCP
01/11/2011 11:51:08 Attaque par balayage de po...
58.218.199.227 - Doing my head in
Yes i\'ve had the same problem with this ip, my firewall is blocking this and all ip\'s from china...but it\'s just damn annoying seeing it you\'re logs!
regards anon....
58.218.199.147 - Anoying little Critta's!!!
Had scans from this I.P. address For some time now. They became very frequent about twelve months ago. At the beginning though of this year they began fade out. Then silence for six months..... And gu...
58.218.199.147 - regular port attacks
Seeking redress against these criminals invading my privacy & enforce liability against them. There have been 11 port scanning attacks from this IP address against mine so far.....
89.149.242.175 - Portscanning about 100 scans per second
The IP-address 89.149.242.175 is portscanning about 100 scans per second and never stops. It is resolved as \"Netdirekt e.K\". Either it\'s a RIAA/MPAA type of org, or it\'s a spammer/hacker...
80.237.133.32 - Ref Spam
http://www.webmasters-paradise.com
Daily ref Spam. Spam sites to get traffic to his own site. Webmaster cheap bastard. Spam sites to get traffic to his own site. Webmaster cheap bastard....
188.92.76.217 - Port scans and brute force attacks on www.1togo.net
Continuous port scans and brute force attacks on www.1togo.net. We have since blocked the entire telia.net network but the attemps continue. Please find and disable this user....
198.107.148.113 - NTT America Poking around my network HD
Recorded several attempts to access my NAS drive. I\'m not sure what this company does, but I know they are associated with network security. Either way, I don\'t like them snooping....
221.1.220.174 - Being scanned by a group of chinese ips
Similar to 221.194.46.176, I am seeing multiple TCP requests coming in from china at my new comcast location, including: 58.218.199.28. Repeating port scans from different IP is strange though...so n...
221.194.46.176 - TCP Port Scanning from China spot again
TCP port scanning from blocked from:
221.194.46.176:12200
221.1.220.174:12200
58.218.199.28:12200
Attemping access of modem and router on ports 1830, 73, 8000, 8080.
I noticed similar activity back...
91.202.61.170 - Scanning all IP addresses
91.202.61.170 has been scanning all ports on multiple networks. This has been going on since at least October 24, using mainly MS-DS attack. Probes are dropped ...
169.254.83.178 - Scanning for Ports
This 169.254.194.189 address is always trying to scan local computers support. We have blocked the whole network 169.154. Our anti-virus software has blocking it but they never give up....
58.218.199.147 - this guy is relentless
This ip has been port scanning me for days and misusing his internet connection I would assume under your rules of use. I would like to report this abuse.
Sincerely,
D Nichol...
209.85.145.132 - port scan attack
ISA Server detected an all port scan attack from Internet Protocol (IP) address 209.85.145.132. For more information about this event, see ISA Server Help.
...
91.202.61.170 - 91.202.61.170
Been going on for 3 days now ....seems to be on all ports above 32000....
I can send detail reports it you like ...
Number: 380496
Date: 26Oct2011
Time...
58.218.199.147 - scan port and spam e-mail
I receive from several weeks continuing attacks from this ip address, I also noticed that it also gained access to one of my many email addresses and sent spam to my contacts ......
210.219.244.88 - Logon attempts
IP located in Korea. We are getting scan attacks from this IP address. IP appears daily in our server Security logs. It has been blocked. This IP uses port scanning and dictionary attacks. IP shown s...
58.218.199.147 - port scan
Very aggressive ports scan: Here are some of the ports scanned:
DPT=27977
DPT=8085
DPT=3246
DPT=9090
DPT=9000
DPT=3246
DPT=8090
DPT=8000
DPT=2301
DPT=6588
DPT=8008
DPT=8118
DPT=73
DPT=7212...
221.192.199.49 - daily podt scans
Your computer\'s TCP ports:
3246, 8090, 8008, and 8123 have been scanned from 221.192.199.49
9090, 2301, 8088, and 73 have been scanned from 221.192.199.49
3246, 8090, 8000, and 8008 have been ...
91.202.61.170 - Akrino Inc .
IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 **************** 0140 TCP 80->55656 [S.A...] seq 1551936660 ack 1757303447 win 512
If you read this Akino Inc. Why?...
217.247.32.25 - multipe of those log in my router
Blocked incoming TCP connection request from 217.247.32.25:1374 to 173.179.4.79:26826
[INFO] Mon Oct 24 22:50:48 2011 Blocked incoming TCP connection request from 217.247.32.25:1374 to 173.179.4.79:26...
91.202.61.170 - SYN-ACK port scan attack
Hello,
Thank you for this valuable service.
For the third time this month (October, 2011) my router
has logged a port scan attack from the following IP address:
91.202.61.170
The log entry is as f...
221.192.199.49 - Port scanning, port scanning and more port scanning.
Im getting scanned on several different ports almost everyday from 221.192.199.49 its annoying and theyre obviously up to no good. It would be nice if someone gave them a taste of their own medicine, ...
7 attempts so far today, & most of the time I have switched my router/modem off - IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 ...
202.111.175.176 - Scanning for setup.php files
THey were scanning for old setup.php files that I hadn\'t removed. Screw them. I hope that have more lax security practices than I do poop!
...
221.192.199.49 - Please ban and make an order with a faulty user
I have many reports about port scanning from 221.192.199.49. Please ban user which was trying to scan IP: 195.116.17.*. Looking forward for an answer. My addres is yku@op.pl.
Best regards,
Tomas K...
58.218.199.227 - 58.218.199.227
i.p. address 58.218.199.227 has been attemping several times a minute to scan my computer. My Malware bytes-anti malware has blocked it about 12 times in two days.
...
58.218.199.147 - this idiot called me on phone telling me i had computer errors ....its called home invasion
nail this ip address please ...this is a home invader...as you can see by all the complaints ...this dude has hacked other ppl ....do something about it!...
76.116.172.95 - FIN but no ACK bit!
Im receiving this in my logs from my firewall FIN but no ACK bit! From 76.116.172.95 extra words extra words extra words must be 25 words extra words must be 25 words...
221.194.46.176 - 221.194.46.176 Port Scanning
Firewall detected and blocked numerous attempts by ip 221.194.46.176 to port scan.
TCP Packet - Source:221.194.46.176,12200 Destination:86.23.25.39,8008 - [DOS]
TCP Packet - Source:221.194.46.176,12...
221.192.199.49 - Continuous port scanning of my firewall
Nothing new - happens all the time from multiple Chinese ip addresses. I figured I\'d document it for posterity. Working on something interesting for these Crackers :)...
58.218.199.227 - ANNOYING!
this IP is scanning my network for days, in every hour they are trying to get in. I HATE THEM! blacklist pls! Its really too much for copy all the entry\'s in this field!...
115.236.76.233 - Receiving requests on port 5060 from 115.236.76.233.
Receiving requests on port 5060 from 115.236.76.233. We are seeing constant incoming requests on port 5060 from 115.236.76.233 and it is slowing down our equipment....
58.218.199.227 - i.p. address 58.218.199.227 has been attemping several times a minute to scan my computer
Firewall blocked and logged the following :
TCP Packet - Source:58.218.199.227,12200 Destination:xx.xx.xx.xx,73 - [DOS]
TCP Packet - Source:58.218.199.227,12200 Destination:xx.xx.xx.xx,3246 - [DOS]
T...
189.80.219.230 - 189.80.219.230 / www.al.ma.gov.br
Type d\'attaque : DDoS , Spam, Reverse Dns, Fraudes, Hacking, bref, la totale.
Ps : il est assez marrant de voir que cette IP semble appartenir au gouvernement brésilien (Ftp gov hacked ...
217.110.97.201 - DOS attack
[DOS attack: RST Scan] attack packets in last 20 sec from ip [217.110.97.204], Thursday, Oct 13,2011 10:03:55
Twice to-day: what should I do? Is it dangerous for my router and/or PCs?
...
68.87.74.166 - Norton Internet Protection - Worm/Portscan
Indicates that a worm involved in portscanning came from this IP. I do not know much more than this. Can anyone explain what this is about?...
221.194.46.176 - Firewall Alert
The Chinese are invading, BIG TIME! Every hour at a minimum I have had one of the following IP trying to breach my system: 221.194.46.176, 221.192.199.49, 58.218.199.147, 58.218.199.250 and 58.218.199...
85.113.230.85 - port scanning by 85.113.230.85
Someone at concepts-ict is trying to scan ports:
Mon Oct 10 10:54:23 2011 Unrecognized attempt blocked from 85.113.230.85:39813 to 80.56.80.194 TCP:443
attempts are blocked by my firewall...
91.202.61.172 - port scanning by 91.202.61.172
Several attempts of port scanning are blocked by my router:
Mon Oct 10 10:44:31 2011 Unrecognized attempt blocked from 91.202.61.172:80 to 80.56.80.194 TCP:12261
Don\'t know where this is coming fro...
58.218.199.227 - hacking from china
Mon Oct 10 10:41:09 2011 Unrecognized attempt blocked from 58.218.199.227:12200 to 80.56.80.194 TCP:9415
Above log comes from my firewall numerous times an hour. Attempts are blocked....
62.24.134.125 - constant port scannin
Its been going on for 2 days now ... scanning my ports all day thank god for m,y firewall ..
have tryed calling the people but i get nothing ...
68.87.74.166 - intrusive attempt at port scanning
do not know who is the above ip address but they have attempted a port scan on this pc earlier this evening that was blocked by my software...
58.218.199.250 - My router is repoorting hundreds of "DOS" probes
Day after day this site is probing my home network. Sometimes a hundred attempts a day, and this has been for weeks.
Block it!
PS Why do complaints have to be at least 25 words long?...
70.26.253.25 - Port scans non stop
It keeps scanning with no reason to do so, UDP and TCP ports in the 50000 to 60000 range. Flooding the router logs too which is frustrating...
58.218.199.250 - Clogging my router
These jerks keep scanning my ports. Kills my router and is really annoying. Can\'t somebody shut them off? Surely there has to be a way to block all traffic from repeat misusers of the global inter...
58.218.199.250 - Blocked Packets on Numerous Ports
Multiple attempts to send messages to different ports. Hogging router time and reducing bandwidth. Very annoying that they do this. Thrre more words....
58.218.199.250 - about once / minute
dam chinese are port scanning. This is tying up my router.Appears to be selectively harvesting,and also pinging.And [DOS attack: RST Scan] attack packets . dam chinese...
187.7.37.31 - Attempted to log into server using port scanning
Attempted to log into server using port scanning and a range of user IDs over ever 3-5 seconds over a 2 hour period. They had identified the workstation name and account domain but did not have the c...
211.155.225.35 - Attempting to log into private server
Chinese site attempting to log into server using port scanning. Attempts were made to enter unsing the administrator accounnt. Fortunately no logins were successful....
IP number 64.71.33.42 was blocked for port scanning on my PC. I\'m not sure who this is but I\'m going to check for infections now....
74.125.159.139 - Why?
I got a pop up from my firewall saying that IP 74.125.159.139 was blocked because it was scanning ports. Seems kinda shady that Google would be scanning ports......
221.192.199.49 - Constant attacks
ESET Smart Security has been warning me on a regular basis about Port scanning attacks from this IP. I am getting an attack once every few hours it seems....
91.202.61.170 - all day scanning network
constantly testing network addresses
constantly testing network addresses
constantly testing network addresses
constantly testing network addresses
constantly testing network addresses
constantly test...
91.202.61.170 - Scan attacks
IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 XXXXXXXXX 0339 TCP 80->34871 [S.A...] seq 3438580134 ack 579183560 win 512
...
218.75.4.130 - Sequential port scanning
I got a pop-up from ZoneAlarm asking me to allow lsass.exe to act as a server on port 4500. I opened my ZoneAlarm log and found that ports 4272 through 4626 had been scanned in sequence (355 scans in ...
91.202.61.170 - IDS proto parser from 91.202.61.170
IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 TCP 80->15996 [S.A...] seq 4240243228 ack 125569564 win 512
IDS proto parser : tcp data on syn segment (1 of 91.202.61.170 TCP ...
58.218.199.227 - 58.218.199.227 port scanning my pc
My Sygate Personal Firewall detected the above ip address (58.218.199.227) attempting to scan/scanning my ports several times and fairly consistent and persistent. October 3, 2011....
221.192.199.49 - IP 221.192.199.49 port 12200 port scanning me constantly
Getting ports scans from IP 221.192.199.49 port 12200 in blocks of 5 scans - each one with a different port being scanned about every 20 minutes. This has been happening for weeks. Can\'t we get this ...
87.248.217.254 - random scans
random port scanning from this guy!!
it is really annoying my firewall is destroying himrandom port scanning from this guy!!
it is really annoying my firewall is destroying him...
I have put up with this IP and sever as well as other IP addresses from the \"LimeStone\" network port scanning my pc. Even my customers pc\'s all over the seattle area for 3 years now.
...
107.20.103.106 - constant scan from this adress
been scanned all day, every minutes of the days, for a few days in a row now by this adress, here\'s the last 30 minutes log.
09/30/2011 06:58:57 Port Scan Minor Incoming TCP 107.20.103.106
09/30/201...
58.218.199.227 - Numerous Attacks
I.P. 58.218.199.227 along with 3 others at this time (all from China) are attempting entry into my computer. My ESET Smart Security 5 has been blocking it successively. ...
58.218.199.147 - TCP Packet - Source:58.218.199.147
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanning router
PORT scanni...
216.245.196.122 - Port attacks
This site probes my system hundreds of times over the course of a couple of days. It\'s an ongoing problem that could esily be considered harrassment or at least cyber stalking.....
202.170.122.83 - malware
trying selling women for sex they keep sending me stuff go to my website sign up and will meet you it bull sh!t please make it stop Thank you...
58.218.199.250 - 58.218.199.250
has been portscanning me for months now, Norton say\'s all have been blocked but he is a persistant SOB. Gotta learn to back hack him and drop a logic bomb up in his back side ...
58.218.199.227 - port scanning
ip 58.218.199.227 port scanning about 25 times/minute, logs show over last several days. using linux/ubuntu. It is being blocked (I think). I have a few open ports in my router, which it has not found...
72.21.202.153 - My ports being scanned
My Symantec Endpoint Protection stated that 72..21.202.153 is scanning my ports.
Your computer\'s TCP ports:
2253, 2256, 2257, 2255 and 2258 have been scanned from 72.21.202.153....
74.63.192.66 - started attack as I connected to Internet
An attack at my PC port 8085 started from 74.63.192.66:12200 synchronous with attack at my port 8085 from 58.218.199.250:12200 - what is the connection? Another probe was blocked soon from 74.63.192....
218.64.88.54 - Constant hacking attempt via remote desktop
23/09/11 attack every 7 seconds
Using terminal services to a small business server (remote desktop)
Attempting connection on a variety of ports
This is all part of a daily intrusion attempt from mult...
94.231.109.47 - minecraft
94.231.109.47 continiously tries access to my minecraft server. it seems that the access efforts are done automatically. how can we ban this ip address from trying to acces our minecraft server?...
They are still scanning IP addresses in the UK as of 22nd Sept 2011
My router has logged:-
Thu, 2011-09-22 10:00:39 - TCP Packet - Source:58.218.199.227,12200 Destination:XX.XXX.XX.XX - [DOS]
Thu, 2...
208.87.32.69 - Running Wireshark by chance (homework), and discoverd this IP port scanning my system
I was just running Wireshark a few minutes ago and discovered that someone using this IP address, 208.87.32.69, was port scanning my computer at the same time.
Server IP: 208.87.32.69
Country: Baham...
28.35.142.41 - port scanning
Attack came from 28.35.142.41 Peerblock and malwarebytes anti malware picked it up. This has happened various times. It may be someone spoofing that ip since it is registered to the DoD
...
216.172.166.200 - 3 attempts
Someone through this IP tried to enter into my PC through ports 637, 4749, 55212. Dont know why, ddon\'t have any ideas why this IP should try to enter into my PC. Thing, that there are no reasons. ...
68.94.157.1 - Port scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 68.94.157.1
Time at last attempt : 9/21/11 02:31:11 AM
Number of port...
74.63.192.66 - 8909 port scan
tried to gain access to our facebook account, on numerous occassions three times in a few minutes. Tried to access port 8909 unused port, blocked by norton and sent a message to me....
173.192.95.73 - IP 173.192.95.73 is constantly scanning my computer
Over the last few days my computer has been scanned constantly by IP 216.245.196.122 - why is this shit going on? there really needs to be more regulation and universal law when it comes to deali...
221.192.199.49 - what the fuck is up with 216.245.196.122?
over the past few days my computer has been scanned constantly by IP 216.245.196.122 - apparently looking for an open port. . . ...
64.14.192.236 - Port Scans
We\'ve been receiving numerous port scans per day for several days now from this IP Address. It\'s becoming a little annoying to say the least. Not sure what this is all about....
221.192.199.49 - Port scanning
1000\'s of port scans. Why does nothing happen to this ISP for allowing this?
1000\'s of port scans. Why does nothing happen to this ISP for allowing this?
1000\'s of port scans. Why does nothing happ...
192.168.202.175 - Port Scanning
Somebody using this IP address is currently port scanning my router using UDP and TPC connection requests to try and gain access to my network....
216.171.107.24 - 216.171.107.24 ASSHOLE PORT SCANNER
Scanning my ports to get in my computer , you will never enter in my personal PC you pussy asshole scanner , because i will come there to CHOPP YOUR FINGERS WITH A SHARP AXE IP Address: 216.171.107.24...
58.218.199.250 - 58.218.199.250
Port scanning my computer daily, often several times a day for more than two years now.
Luckily internet security keps it from getting in.
I know this happens to masses of people I know too, not j...
58.218.199.227 - repeated dropped packets in router log
I see numerous denied packets in my wireless router log from this and other IP addresses which are looking similar.
58.218.199.250:12200
125.65.112.133:7000
58.251.60.228:12200
221.192.199.49:12200
7...
66.35.46.194 - incoming
Sep 18 12:02:33 WAN 66.35.46.194:10184 88.84.25.122:33437 UDP
Sep 18 12:02:28 WAN 66.35.46.194:10184 88.84.25.122:33437 UDP
Sep 18 12:02:23 WAN 66.35.46.194:10184 88.84.25.122:33...
184.154.74.66 - Scanning my FTP tracking to crack it
Scum trying to hack my FTP with multi PW user search.
Has been attempting this for 30 minutes until I blocked him.
Check out the website. Looks like Homeland security should check them out....
94.231.101.83 - Attempting to find open ports!
This IP address is using a program to scan my server for open ports and I believe find information about me. I have no idea how to get this to stop. ...
58.218.199.227 - 58.218.199.227
This IP is constantly trying to connect to my shoutcast server but keeps timing out. I recently moved and now have a different IP address and it took no time for it to try connecting again....
221.194.46.176 - Port Scanning
My firewall is getting scanned every two hours 7 days a week, non stop.
I am not sure how to go about getting them to stop...
221.192.199.49 - Source port is 12200 and destination port is 8008
The details are: TCP connection request from 221.192.199.49:12200 to 72.200.147.238:8008 .
My router keeps blocking these incoming TCP connection attempts. Batch of 4 attempts on September 15, 2011...
221.194.46.176 - Stop trying to break into our network.
These constant port scans and entry attempts are starting to piss me off. These are happening daily constantly. Please punish these people by turning their internet access off....
58.218.199.227 - attempt portscan blocked by norton
This IP address, 58.218.199.227 attempted a port scan on sept. 14th, 2011 at 12:56 pm. Norton antivirus and firewall has blocked it. The reverse lookup showed the location to be in Bejing China, Howe...
58.218.199.147 - Constant scanning of port 80
Always scanning port 80 Had to block them in firewall. These are just extra words because I have to have twenty five of them....
66.35.46.194 - port scanning
Multiple scans on port 33437.
Appears to be part of a bot also using 112.198.78.102, 188.77.186.238, 115.64.131.42, ... as usual, most of these addresses will be dynamic, but as this guy appears to b...
58.218.199.250 - Trying to hack my computer
Can someone block this subnet or this IP.
He/she has tried to hack me a few times now. My Norton Anti-virus seems to be blocking him....
...
58.218.199.227 - TCP Packeting
This IP keeps targeting my router, occasionally knocking me offline and its annoying me.
Priority Time Message
[INFO] Tue Jul 27 16:23:10 2010 Blocked incoming TCP connection request from 58.218.199....
58.218.199.147 - NO MORE
hi this is the same person who keeps trying to port scan me if you could stop it this happens every couple days thank you.
...
119.75.218.45 - SYN+ACK scanning from Baidu (119.75.218.45)
Attn; Baidu Network Abuse contact
We are detecting a large number of SYN+ACK scans coming from an IP address (119.75.218.45) under baidu.com, targeting networks under our management.
Recent records ...
58.218.199.227 - 58.218.199.227 and others
This Ip and the ones below tried to access my voip pbx telephone system
Thu Sep 8 23:25:00 2011 Proto: TCP IP:58.218.199.227 Port:80
Wed Sep 7 05:46:39 2011 Proto: TCP IP:58.218.199.147 Port:80
Sat...
89.149.242.175 - Scanning my PC
They keep on doing post scans on my machine and it never stop.
Stop scanning me as it is invasion of privacy and i didn\'t give you permission to do it.
...
94.231.109.47 - Minecraft
he is trying to infultrait my minecraft server, scanning ports. ect.. he has been popping all over my logs for the last couple weeks.. it would be nice to have him go away...
58.218.199.147 - 58.218.199.147
58.218.199.147 has been sucking on my ports for the last week
58.218.199.147 has been sucking on my ports for the last week58.218.199.147 has been sucking on my ports for the last week...
58.218.199.147 - Mach_kernel have kept my network down all day
Just bad, bad bad -- can\'t seem to stop the constant attacks from this IP address. I don\'t know what to offer than my complete and utter exasperation. It never stops coming...
123.11.242.231 - Block All Chinese IPS
Suggest downloading PeerBlock, and download the country list for China avaliable off of countryipblocks.net
This will block all access to networks in the PRC forbidding them from making any connectio...
58.218.199.250 - Incoming port scan IP 58.216.199.250 147 from China
Annoying , annoying and what can be done to stop this? Fortunately, Norton stops them and I believe any problems with Norton-symantec help is in China!!!...
58.218.199.147 - port scan
port scan on saturday september 4th, 2011.
Blocked by the firewall.
Check that this IP is blocked on your computer because he seems very worker.
Thanks to my firewall and your website.
...
216.245.196.122 - Random Port Scanning
216.245.196.122 increasing the port scanning of 216.106.xxx.xxx and has been going on for 2+months. This ip is now passing Chiles port scanning by a notable percentage....
74.63.192.66 - 12200
SAME AS EVERYONE ELSE\'S COMPLAINT
Incoming TCP connection request
Incoming TCP connection request
Incoming TCP connection request
Incoming TCP connection request
Incoming TCP connection request
Incom...
213.248.117.255 - this ip address is port scanning my ip every 3-5 seconds!
this ip address is port scanning my ip every 3-5 seconds! causing network congestion, i dont know why, can you please make it stop, please...
125.219.32.34 - Port Scan From China
2nd Port Scan in <1 Week, I have no idea who is doing it, why it is from China etc etc. Makes me quite nervous....
58.55.127.28 - Please help us, they have been flooding us for 2 days
Please help us, they have been flooding us for 2 days please shut them down what else can we do? We have been having problems with them for 2 days and they wont stop...
74.63.192.66 - port scanning from 74.63.192.66
Wed, 2011-08-31 01:07:30 - TCP packet - Source:74.63.192.66,12200 ,WAN - Destination:76.20.nnn.nn,8085 ,LAN [Drop] - [Inbound Rule(1) not match]
Wed, 2011-08-31 01:07:30 - TCP packet - Source:74.63.19...
216.245.196.122 - port scanning from 216.245.196.122,12200
Tue, 2011-08-30 18:12:15 - TCP packet - Source:216.245.196.122,12200 ,WAN - Destination:76.20.nnn.nn,1830 ,LAN [Drop] - [Inbound Rule(1) not match]
Tue, 2011-08-30 18:12:15 - TCP packet - Source:216.2...
221.194.46.176 - Frequent port scanning
221.194.46.176 frequently is blocked by Norton (Vulnerability BLOCKED). I\'ve had other attempts from different ip\'s but all come from China. Not sure what would happen if they were not blocked. ...
58.218.199.250 - several port scans and other attacks
After several days of computer malfunctioning I set up
a port listening program. Several days of port scanning were detected.
Other addresses involved
58.218.196.147/250
222.186.24.106
216.245.196.1...
58.218.199.227 - port san and intrusion attempt
Several days of port scanning were detected. The attack is in connection with another series of websites, some of which are reported below.
Some of the other I P addresses involved are reported below...
58.218.199.250 - 58.218.199.250:12200 Constantly scanning me
This IP is relentlessly scanning or attempting a DOS. Hitting ports randomly. I have all ports closed, but they still keep trying What are these people trying to do?!...
221.1.220.185 - Port Scanning every 5 to 30 minutes
My home system is being constantly Port Scanned every 5 to 30 minutes from 221.1.220.185. Cyber crime should be a capitol offence. :( So you\'re a Looser too?...
219.139.81.6 - 219.139.81.6 CHINESE ASSHOLE SCANNING MY PC
3:53:04 AM Block IN TCP 219.139.81.6 6000 86.127.74.46 53 SYN Blocked by the Attack Detecton component
3:53:04 AM 219.139.81.6 Subnet blocked for 60 min SCAN (13568)
IP Address: 219.139.81.6
IP Addres...
58.218.199.147 - China Port Scanning
04:38:17 tony IP-BLOCK 58.218.199.250 (Type: incoming, Port: 80)
06:32:43 tony IP-BLOCK 58.218.199.250 (Type: incoming, Port: 80)
09:20:09 tony IP-BLOCK 58.218.199.227 (Type: incoming, Port: 80)
10:20...
58.218.199.250 - Hacking Attempts
Ports being scanned over numerous days from a number of IP addresses so assume some form of BOT net.
Main offending IP addresses appear to be following which are out of China
58.218.199.227
58.218.19...
63.209.69.107 - Redirecting
I cant go to any websites I enter in the browser without being redirected to this shit:
http://63.209.69.107/search/web/Wordpress%20Caledner%20Plugins/a51/itcg-18254/v5
This is extremely aggravati...
58.218.199.147 - REPEATED PORT SCAN
SEE ABOVE: TRIGGERS ROUTER TO SEND AN EMAIL ALERT SEE ABOVE: TRIGGERS ROUTER TO SEND AN EMAIL ALERT SEE ABOVE: TRIGGERS ROUTER TO SEND AN EMAIL ALERT...
80.191.117.88 - 80.191.117.88 Sleezy muslim trying to hack ....
11:27:12 PM Block IN TCP 80.191.117.88 1380 86.127.74.46 80 SYN Blocked by the Attack Detecton component
11:27:12 PM Block IN TCP 80.191.117.88 1379 86.127.74.46 3128 SYN Blocked by the Attack Detecto...
221.1.220.185 - Port Scanning
This ip show up on my firewall log alerts, saying it\'s performing port scanning my machine! Also from time to time 221.194.46.176 shows up too...
218.29.85.98 - Idetified as ZmEu scanner
Our IPS system has identified this IP as source of ZmEu scanner activities. In total we got about 200+ hit counts in one hour. a....
58.218.199.147 - Vulnerability Blocked
I am on a University network in the American Northeast and attacks from this IP address keep on appearing. Conveniently it is being blocked but I have no idea what these people over in China are tryin...
60.173.12.117 - Port scanning on Port 9415
This ip try to enter our network on port 9415.
Several tries came from the same IP 60.173.12.117 localized in China.
This ip try to enter our network on port 9415.
...
96.44.172.203 - lfd on server.soccernews.com: 66.154.119.99 (US/United States/66.154.119.99.static.quadranet.com) blocked for port scanning
Sample of block hits:
Aug 22 09:32:05 server kernel: Firewall: *ConnLimit* IN=eth0 OUT= MAC=00:30:48:fd:f4:10:00:0a:8a:0e:3f:80:08:00 SRC=66.154.119.99 DST=69.175.60.46 LEN=60 TOS=0x00 PREC=0x00 TTL=5...
205.234.243.205 - Root scanning
This ip is searching my root for a phpadmin or database map to break in! this ip tries every combination of phpadmin, admin, mysqladmin... and so on i n the hope to find acces and hack me...
72.21.91.19 - 72.21.91.19 HACKER SPREADING MALWARE....
9:23:13 PM 72.21.91.19 Subnet blocked for 60 min SCAN (37575, 34759, 35527)
This asshole scanned my ports and injected me an Adware but my MBAM found it and cleaned it quicklyIP Address: 72.21.91.19...
212.54.35.25 - Port Scan
This i.p. has done multiple port scan against my system. Which have been blocked. i have the reports.
Event type: Port scan detected
A port scan was detected from remote i.p. 212.54.35.25 protocol u...
112.223.57.13 - port Scanning test
port Scanning
server test Complaint must be at least 25 words long. You wrote 3 words.
Complaint must be at least 25 words long. You wrote 3 words.
Complaint must be at least 25 words long. You wrote ...
58.218.199.147 - PortScan
Tipo de suceso: Advertencia
Origen del suceso: Microsoft Firewall
Categoría del suceso: Filtro de paquetes
Id. suceso: 15105
Fecha: 15/08/2011
Hora: 21:44:55
Usuario: No disponible
Equi...
58.218.199.147 - Port Scanning from Chinese IP addresses
I\'ve been having this problem for a while now. I even reformatted my computer, but it seems that I\'ve gotten it again. It started tonight. Not sure if it\'s from a website I visited or if it\'s s...
58.218.199.147 - scanning my domain
In my server error log I found the following addresses looking for proxyheader.php, judge.php, ip.php
58.218.199.147
58.218.199.227
I have blocked the entire IP range 58.208.0.0 - 58.223.255.255 on ...
58.218.199.250 - 15 ports scans from that IP over the past week.
15 port scans from that IP source port 12200 over the past week.
Aug 15 15:23:11 #.#.#.# id=firewall sn=0006B1205122 time=\"2011-08-15 20:23:12 UTC\" fw=#.#.#.# pri=1 c=32 m=83 msg=\"P...
94.216.213.86 - 94.216.213.86 Asshole trying to sneak in my sistem
6:45:25 PM 94.216.213.86 Subnet blocked for 60 min SCAN (20480, 36895)
6:45:25 PM 94.216.213.86 Detected attack, host not blocked SINGLE_SCAN_PORT (20480)
IP Address: 94.216.213.86
IP Address Country:...
123.62.24.250 - Nnmap TCP Scan
Intrusion attempt detected - Remote Address 123.62.24.250
Time: 08/13/2011 10:59:37PM
This was also paired with ip 125.39.97.30
IP is reported to originate from China. 2 Hits.
Remote port http(80)...
125.39.97.30 - Nmap TCP Scan
Intrusion attempt detected - Remote Address 125.39.97.30
Time: 08/13/2011 10:59:37PM
This was also paired with ip 125.39.97.30
IP is reported to originate from China. 2 Hits.
Remote port http(80) ...
58.218.199.147 - 58.218.199.147
Portscan\'s my computer at least twice every hour. every day 7 days a week
Also 58.218.199.250 Also 58.218.199.227 I am sick of seeing this Hacker.
Why cant it be stopped....
58.218.199.147 - it is time for list of these networks to block
I have started blocking 58.0.0.0/8 on all my networks. Looking into arin.net to block all china\'s ip addresses. They do not care about abuse!!!!!
Somebody is scanning your computer.
Your computer\'...
216.245.196.122 - Attach FIREWALL LOG AND SEND IT TO THEIR NETWORK ADMINS
I just sent their network admins a log file.... and I believe they will take action...
YOUR INCOMPETENT WHINING... is useless without a LOG FILE that they can show to their CLIENT... send the log ...
58.218.199.250 - Everyday scanning
They are port scanning my vpn router daily, sometimes 4 - 5 times a day. I have also changed my ip address, and they found me within 2 hours. That is unless they are scanning the whole ISP subnet.
P...
69.165.156.45 - Canadian asshole 69.165.156.45
12:40:29 AM 69.165.156.45 Subnet blocked for 60 min SCAN (14596, 39173, 4352)
IP Address: 69.165.156.45
IP Address Country: Canada (CA)
IP Address Region: ON Ontario
IP Address City: Toronto
IP Post...
58.218.199.147 - Hacker
This IP scanned my ports
58.218.199.147 something to do with china second time this happend i don\'t know what to do please someone deal with it...
I BOUGHT MALWARE-ANTI-MALWARE IN THE SPRING. I AM GETTING FLOODED W/ ATTACKS BY CHINESE I.P. ADDRESSES. THE MOST RECENT ATTACKS ARE BY 58.218.199.250 AND OTHERS BELOW.
EXAMPLE TODAY..
15:25:30 STEPH...
205.152.132.23 - Port Scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 8/5/11 07:13:14 PM
Number of po...
17.155.5.240 - Port Scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 17.155.5.240
Time at last attempt : 8/6/11 11:19:24 PM
Number of port...
202.98.246.10 - Right after fresh install of Windows 7
Incase you find yourself in China you may want to block these guys before you connect online anywhere.
Got me with a fresh install before I was able to install my antivirus. ...
183.182.77.120 - Hammering sequential ports
This IP ran port scans for HOURS against my external addresses. Give them kudos for persistence, but they\'re wasting their time. I had previously blocked this entire subnet due to abuse....
94.231.109.47 - Found it
Guys i just read some where that this is minestatus.net they have a bot that spams ips/ports trying to connect to ur server to get info and update its database...
188.165.243.88 - port scanning
This ip is scanning my ports/flooding me. It is a nonstop stream of attempts on consecutive ports. I hope the french bastards rot in hell eating english food.
188.165.243.88
188.165.243.88
188.165.2...
221.192.199.49 - Regular scans of my system.
Scans system from source 221.192.199.49:12200
Searching for ports 8085, 27977, 9090, 3128, 8008, 7212, 6588, 3246, 9000, 1080, 3128, 8088 & 73.
Another IP now on my system\'s blacklist. ...
74.201.117.247 - 74.201.117.247 ASSHOLE PORT SCANNING!!!
3:11:14 PM 74.201.117.247 Subnet blocked for 60 min SCAN (57538, 58306, 62914)
IP Address: 74.201.117.247
IP Address Country: United States (US)
IP Address Region: CA California
IP Address City: San...
58.218.199.147 - Firewall blocked attack
This IP port scanned my comuter once yesteday and already 3 times (8 am here) today. My antivirus firewall blocked this, so far. Is there a way to stop that site or communicate with them about this?...
58.51.90.52 - 58.51.90.52
Somebody with this IP address tried to scan my port, but it was blocked by my firewall. Several other IP addresses have been trying to do the same thing for at least two days now. Those IP addresses i...
58.218.199.147 - trying to get to my system
I keep getting alerts from ip 58.218.199.147 scanning my ports trying to get to my system. It\'s been trying all week, What can you guys do?
GC...
58.218.199.250 - Block the whole subnet
Regularly scans my system for the following ports from three IP #s using source port 12000. IP numbers are 58.218.199.147, 58.218.199.227 and 58.218.199.250.
They look for ports: 1080, 2301, 2479, 27...
58.218.199.227 - Block the whole subnet.
Regularly scans my system for the following ports from three IP #s using source port 12000. IP numbers are 58.218.199.147, 58.218.199.227 and 58.218.199.250.
They look for ports: 1080, 2301, 2479, 27...
74.201.117.247 - 74.201.117.247 ASSHOLE SCANNING MY PORTS
2:06:03 PM 74.201.117.247 Subnet blocked for 60 min SCAN (60864, 61632, 3009)
I WONDER WHAT HE WANTS FROM ME , THIS ASSWIPE IS ATTACKING ME SINCE FEW DAYS AGO!!!IP Address: 74.201.117.247
IP Address C...
58.218.199.147 - I've blocked the whole subnet
Regularly scans my system for the following ports from three IP #s using source port 12000. IP numbers are 58.218.199.147, 58.218.199.147 and 58.218.199.250.
They look for ports: 1080, 2301, 2479, 27...
77.67.10.148 - Port Scanning IP 77.67.10.148
We identified several attempts through the firewall port scaning on my network ip address 77.67.10.148
Port Scanning IP 77.67.10.148
Port Scanning IP 77.67.10.148
Port Scanning IP 77.67.10.148...
58.218.199.147 - Port Scanning / DDOS
Constant nuisance from 58.218.199.147. Port Scans and DOS attacks to many of our IP address. Attacking a variety of ports suspect attacks are automated rather than specifically targeted. ...
209.170.97.212 - Port Scaning
THIS IP 209.170.97.212 RUNING PORT SCANING IN IP OF MY NETWORK.
THIS IP 209.170.97.212 RUNING PORT SCANING IN IP OF MY NETWORK.
THIS IP 209.170.97.212 RUNING PORT SCANING IN IP OF MY NETWORK....
58.218.199.147 - 58.218.199.147
my router report :
TCP Packet - Source:58.218.199.147 Destination:86.69.148.117 - [PORT SCAN]
TCP Packet - Source:58.218.199.147 Destination:86.69.148.117 - [PORT SCAN]
TCP Packet - Source:221.194.46....
I have router filewall blocked this and any thing else 58.218.199.0. I would like to know if there is anything I can do about it? I can\'t believe the amount i.p. scans that are trying to gain access ...
221.192.199.49 - Complaint about 221.192.199.49
Constant Alert of \'Kernel Intrusion\' from 221.192.199.49 to my router almost every 10 minutes per day. Tries to enter my computer and get response. Add to black list....
58.218.199.227 - i.p. address 58.218.199.227 scanning
i.p. address 58.218.199.227 has been attempting several times a minute to scan my computer
2011-08-01 04:15:22 TCP from 58.218.199.227:12200 to xxx.xxx.xxx.xxx:9415
2011-08-01 04:15:23 TCP from 58.21...
91.202.61.170 - Large port scan
Logged by a Thomson TG585; all times are GMT.
Jul 30 11:26:28 IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 88.97.48.225 1240 TCP 80->32384 [S.A...] seq 2285158280 ack 110574...
173.200.42.226 - ssh
This is supposed to be a web site used for Instant Notify Administration which is what comes up when I put http://173.200.42.226 in my browser.
How ever I left the ssh port open on my computer and th...
91.202.61.170 - IDS proto parser from 91.202.61.170
Jul 30 11:44:12 IDS proto parser : tcp data on syn segment (1 of 1) : 91.202.61.170 seq 970588573 ack 1202342203 win 512
Jul 30 11:41:49 IDS proto parser : tcp data on syn segment (1 of 1) : 91.202....
204.238.82.23 - + ssh
Portscan from 204.238.82.23 then brute ssh attempts I block em:
Jul 29 11:44:55 jam sshd[5516]: refused connect from 204.238.82.23 (204.238.82.23)
Jul 29 11:45:30 jam sshd[7756]: refused connect from...
94.231.109.47 - SAME AS GUY BELOW
when i have my minecraft server up it keeps trying to access diffrent ports and i am wondering if this could be a dos attack or somthing...
58.218.199.147 - 58.218.199.147
These machines are not Hackers/Crackers at all,they have merely been Compromised.A scan of several of these ip blocks reveals that the Machines are not Fire walled or running any kind of Security.They...
94.231.109.47 - This ip is trying to access my computer?
94.231.109.47 is accessing every one of my ports for no reason whatsoever!
whenever i am on minecraft, i can see all my ports being accessed whilest playing on the server...
91.202.61.170 - All port scan attack
ISA Server detected an all port scan attack from Internet Protocol (IP) address 91.202.61.170.
Recorded on 28/07/2011...
58.218.199.147 - Try this to fix them.
nmap -sU -T4 -A -v -PE -PP -PS21,22,23,25,80,113,31339 -PA80,113,443,10042 -PO --script all 58.218.199.147
Result:
Starting Nmap 5.59BETA1 ( http://nmap.org ) at 2011-07-27 17:33 Pacific Daylight T...
209.222.129.171 - Multiple firewall warnings for "probe2.cirn.net"
This guy has been using multiple IPs in this same 209.222.129 range to scan my computer ports, all in the past seven minutes. Enough already!!...
196.28.182.20 - port scanning using icmp protocol
Daily port scanning attack using the icmp protocol on my router at home and its bugging the hell out of me. Why so many words?
...
204.160.124.126 - Scanning ports on our firewall.
Below is small sample of the alerts my firewall is giving me. This is seriously affecting our remote users.
07/26/2011
13:09:59.496 AlertIntrusion PreventionProbable port scan detected204.160.124.1...
186.205.84.14 - Attack from 186.205.84.14
Appears to be scanning different TCP ports. Has been going on for some time (? months). Detected by router, which intermittently shuts down disrupting service....
58.218.199.227 - Multiple port scans
Very annoying and rude. I\'d recommend a good hardware firewall in addition to anything else being used. It is unclear what this website can do to help, but perhaps if enough complaints are logged, ...
119.247.182.205 - 119.247.182.205 Chinese asshole trying to Hack me
IP Address Country: Hong Kong (HK)
IP Address Region: 00
IP Address City: Central District
IP Postal Code
IP Address Area Code 0
IP Metro Code 0
IP Address Latitude: 22.2833003998
IP Address Longi...
58.218.199.227 - 58.218.199.227
malwarebytes blocked it - search of the ip address brought me here - looks like i\'m no. 2 of 2 - need four more words ...
182.182.49.211 - Information
Kindly let me know what ISP:Mini-DSLAM South is. I need to know about the PTCL\'s internet packages, of course cheaper in cost. Is Mini DSLAM part of PTCL Triple Play Project?...
66.35.46.194 - Scanning for 33537
Same a the last complainer
he is scanning 33537 looking for something
Same a the last complainer
he is scanning 33537 looking for something
Same a the last complainer
he is scanning 33537 looking f...
i.p. address 58.218.199.227 has been attemping several times a minute to scan my computer. My Malware bytes-anti malware has blocked it about 50 times in two days.
I would like to know if there is an...
79.174.72.66 - cheap shoes online
This is a great post. you got <a href=\"http://www.cheap-shoes-online.org\" title=\"cheap shoes online\">cheap shoes online</a> .I like <a href=\"http://www.ch...
98.126.110.90 - Port scans
I have had port scans from 98.126.110.90 the last few days.... 2 within 5 minutes of each other.
The alert(s) reads-:
Somebody is scanning your computer.
Your computer\'s TCP ports:
7212, 8080, 80...
84.215.85.170 - Another, every 1-3 minutes, why do they do that?
A computer at IP Address 84.215.85.170 has attempted to access TCP ports on your computer. Is there any way to alter my computer so that these ips will take my computer off the list. I ran all the a...
174.106.131.49 - Every 2 minutes, a port scan.
A computer at IP Address 174.106.131.49 has attempted to access TCP port 40080 on your computer. Every 2 minutes, over and over, this ip continues to attempt access
to ports. Is there someone with a...
174.106.131.49 - Every 2 minutes, a port scan.
A computer at IP Address 174.106.131.49 has attempted to access TCP port 40080 on your computer. Every 2 minutes, over and over, this ip continues to attempt access
to ports. Is there someone with a...
64.88.164.170 - ip 64.88.164.170 is scanning my ports on my firewall
This IP address 64.88.164.170 is scanning ports on my firewall for at least the last 2 months. I'm tired of having my email tied up everyday with these port scanning alerts. I would shut off the ale...
189.19.206.152 - play wheel of fortune
http://adambarthmare.com/Franklinizations/530/blackbox-sales-tampa.html blackbox sales tampa, %OO, http://nexuscafe.org/sliceimg/25/dreams-dictionary.html dreams dictionary, 4089, http://computerser...
189.19.206.152 - concealed carry
http://softpros.in/ASPSecured/219/illegal-porn.html illegal porn, caimt, http://wxplr.com/css/821/nba-eff.html nba eff, >:-]], http://theconstitutionists.com/cp/30/big-iron.html big iron, 8DDD, htt...
189.19.206.152 - hairstyles for prom
http://computerlearning.info/webalizer/455/business-management.html business management, kmx, http://ladiesonlyfitnessabbotsford.com/webalizer/514/ashley-blue.html ashley blue, %-DD, http://energywe...
221.192.199.46 - I get many attacks constantly from this IP.
Blocked incoming TCP connection request from 221.192.199.46:12200
Router log reports every few minutes tcp connection requests from China. This is only one of the IP addresses. I get many attacks con...
222.168.27.82 - Malwarebytes blocks this guy about every 40 min
"sucessfully blocked access to malicious website"--this appears about every 40 min. even if no browser open;
sluggish Internet browsing ever since this started about 10 days ago; worse in past 2 da...
189.19.206.152 - airshows 2010
http://ladiesonlyfitnessabbotsford.com/webalizer/514/career-institute-training.html career institute training, spmt, http://computerrepairmission.com/images/76/jamaica-weather.html jamaica weather, ...
58.218.204.110 - Daily Port scan from 58.218.204.110
TCP Packet - Source:58.218.204.110 Destination:XX.XXX.XXX.XXX - [PORT SCAN]
Firewall detecting and blocking port scan. Usually daily, sometimes multiple times daily....
189.19.206.152 - kennett national bank
http://51xbox.com/archiver/159/slime-recipes.html slime recipes, 8]], http://computerservicemission.com/cp/15/honolulu-restaurants.html honolulu restaurants, ehdx, http://fitnessclubsabbotsford.com/...
189.19.206.152 - huge cunt
http://onedebt.ie/style/461/diaper-porn.html diaper porn, 72885, http://office20077.com/images/287/evelyn-lin.html evelyn lin, :-P, http://littledavids.org/content/67/caesars-atlantic-city.html caes...
189.19.206.152 - rough lesbian sex
http://tx-drive.com/cache/51/house-rentals.html house rentals, =-((, http://adambarthmare.com/Franklinizations/530/green-toons.html green toons, >:-[[, http://dmxweb.com/webalizer/868/goat-milk-soap...
189.19.206.152 - cardinal flower
http://individualfreedom.com/cp/48/campbell-hausfeld.html campbell hausfeld, 8(((, http://bushmanavontec.com/userfiles/528/united-states.html united states, hwlisy, http://stone-crusher.info/images/...
189.19.206.152 - largemouth bass
http://internetbusinessblogs.info/cp/75/free-homemade-sex-tapes.html free homemade sex tapes, 95972, http://holt-mo.com/cp/667/public-sex-videos.html public sex videos, 8-((, http://fitnessabbotsfor...
189.19.206.152 - lumber prices
http://soyouthinkitsfree.info/images/269/white-dresses.html white dresses, 595, http://dungeonpress.com/cp/306/tramadol-online.html tramadol online, 760, http://yemendirect.com/English/844/free-gay-...
189.19.206.152 - iris chacon
http://rajendraprasad.org/webalizer/978/pesquera-crianza.html pesquera crianza, lsoj, http://midwiveskansascity.com/cp/274/obama-polls.html obama polls, kaabuq, http://cnmanufacture.com/webalizer/27...
62.178.34.119 - [DoS Attack: RST Scan]
[DoS Attack: RST Scan] from source: 62.178.34.119, port 4435, Friday, October 01,2010 15:00:01...
01/10/2010 02:00:23 PM Opened TCP/IP connection from 187.0.195.66,44975 to x.x.x.x,80
01/10/2010 02:00:23 PM Closed TCP/IP connection from 187.0.195.66,44975 to x.x.x.x,80
01/10/2010 02:00:23 PM Ope...
125.45.109.166 - Port Scanning annoying but...
Thu, 2010-09-30 20:41:37 - TCP Packet - Source:125.45.109.166 Destination:[my-IP] - [PORT SCAN]
For a week now my router detects these port scans from this IP.
Dis- and reconnect for getting a new...
144.16.111.116 - Repeated attempts to rsh login for invalid users
Repeated requests to ssh for invalid users such as;
Sep 27 18:34:05 firewall sshd[9103]: Did not receive identification string from 144.16.111.116
Sep 27 18:35:54 firewall sshd[9106]: User root from...
29/09/2010 04:55:45 PM Opened TCP/IP connection from 72.11.128.37,41761 to x.x.x.x,80
29/09/2010 04:55:45 PM Closed TCP/IP connection from 72.11.128.37,41761 to x.x.x.x,80
29/09/2010 04:55:46 PM Ope...
125.45.109.166 - 20 connection attempts from port 12200
Sep 29 09:00:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 09:00:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
221.192.199.51 - this ip address has been scanning ports
this ip address has been scanning ports seems its from china but who knows where it scans from? ...
125.45.109.166 - 16 connection attempts from port 12200
Sep 29 07:09:09 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 07:09:09 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
221.192.199.51 - 112 connection attempts from port 12200
Sep 10 08:55:41 localhost kernel: ipfw: ##### Deny TCP 221.192.199.51:12200 12.76.214.116:7212 in via ppp0
Sep 10 08:55:42 localhost kernel: ipfw: ##### Deny TCP 221.192.199.51:12200 12.76.214.116:80...
125.45.109.166 - 19 connection attempts from port 12200
Sep 29 05:17:53 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 05:17:53 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 18 connection attempts from port 12200
Sep 29 03:26:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 03:26:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 16 connection attempts from port 12200
Sep 29 01:22:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 29 01:22:43 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 36 connection attempts from port 12200
Sep 28 21:49:01 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:27977 in via ppp0
Sep 28 21:49:01 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.243.137:8...
125.45.109.166 - 60 connection attempts from port 12200
Sep 24 01:36:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.67:27977 in via ppp0
Sep 24 01:36:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.67:8085 ...
28/09/2010 02:24:16 AM Opened TCP/IP connection from 89.107.68.201,57426 to x.x.x.x,80
28/09/2010 02:24:16 AM Closed TCP/IP connection from 89.107.68.201,57426 to x.x.x.x,80
28/09/2010 02:24:17 AM O...
195.216.205.34 - Baby hackers - Opening & closing & opening & closing & opening ports
25/09/2010 03:25:37 AM Opened TCP/IP connection from 195.216.205.34,53313 to x.x.x.x,110
25/09/2010 03:25:38 AM Opened TCP/IP connection from 195.216.205.34,45399 to x.x.x.x,110
25/09/2010 03:25:38 ...
123.204.163.51 - Baby hackers - Opening & closing & opening & closing & opening ports
25/09/2010 10:46:29 PM Opened TCP/IP connection from 123.204.163.51,3474 to x.x.x.x,25
25/09/2010 10:46:29 PM Opened TCP/IP connection from 123.204.163.51,3464 to x.x.x.x,25
25/09/2010 10:46:29 PM O...
26/09/2010 02:48:33 AM Opened TCP/IP connection from 67.215.12.138,42615 to x.x.x.x,80
26/09/2010 02:48:33 AM Closed TCP/IP connection from 67.215.12.138,42615 to x.x.x.x,80
26/09/2010 02:48:33 AM O...
202.103.114.103 - Baby hackers - Opening & closing & opening & closing & opening ports
25/09/2010 11:05:33 PM Opened TCP/IP connection from 202.103.114.103,39054 to 10.1.1.105,25
25/09/2010 11:05:33 PM Opened TCP/IP connection from 202.103.114.103,58719 to 10.1.1.105,25
25/09/2010 1...
202.103.114.103 - Baby hackers - Opening & closing & opening & closing & opening ports
26/09/2010 10:30:53 AM Opened TCP/IP connection from 202.103.114.103,54385 to x.x.x.x,110
26/09/2010 10:30:53 AM Opened TCP/IP connection from 202.103.114.103,46058 to x.x.x.x,110
26/09/2010 10:30:5...
26/09/2010 07:22:39 PM Opened TCP/IP connection from 212.58.8.132,1913 to x.x.x.x,110
26/09/2010 07:22:43 PM Opened TCP/IP connection from 212.58.8.132,2476 to x.x.x.x,110
26/09/2010 07:22:43 PM O...
210.212.229.99 - Baby hackers - Opening & closing & opening & closing & opening ports
27/09/2010 05:53:53 AM Opened TCP/IP connection from 210.212.229.99,40348 to x.x.x.x,25
27/09/2010 05:53:53 AM Opened TCP/IP connection from 210.212.229.99,43741 to x.x.x.x,25
27/09/2010 05:53:53 AM...
210.212.229.99 - Baby hackers - Opening & closing & opening & closing & opening ports
27/09/2010 07:56:13 AM Opened TCP/IP connection from 210.212.229.99,60168 to x.x.x.x,110
27/09/2010 07:56:14 AM Closed TCP/IP connection from 210.212.229.99,60168 to x.x.x.x,110
27/09/2010 07:56:15 ...
222.186.13.212 - have been blocking this IP multiple times an hour, 24/7
Have been blocking this IP multiple times an hour 24/7 for months, keeps trying to access open ports, violating my right to peace and privacy- these boys in Beijing are trying to steel info all over. ...
58.218.204.110 - Port Scans
Regular port scans and DOS from 58.218.204.110 over past week. My Netgear DG834G blocks all.
Someone may make use of the following info:
58.218.204.110 is responding on port 21 (ftp).
58.218.204....
58.218.204.110 - Port scans
Port scans every two to four hours for last two weeks.
Blocked by firewall.
...
109.87.71.111 - Узел заблокирован
109.87.71.111 Узел заблокирован: SCAN (14348, 36895, 33055, 10243, 20480, 16415)
...
221.192.199.48 - Constant Day & Night Port Scans
Need to stop where national financial security and ar not happy with:
=>Found attack from 221.192.199.46.
Source port is 12200 and destination port is 8085 which use the TCP protocol.
Sat Sep...
221.192.199.46 - Blocked incoming TCP connection request from 221.192.199.46:12200
Router log reports every few minutes tcp connection requests from China. This is only one of the IP addresses. I get many attacks constantly from different IP\'s and when I run the IP on Apnic whois, ...
221.192.199.46 - Blocked incoming TCP connection request from 221.192.199.46:12200
Router log reports every few minutes tcp connection requests from China. This is only one of the IP addresses. I get many attacks constantly from different IP's and when I run the IP on Apnic whois, i...
125.45.109.166,1 - Port Scan Security alert
This IP has been Port scanning my PC every hour for some days now. Router email report as follows TCP Packet - Source:125.45.109.166,12200 Destination:82.26.189.255,73 - [DOS] TCP Packet - Source:125....
124.237.78.73 - TCP scanned port list, 8085, 8000, 8080, 3128, 3124
TCP scanned port list, 8085, 8000, 8080, 3128, 3124 - appears in my firewall logs - Why is someone in China scanning my open ports ?...
221.195.73.68 - Hundreds of scans daily from this IP on many ports
These attempts are blocked and logged in my firewall, but it doesn't take long to fill these up! I sent an email to:
abuse@cnc-noc.net;
abuse@chinaunicom.cn;
konglf5@chinaunicom.cn
but I d...
150.70.89.33 - RST Scan Port 443
The ip has repeatedly scanned my network. I blocked all port and re opened them later again. He scanned again....
125.45.109.166 - 195 connection attempts from port 12200
Sep 23 01:40:31 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.88:27977 in via ppp0
Sep 23 01:40:31 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.88:8085 ...
125.45.109.166 - Port scanning and DOS everyday since weeks
Is it possible that these port scans and DOS are made by a virus and that the computer owner does not know about it ?...
208.76.86.38 - Sequential port scans over 2 days
This IP address, at Toatal Choice Hosting, was noticed scanning ports from 2000 - 5000 over two days (9/20-21/2010). Once through 5000, resumed scanning in low 1500's. Their security tech is helpful, ...
125.45.109.166 - 170 connection attempts from port 12200
Sep 22 01:51:40 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.229:27977 in via ppp0
Sep 22 01:51:40 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.229:808...
125.45.109.166 - 137 connection attempts from port 12200
Sep 21 00:46:49 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.254:8085 in via ppp0
Sep 21 00:46:49 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.254:9415...
125.45.109.166 - 154 connection attempts from port 12200
Sep 20 00:40:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:27977 in via ppp0
Sep 20 00:40:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:808...
125.45.109.166 - 78 connection attempts from port 12200
Sep 19 17:27:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:27977 in via ppp0
Sep 19 17:27:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.220:808...
87.23.47.102 - Port scanning report received.
Report 22/9/10 :
TCP Packet - Source:87.23.47.102 Destination:86.136.164.107 - [PORT SCAN]...
58.218.204.110 - 16k connection attempts last 24h
about 16k attemps on ports 8088, 8008, 73, 9415 last 24h...
125.45.109.166,1 - 125.45.109.166
More PS attempts from these annoying people. They ought to be stuck in one of China's re-education camps. ...
58.218.204.110 - 58.218.204.110
My firewall has blocked numerous attempts to attack my computer over the last few weeks. It's annoying but the firewall's doing its job. ...
221.195.73.68 - Several daily port scans at 8000
This and other Chinese IPs are hitting my Shoutcast port(TCP income blocked from port 12200 to 8000) every two hours or so for at least three times and every day. Fortunately this IP range is blacklis...
58.218.204.110 - Several daily port scans at 8000
This and other chinese IPs are hitting my Shoutcast port(TCP income blocked from port 12200 to 8000) every two hours or so for at least three times and every day. Fortunately this IP range is blacklis...
65.55.118.138 - [DoS Attack: RST Scan] from source: 65.55.118.138, port 443, Monday, September 20,2010 17:28:38
[DoS Attack: RST Scan] from source: 65.55.118.138, port 443, Monday, September 20,2010 17:28:38...
58.218.204.110 - Several daily attacks from 58.218.204.110
Me too. Seems to be a busy hacker over in China. But what's new? I changed my IP address so we'll see how long it will be before they start on this one......
221.195.73.68 - 221.195.73.68 China port scan
is related to 58.218.204.110
both scan every 3 hours and don't stop...
58.218.204.110 - China 58.218.204.11 China ports scancs
China
58.218.204.110 does port scans
>tracert 58.218.204.110
11 321 ms 322 ms 322 ms 58.218.206.49
12 322 ms 330 ms 322 ms 58.218.201.229...
58.218.204.110 - China ports scancs
China
58.218..204.110
58.218..204.110
58.218..204.110
58.218..204.110
58.218..204.110
scans and scans...
58.218.204.110 - China ports scancs
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
Port-Scan 58.218.204.110
every 3 hours...
58.218.204.110 - Why can't some block this morons?
2010/09/18 13:22:18 ** Unauthorized HTTP Access ** <IP/TCP> 58.218.204.110:12200 ->> 24.16.107.55:80
2010/09/18 13:22:18 ** Port Scan ** Port scanning from 58.218.204.110 detected
Why are we all...
16/09/2010 01:40:12 PM Opened TCP/IP connection from 115.81.20.205,3630 to x.x.x.x,25
16/09/2010 01:40:12 PM Opened TCP/IP connection from 115.81.20.205,3632 to x.x.x.x,25
16/09/2010 01:40:12 PM Ope...
16/09/2010 07:15:54 AM Opened TCP/IP connection from 85.10.136.136,43156 to x.x.x.x,80
16/09/2010 07:15:54 AM Closed TCP/IP connection from 85.10.136.136,43156 to x.x.x.x,80
16/09/2010 07:15:54 AM O...
195.216.205.34 - Baby hackers - Opening & closing & opening & closing & opening ports
15/09/2010 05:44:02 PM Opened TCP/IP connection from 195.216.205.34,40582 to x.x.x.x,110
15/09/2010 05:44:02 PM Opened TCP/IP connection from 195.216.205.34,56489 to x.x.x.x,110
15/09/2010 05:44:02 ...
202.102.234.71 - 202.102.234.71 caught in honeypot
Most noticable traffic producer that hits both my IP addresses of my honeypot even though they are on two different providers. with all the other reports this is most likely a very powerful server or ...
58.218.204.110 - Regular port scan from 58.218.204.110 (China)
My firewall is blocking persistent port scans from this IP address. It's extremely tedious....
211.152.56.178 - Port scannning my network
This IP is trying to access my network on port 808, 8080, 3128 - all proxy ports. A quick search on the internet shows that this may be infected by Winhole trojan....
205.152.150.23 - Port Scanning by 205.152.150.23
Security alert type: Port Scan. Source address: 205.152.150.23. Date: 9/12/10...
221.195.73.68 - 221.195.73.68
CHINA scans, simple prot scan normally, but ISPs should something about it...
221.195.73.68 - Scan blocked from 221.195.73.68
My firewall (BitDefender Internet Security 2010) blocked 221.195.73.68 too.
Does anyone know if it\\\\\\\'s either a simple port scan or something I installed on my computer (what?) ? Thanks in adv...
58.218.204.110 - daily persistent port scanning from China: 58.218.204.110
this machine China: 58.218.204.110
sans and scans and scans. Every 3 hours. IP ports, web ports, and is related to: 221.195.73.68 port scan...
221.195.73.68 - Norton Blocking Address from PortScanning!
Since the end of August 2010 this IP Address as well as other IP addresses linked to China have been bombarding my Norton Firewall. Even though I have had no alerts from Norton, every time I check my ...
58.218.204.110 - China: 58.218.204.110 portscan, systematic
CHINA SCANS:
usual Web/TCP ports. Does it every 3 hours. with companion: 221.195.73.68
Maybe there is no system, but just plain stupid Chinese: we try it......
10/09/2010 02:56:07 PM Opened TCP/IP connection from 62.193.232.85,52860 to x.x.x.x,80
10/09/2010 02:56:07 PM Closed TCP/IP connection from 62.193.232.85,52860 to x.x.x.x,80
10/09/2010 02:56:08 PM O...
222.236.44.115 - Constant Day & Night Port Scans
222.236.44.115:6000 is hammering my D-Link Wireless Router aiming at my computer port 2967. Also getting a lot of TWINGE ATTACK Detects from there too. My router is config\\\'d to deny as a rule, but...
221.192.199.48 - Constant Day & Night Port Scans
221.192.199.48:12200 is hammering my D-Link Router aiming at my computer port 8085. Also getting a lot of TWINGE ATTACK Detects from there too. My router is config\'d to deny as a rule, but it just ke...
10/09/2010 05:22:16 AM Opened TCP/IP connection from 115.81.184.248,3793 to x.x.x.x,25
10/09/2010 05:22:16 AM Opened TCP/IP connection from 115.81.184.248,3792 to x.x.x.x,25
10/09/2010 05:22:16 AM O...
58.218.204.110 - China: 58.218.204.110 portscan, systematic = DOS attack
58.218.204.110 is listed in combined.abuse.ch and three other blacklists
combined.abuse.ch (127.0.0.5)
ips.backscatterer.org link (127.0.0.2)
dnsbl-1.uceprotect.net (127.0.0.2)
....
58.218.204.110 - China: 58.218.204.110 portscan, systematic = DOS attack
portscan on TCP ports by China, Bejing, every day, all 3 hours, scans the ports: 8xxx, 9xxx, and special ports.
It's friend is: 221.195.73.68
CHINA postal office and such. ...
58.218.204.110 - China: 58.218.204.110 portscan
portscan on TCP ports by China, Bejing, every day, all 3 hours, scans the ports: 8xxx, 9xxx, and special ports. With taht percistency,, I guess, it's the CHINA gov itself, it never stops ...
94.245.76.250 - this ip address has been attempting to access port 55701 every minute for several days.
this ip address has been attempting to access port 55701 ...
09/09/2010 01:06:22 PM Opened TCP/IP connection from 62.192.1.38,51455 to x.x.x.x,110
09/09/2010 01:06:22 PM Closed TCP/IP connection from 62.192.1.38,51455 to x.x.x.x,110
09/09/2010 01:06:23 PM Ope...
200.175.102.203 - Baby hackers from Brazil - opening & closing & opening & closing ports
08/09/2010 10:03:16 AM Opened TCP/IP connection from 200.175.102.203,39243 to x.x.x.x,80
08/09/2010 10:03:16 AM Opened TCP/IP connection from 200.175.102.203,51201 to x.x.x.x,80
08/09/2010 10:03:16 ...
195.216.205.34 - Baby hackers - opening & closing & opening & closing ports
07/09/2010 10:02:36 AM Opened TCP/IP connection from 195.216.205.34,46644 to x.x.x.x,110
07/09/2010 10:02:36 AM Opened TCP/IP connection from 195.216.205.34,45658 to x.x.x.x,110
07/09/2010 10:02:37 ...
218.60.132.111 - DOS/DDOS attacks logged in our firewall, every DAY.
SYN Flood, PortScan, etc. Highest offender by number of attacks in our firewall stats - by a factor of 10!...
218.30.22.82 - Detected: Intrusion.Win.MSSQL.worm.Helkern
im having the same as everyone else, started 02/09/2010 and heres all my reports to date
02/09/2010 13:13:44 Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 61.128.110.96 to local port 1434 Ab...
61.235.46.146 - Network attach Instrusion
Network attach Instrusion.
Win.MSSQL.worm.Helkern: UDP from 61.128.110.96 to local port 1434. Blocked
Attacking computer has not been blocked, its address is possibly spoofed
9/7/2010 7:39:04 AM ...
77.237.15.53 - Port Scanning
Having some ip in Poland scanning my computer for open ports, apparently....
125.45.109.166 - Daily scanning for the last ten weeks.
Fri, 2010-08-27 18:11:16 - TCP Packet - Source:125.45.109.166 Destination:80.177.109.75 - [PORT SCAN]
Sat, 2010-08-28 08:57:57 - TCP Packet - Source:125.45.109.166 Destination:80.177.109.75 - [PORT S...
58.218.204.110 - 58.218.204.110 port scan from China
58.218.204.110 port scan from China ; every 3 hours now
scans wildly all ports...
202.102.234.71 - 202.102.234.71 is port scanning
bit defender keeps saying this ip is blocked trying to scan for open ports. This happens pretty much every hour, what can i do to stop it?...
222.186.13.212 - Port-Scanning
systematic port scans from China
Port-Scans from 222.186.13.212, 58.218.204.110, 202.102.234.71 -- same TCP ports scanned, same pattern, same China; they scan everyday automatically the whole interne...
221.192.199.48 - Can't someone do something about these guys?
My router is being constantly scanned from this IP. Looks like they've been using this IP blatantly for at least 6 mnths. @@#$%%!!...
58.218.204.110 - 58.218.204.110 port scanning from China
Port-Scan from 58.218.204.110 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. ...
221.192.199.46 - my computer being scanned frequently
I have noticed that Nortons has been detecting incoming tcp connections from this address, so times as much as 4x a minute. So I went into Nortons and had this ip and a few others doing the same thing...
85.248.143.82 - 85.248.143.82 scanning ports
85.248.143.82 to port 135:
LEN=52 TOS=0x08 PREC=0x20 TTL=50 DF PROTO=TCP SPT=14699 DPT=135 WINDOW=60352 RES=0x00 SYN URGP=0 OPT...
221.195.73.68 - Portscanning
Since two weeks from
221.195.73.68 and 58.218.204.110
block them always for 25hrs...
221.195.73.68 - Portscanning
Since two weeks from
221.195.73.68 and 58.218.204.110
block them always for 25hrs...
87.248.217.254 - You can use the IP with PeerGuardian 2 block!
You can use the IP with PeerGuardian 2 block! Here is the site of PeerGuardian 2: http://phoenixlabs.org/pg2/ + Cool Stuff->I-Blocklist!!! Grüsse aus Deutschland/Garmany...
58.218.204.110 - repeated port scanning over the past 2 days
repeated port scanning over the past 2 days...
213.174.157.2 - Seems that this is a constant port scan at least. Apparently the ISP in the Ukraine doesn't monitor for such usage.
This IP address is being blocked by my malware filter (Malwarebytes); the flag is popping up fairly frequently, and is connected with a torrent that I'm downloading, though I haven't determined which ...
116.214.25.66 - SSH attack (port 22)
Crap, this hindustan IP tried to get access to my dear server!...
122.224.6.251 - Port Scanning
This IP has been scanning our firewall consistantly for a month 10 ports at a time...
58.221.32.117 - Port Scanning
This IP has been scanning pur firewall consistantly for a month 10 ports at a time...
58.218.204.110 - 58.218.204.110 Hits my firewall serveral times a day.
My firewall catches this several times a day and it\\\\\\\'s been happening for well over a month, every day about an hour or so apart. My firewall reports:
\\\\\\\"Somebody is scanning your computer...
60.190.59.240 - 60.190.59.240 Ningbo China
ASSHOLE SCANNING MY PORT 80, 8000 , 8888...TRYING TO HACK MY COMPUTER...
125.45.109.166,1 - Port Scanning - 125.45.109.166
24 August 2010 22:18:17 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]
22 August 2010 21:01:22 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]
Th...
71.158.182.166 - Constant Port Scanning
Port Scanning started on July 23 and continuing since then. Sometimes the scans happen every half hour....
74.125.19.118 - used a subnet, my firewall detected him port scanning me
happened August 23, 2010 at 11:30pm...
58.218.204.110 - Frequent attacks from 58.218.204.110
Several times a day this IP has scanned me.
Make them stop....
58.218.204.110 - 97 connection attempts from port 12200
Aug 19 07:49:15 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.29.231:3246 in via ppp0
Aug 19 07:49:15 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.29.231:8080...
222.186.13.212 - 885 connection attempts from port 12200 (Part 2)
Aug 15 02:05:22 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.24.66:8090 in via ppp0
Aug 15 02:05:23 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.24.66:1080 i...
222.186.13.212 - 885 connection attempts from port 12200
Aug 10 14:45:28 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.29.176:3246 in via ppp0
Aug 10 14:45:28 localhost kernel: ipfw: 55003 Deny TCP 222.186.13.212:12200 4.154.29.176:8090...
202.102.234.71 - 149 connection attempts from port 12200
Aug 19 04:36:00 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.231:2479 in via ppp0
Aug 19 04:36:00 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.231:2301...
125.45.109.166 - 15 connection attempts from port 12200 in two seconds
Aug 22 06:08:55 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.234.226:8080 in via ppp0
Aug 22 06:08:55 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.234.226:80...
125.45.109.166 - 125.45.109.166:12200 continuously scanning private system's ports
FWIN,2010/08/21,21:25:28 -7:00 GMT, 125.45.109.166:12200,
24.156.109.xxx:8080,TCP (flags:S)
FWIN,2010/08/21,21:25:28 -7:00 GMT, 125.45.109.166:12200, 24.156.109.xxx:80,TCP (flags:S)
FWIN,2...
202.102.234.71 - 348 connection attempts from port 12200
Aug 15 00:25:26 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.66:9415 in via ppp0
Aug 15 00:25:26 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.66:2479 i...
58.218.204.110 - 74 connection attempts from port 12200
Aug 15 09:24:43 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.26.13:1080 in via ppp0
Aug 15 09:24:43 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.26.13:80 in ...
222.45.112.59 - scans and intrusion attemts!!
it seems i get one like evry second:
Aug 20 03:17:12 kernel: PORT SCANNER ATTACK detected from 70.238.175.216. Source port is 51370, and destination port is 10767 which use the TCP protocol.
A...
58.218.204.110 - Scans at least once every day since July 2010
Attempts GET...judge.php and similar scripts, hits at random times every day but only a few times so I\'m guessing they\'re busy covering a lot of territory, but doing it repeatedly - patiently await...
125.45.109.166 - 125.45.109.166 daily port scanning
Firewall totally locked down but still getting port scans daily...
221.195.73.86 - He is bugging me right now.
Just a script kitty's zombie rattling doors, trying to find a server or infected machine to mess with.
...
125.45.109.166 - Scanned on 14596,19269,33629,44700,54535 yesterday
Scanned on 21,88,808,1080,2301,2479,3124,3246,6588,80000,8008,8080,8088,8090,8118,9000,.... yesterday...
77.223.143.83 - Scanned on 14596,19269,33629,44700,54535 yesterday
Scanned on 14596,19269,33629,44700,54535 yesterday...
68.142.118.254 - [DoS Attack: ACK Scan]
[DoS Attack: ACK Scan] from source: 68.142.118.254, port 80, Tuesday, August 17,2010 16:01:25
[DoS Attack: ACK Scan] from source: 68.142.118.254, port 80, Tuesday, August 17,2010 12:07:13...
58.218.204.110 - 58.218.204.110 scans 5+ times daily
TCP scanned port list: 2479, 3246, 9090, 8080, 7212, 9415, 2479, 9000, 8090, 8008....
216.252.125.64 - Xmas port scan attack detected from (ip:216.252.125.65)
Xmas port scan attack detected from (ip:216.252.125.65)...
58.218.204.110 - 58.218.204.110 port scan attack
I may not be tech savvy but this ip address attacks my server at least 5 times a day. It is very frustrating to see these reports come up. Fortunately my firewall is doing it\'s job to the best of my...
202.102.234.71 - 1610 connection attempts from port 12200 (Part 4)
Aug 11 16:15:13 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.236:2479 in via ppp0
Aug 11 16:15:14 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.29.236:2301...
202.102.234.71 - 1610 connection attempts from port 12200 (Part 3)
Aug 6 13:56:37 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 12.76.233.116:2479 in via ppp0
Aug 6 13:56:37 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 12.76.233.116:23...
202.102.234.71 - 1610 connection attempts from port 12200 (Part 2)
Jul 14 10:25:14 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.235:9000 in via ppp0
Jul 14 10:25:14 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.24.235:3246...
202.102.234.71 - 1610 connection attempts from port 12200
Jun 24 12:04:22 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.31.43:8085 in via ppp0
Jun 24 12:04:23 localhost kernel: ipfw: ##### Deny TCP 202.102.234.71:12200 4.154.31.43:9090 i...
208.67.222.222 - Repeated port scans from 208.67.222.222
Repeated post scans from 208.67.222.222 being reported by my router at 11:17 BST on 16 August 2010....
58.218.204.110 - 58.218.204.110 is hitting my server too
Bad behavior plug in on my site fended him off but he wasn't going anyplace he should have been going....
85.119.217.243 - Scanning & scanning & scanning
15/08/2010 04:54:14 PM Opened TCP/IP connection from 85.119.217.243,53107 to x.x.x.x,80
15/08/2010 04:54:14 PM Closed TCP/IP connection from 85.119.217.243,53107 to x.x.x.x,80
15/08/2010 04:54:15 ...
58.218.204.110 - port scan attack - almost daily
It happened since Jul 22,10 so far i have record of them as following
Jul 22,10 20:23:25 PST
on TCP ports: 8085, 1080, 9090, 8090 and 8000
Jul 23,10 01:19:49 PST
TCP ports: 8085, 9415, 3246, 2...
58.218.204.110 - 641 connection attempts from port 12200 (Part 2)
Aug 13 23:42:28 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.24.17:8080 in via ppp0
Aug 13 23:42:28 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 4.154.24.17:2301 i...
58.218.204.110 - 641 connection attempts from port 12200
Jul 7 10:03:44 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 12.76.242.61:9415 in via ppp0
Jul 7 10:03:45 localhost kernel: ipfw: ##### Deny TCP 58.218.204.110:12200 12.76.242.61:9000...
125.45.109.166 - Port scan every 2.5 hours
Several times a day, approximately 2.5 hours apart, I get the following logged: "...detected an all port scan attack from Internet Protocol (IP) address 125.45.109.166". This has been going on for mon...
58.218.204.110 - port scan attack
several times this day this site is trying to gain acces to my system i had to block it manually several times .....
125.45.109.166,1 - Disruption of Internet service
This IP address is doing a port scan Of my PC daily ,if not more.
I am on dial up,which is slow enough as is,,But when the scans are in process,,my PC comes to a crawl,, it takes forever for pages to...
192.168.1.3, 53 - This IP adress has been trying to scan my PC
This I.P address has been repeatedly trying to scan and attack my computer. Thx to Nortan, most of the attacks have been blocked, but it\'s kind of annoying that he does this everyday as of late....
221.192.199.48 - The machine is Windows Server 2003
... and has port 3389 open, the Remote Desktop Protocol port. If anyone wants to try to take over the machine.......
66.35.46.195 - perhaps traceroutes ...
perhaps traceroutes, but why so many for so long - more then 6 month now ......
117.87.35.251 - 125.45.109.166 - like others, multiple daily scan attemps.
125.45.109.166 multiple daily port scans caught by Norton....
221.192.199.46 - Non-Stop connection attempts
every 7 minutes from 221.192.199.46 and 221.192.199.48 source port 12200 dest port 8085 (Tivo TCP Data) - no Tivo here...
Both of those IP addresses are Windows 2003 Enterprise Servers with Remote ...
125.45.109.166 - Consistient port scan
08/10/2010 19:55:13.112 - Alert - Intrusion Prevention - Possible port scan detected - 125.45.109.166, 12200, X1 - 83.70.176.122, 8000, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 2479...
125.45.109.166 - Consistient port scan
08/10/2010 19:55:13.112 - Alert - Intrusion Prevention - Possible port scan detected - 125.45.109.166, 12200, X1 - 83.70.176.122, 8000, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 2479...
218.60.65.167 - Consistient port scan
08/10/2010 19:02:58.928 - Alert - Intrusion Prevention - Possible port scan detected - 218.60.65.167, 12200, X1 - 83.70.176.122, 8090, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 8000...
218.60.65.167 - Consistient port scan
08/10/2010 19:02:58.928 - Alert - Intrusion Prevention - Possible port scan detected - 218.60.65.167, 12200, X1 - 83.70.176.122, 8090, X1 - TCP scanned port list, 9415, 8085, 8080, 3128, 8000...
58.218.204.110 - 58.218.204.110 (Remote Port Scans)
Wed Aug 11 01:37:46 2010
Blocked incoming TCP connection request from 58.218.204.110:12200 to <<MY-EXTERNAL-IP>>:8008
Wed Aug 11 01:37:45 2010
Blocked incoming TCP connection request from 58.218....
58.218.204.110 - They are still at it
They have hit me a further 28 times with their port scan, firewall catches them every time although there must be some \\\'intelligence\\\' there because not only WAN IP that is scanned, some internal...
222.186.13.212 - 823 connection attempts from port 12200 (Part 2)
Aug 6 13:19:03 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 12.76.233.116:9000 in via ppp0
Aug 6 13:19:03 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 12.76.233.116:80...
222.186.13.212 - 823 connection attempts from port 12200
Jul 30 04:04:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.29.79:9415 in via ppp0
Jul 30 04:04:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.29.79:2301 i...
58.218.204.110 - Why do they do it?
TCP Port scan on numerous ports 4 times. firewall caught them on all occasions.
date, time and scanned ports
08/09/2010 16:41:48
8085, 3246, 8080, 8000, 7212
08/09/2010 06:18:37
8085, 9415, 80, 8...
80.244.167.33 - port scanned from this ip
Was port scanned from this ip. Port scanned was was 5902...
217.10.142.10 - port scanned from this ip
Was port scanned twice from this ip on same day. Ports scanned were 6588 1080...
203.45.71.96 - Scanning our servers over & over & over for 10 minutes
08/08/2010 08:52:45 AM Opened TCP/IP connection from 203.45.71.96,43276 to x.x.x.x,110
08/08/2010 08:52:46 AM Opened TCP/IP connection from 203.45.71.96,43297 to x.x.x.x,110
08/08/2010 08:52:46 AM C...
217.154.40.162 - Scanning our servers over & over & over for 10 minutes
06/08/2010 05:53:51 PM Opened TCP/IP connection from 217.154.40.162,21318 to x.x.x.x,110
06/08/2010 05:53:51 PM Opened TCP/IP connection from 217.154.40.162,21319 to x.x.x.x,110
06/08/2010 05:53:51 ...
61.128.110.96 - Worm Helkern was blocked
My internet security detedted and intrusion.win.MSSQL.worm.Helkern. It was blocked....
125.77.79.143 - My security detected this IP attempting a portscan on my PC
made several attempts at portscanning within 2 minutes time. This happened on August 5 2010 around 2:00am central US time. My security product detected these attempts and blocked it. The IP appears to...
94.127.72.60 - 94.127.72.60
07/08/10 21:14:14 TCP <- 86.127.74.46:49639, 94.127.72.60:80
Rule not found. Packet dropped.
07/08/10 21:16:04 TCP <- 86.127.74.46:49655, 94.127.72.60:80
Rule not found. Packet dropped....
94.127.72.60 - 94.127.72.60
07/08/10 21:14:14 TCP <- 86.127.74.46:49639, 94.127.72.60:80
Rule not found. Packet dropped.
07/08/10 21:16:04 TCP <- 86.127.74.46:49655, 94.127.72.60:80
Rule not found. Packet dropped....
221.192.199.48 - ping flood batch script
put this in an ASCII file and call it pingflood.bat
click on it
-----------------------
:start
ping 221.192.199.48
ping 111.240.151.200
ping 221.192.199.46
ping 218.8.245.123
ping 117.135.13...
60.190.90.156 - SCAN ipEye SYN scan
IPS on network Gateway detecting multiple attempts by this IP address....
60.190.90.156 - SCAN ipEye SYN scan
IPS on network Gateway detecting multiple attempts by this IP address....
218.8.245.123 - SCAN ipEye SYN scan
IPS on network Gateway detecting multiple attempts by this IP address....
91.195.7.1 - 91.195.7.1 Bucharest Romania
PORT SCAN credca stiu cine e aici cei de la Hotnews ....nu e prima data cand fac asa ceva ...niste nenorociti!!!!...
208.67.222.222 - Port scan from 208.67.222.222 at 08:32 BST
Port scan reported by router from 208.67.222.222 at 08:32 British Summer time....
87.242.79.77 - 87.242.79.77 Moscow Russian Federation
This asshole port scanned me while i was downloading Dr WEB anti virus from server.....every time you connect to their server they will port scan victim machine....fucckerssss!!!!...
221.143.46.98 - Atma.es reports that they are absolutely aware
They have been downloading the Atma deny list on almost hourly basis. Note that 221.143.46.98 is included in that list since the fall of 2009. So it is crystal clear that their actions do not come fro...
62.220.120.165 - IP address in Iran is portscanning my firewalls in USA
A portscan was detected. Details about the event:
Time.............: 2010:08:05-15:17:53
Source IP address: 62.220.120.165
...
125.45.109.166,1 - 125.45.109.166 is Port and DOS Scanning
Daily attacks.
started app. 3 weeks ago.
Thu, 2010-08-05 02:22:21 - TCP Packet - Source:125.45.109.166,12200 Destination:72.10.135.171,8008 - [DOS]
Thu, 2010-08-05 02:22:21 - TCP Packet - Source:12...
125.45.109.166 - multiple port scanning
Our firewall Astaro Security Gateway has detected especially the following misbehavior:
First time: may 1st 2010 (2010-05-01).
Always the same:
- Source IP address: 125.45.109.166 (location: CHINA)...
66.208.122.61 - Scanning our servers over & over & over
05/08/2010 03:41:41 AM Opened TCP/IP connection from 66.208.122.61,40768 to x.x.x.x,110
05/08/2010 03:41:41 AM Closed TCP/IP connection from 66.208.122.61,40768 to x.x.x.x,110
05/08/2010 03:41:42 AM...
202.102.234.71 - Lo stesso attacco anche oggi
Lo stesso attacco anche oggi. Sempre dal 202.102.234.71 . Che si può aggiungere?.. AVETE ROTTO IL CAZZO!...
58.218.204.110 - Port Scan and So on...
Port Scanning from this IP...
With something new!
GET http://216.245.205.74/judge.php HTTP...
58.218.204.110 - Many scans throughout the day
Repeated scans of ports 2479, 7212, 8129, and 8008 from 58.218.204.110...
202.102.234.71 - Port attack from 202.102.234.71
The same for me. Port attack from 202.102.234.71 ....
222.186.13.212 - Port Scan has been blocked by BitDefender
I have had a report of IP address 222.186.13.212 Port Scan is being blocked by my Bit Defender. It happens every few minutes sometimes. I would not have know if the Bit Defender did not give me noti...
58.218.204.110 - several attacks daily
firewall reports several port scans from 58.218.204.110 daily...
88.191.39.161 - Scanning our servers over & over & over
31/07/2010 04:33:54 AM Opened TCP/IP connection from 88.191.39.161,54030 to x.x.x.x,80
31/07/2010 04:33:54 AM Closed TCP/IP connection from 88.191.39.161,54030 to x.x.x.x,80
31/07/2010 04:33:55 AM O...
221.192.199.48 - won't stop. no answer to problem
just another person sick of ip 221.192.199.48 and 221.192.199.46 and 117.135.131.16 and 218.8.245.123 and 121.10.42.234 and 222.186.13.212...
221.192.199.48 - won't stop. no answer to problem
just another person sick of ip 221.192.199.48 and 221.192.199.46 and 117.135.131.16 and 218.8.245.123 and 121.10.42.234 and 222.186.13.212...
58.218.204.110 - 1-2X a day I get alerts blocking 58.218.204.110
1-2X a day I get alerts blocking 58.218.204.110 \"event type- portscan\"...
58.218.204.110 - Firewall alert port scan attack
I receive a firewall alert several times daily that it is detecting a port scan attack from 58.218.204.110. I just checked WHOIS and this IP belongs to someone in Beijing, China. Ports scanned are 941...
58.218.204.110 - Firewall alert port scan attack
I receive a firewall alert several times daily that it is detecting a port scan attack from 58.218.204.110. I just checked WHOIS and this IP belongs to someone in Bejing, China. Ports scanned are 9415...
124.237.121.106 - Port attack fro 124.237.121.106 for me too
August 1, 2010, at 2.30 PM my firewall signal port scan attack from 124.237.121.106 . F***ing China!...
221.195.73.68 - Portscanning
Typical of china really. Firewall has blocked 3 portscan attempts today alone....
222.186.13.212 - 191 connection attempts from port 12200
Jul 23 15:55:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.26.9:8085 in via ppp0
Jul 23 15:55:18 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.26.9:9415 in ...
88.191.39.161 - Scanning our servers over & over & over
30/07/2010 11:39:01 AM Opened TCP/IP connection from 88.191.39.161,45346 to x.x.x.x,80
30/07/2010 11:39:01 AM Closed TCP/IP connection from 88.191.39.161,45346 to x.x.x.x,80
30/07/2010 11:39:02 AM O...
222.92.40.226 - Scanning our servers
30/07/2010 01:23:53 AM Opened TCP/IP connection from 222.92.40.226,23116 to x.x.x.x,110
30/07/2010 01:23:53 AM Closed TCP/IP connection from 222.92.40.226,23060 to x.x.x.x,110
30/07/2010 01:23:53 AM...
67.82.140.135 - Scanning ports on Hosting Server
93.186.164.77 has been scanning the hosting ports and attempting a brute force attack. This IP has been defined as follows:
WHOIS Records for 93.186.164.77
#
# Query terms are ambiguous. The quer...
67.228.117.82 - RST Scan from 67.228.117.82
Router logged the following:
[DoS Attack: RST Scan] from source: 67.228.117.82, port 80, Wednesday, July 28,2010 16:36:12
...
217.79.190.98 - Port scanning the server
28/07/2010 12:59:16 AM Opened TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM Closed TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM O...
217.79.190.98 - Port scanning the server
28/07/2010 12:59:16 AM Opened TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM Closed TCP/IP connection from 217.79.190.98,49937 to x.x.x.x,80
28/07/2010 12:59:16 AM O...
87.192.50.43 - Port scanning the server
27/07/2010 10:29:01 PM Opened TCP/IP connection from 87.192.50.43,34929 to x.x.x.x,110
27/07/2010 10:29:02 PM Opened TCP/IP connection from 87.192.50.43,34935 to x.x.x.x,110
27/07/2010 10:29:02 PM C...
125.45.109.166 - multiple port scanning
almost every day I have a scan of my ports 125.45.109.166
...
10.10.174.167 - 10.10.174.167
My norton antivirus shows me that port skan attack was made from 10.10.174.167...
125.45.109.166 - Periodic Scanning
Reported site began periodic port scans every few hours. The scans consist of several TCP scan bursts within one second....
125.45.109.166 - Multiple Port Scans
This address has scanned my computer 9 times in the last day. The firewall has denied access but I find such activity annoying....
222.186.13.212 - Getting 2 or 3 port scans a week from this IP
Router firewall has kept them out, but they are scanning port 80 two or three times a week...
202.86.6.175 - Port Scanning every time I connect to net
Hi,
I am being port scanned by this IP whenever I connect to internet on a daily basis and my firewall is blocking this ip. The scan happens intermittently and is done 10-20 times daily .I need thi...
202.138.97.193 - Port Scanning every time I connect to net
Hi,
I am being port scanned by this IP whenever I connect to internet on a daily basis and my firewall is blocking this ip. The scan happens intermittently and is done 10-20 times daily .I need thi...
202.138.117.60 - Port Scanning every time I connect to net
Hi,
I am being port scanned by this IP whenever I connect to internet on a daily basis and my firewall is blocking this ip. The scan happens intermittently and is done 10-20 times daily .I need thi...
221.195.73.68 - China portscans source 221.195.73.68
221.195.73.68 is traced to:
Hebei, China
scans all ports.
related to similar China scans from IP 58.218.204.110, 222.186.13.212...
58.218.204.110 - port scan from China IP: 58.218.204.110 now with MAC address
well. portscanning every day; related to scanners from china: 58.218.204.110; 222.186.13.212,
which have the same MAC address:
4C-54-20-00-1B-00
MAC is always similar: (XX as parameter goes...
221.195.73.68 - port scan from China IP: 221.195.73.68 now with MAC address
well. portscanning every day; related to scanners from china: 58.218.204.110; 222.186.13.212,
which have the same MAC address:
4C-54-20-00-1B-00
MAC is always similar: (XX as parameter goes...
221.195.73.68 - China port scanning from 22.186.13.212
China port scanning from 22.186.13.212
Port-Scan TCP 221.195.73.68
MAC Adress:
4C-54-20-00-1A-00
same as all these Chinese scanners
...
58.218.204.110 - 58.218.204.110 port scanning from China
58.218.204.110 port scan from China
Port Scan every day at least two times, 5 common TCP Ports: 8085, 9415, 3246, 2479 , 9090
which vary slightly at each attack.
Remote MAC is 4C-54-20-00-19-00
...
222.186.13.212 - 222.186.13.212 port-Scan from China
222.186.13.212 port-Scan from China
Port-Scan from 222.186.13.212 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. 2479, 9415, 9000, 1080, 8080 8085, 9415, 9090, 247...
125.45.109.166,1 - 125..45.105.166 every 2hr 15 min send 10 scans
125..45.105.166 every 2hr 15 min sends 10 scans to various ports. This mmay be the cause of interuption in online sevice. The lrngth of interuption is about 20 seconds. The system often cannot recov...
222.186.13.212 - 204 connection attempts from 12200
Jul 15 23:58:43 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.27.19:9000 in via ppp0
Jul 15 23:58:43 localhost kernel: ipfw: ##### Deny TCP 222.186.13.212:12200 4.154.27.19:3246 i...
217.24.240.68 - Port scanning our servers
23/07/2010 10:49:15 AM Opened TCP/IP connection from 217.24.240.68,47584 to x.x.x.x:80
23/07/2010 10:49:15 AM Opened TCP/IP connection from 217.24.240.68,47585 to x.x.x.x:80
23/07/2010 10:49:15 AM O...
125.45.109.166 - 25 connection attempts from port 12200
Jul 22 14:44:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.240.216:3246 in via ppp0
Jul 22 14:44:01 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.240.216:80...
124.237.121.106 - IP Port scanning from China???
As previous user said, I'm getting this IP (124.237.121.106) doing a port scan but not as regularly as stated. This is happening 2, 3 maybe 4 times a day.
My firewall is warning me that this is hap...
222.186.13.212 - scanning my computer
In two days, it scans 5 times
My computer's TCP ports scaneed:
8085, 9000, 8090, and 2301
8085, 9415, 2479, and 3246
8085, 9090, 2479, and 8090
8085, 9415, 9090, and 9000
9415, 9090, 9...
221.192.199.35 - Fortigate Firewall Reporting Number Port Scans
Firewall has been reporting numerous port scans from 221.192.199.35 for several weeks now....
58.218.204.110 - Port Scans
This ip started scanning my ports several days ago, two to three times a day. Never showed up in my firewall logs before, and judging from the dates of previous complaints here, it seems to be a new o...
124.237.121.106 - i got a port scanning from this ip 124.237.121.106
automated port scanning from this ip to ports :8080, 3128, 80, and 8000 every half hour, is a pain in the ass, send a mail to ip administrator and still getting the scanning...
60.190.59.240 - i got a port scanning from this ip
automated port scanning from this ip to ports :8080, 3128, 80, and 8000...
58.60.10.10 - Various Port scanning port 12200
Various Port scanning port 12200
58.60.10.10 is scanning on port 12200 to get access to my network. Ports
9415, 3246, 9000, 9090, 8090, 8085, 3246, 2479, 9090, 8090 were scanned....
222.186.13.212 - Port scanning form 22.186.13.212
Over last 3 days, ports scanned from this IP 3 times a day. Expect this to continue. Scans are of very short duration--less than a full second....
222.186.13.212 - 222.186.13.212 port-Scan from China
it scans simple ports:
TCP 222.186.13.212
8085, 9415, 9090, 2479, 1080 scanned by 222.186.13.212 ...
58.218.204.110 - port scan from 58.218.204.110
8090, 8080, 80, 8000, 8118 scanned from 58.218.204.110 . This is a bot that comes around every 10 hours or so, no matter which IP you have. China, of course......
178.154.162.29 - port scanning
IP map can not display location of this IP adress...!!! This IP has been scanning ports for over an hour to the hosting server.
Arin Whois database displays following informatiomn:
OrgName: ...
178.154.162.29 - port scanning
IP map can not display location of this IP adress...!!! This IP has been scanning ports for over an hour to the hosting server.
Arin Whois database displays following informatiomn:
OrgName: ...
178.154.162.29 - port scanning
IP map can not display location of this IP adress...!!! This IP has been scanning ports for over an hour to the hosting server...
222.186.13.212 - systematic port scans from China
Port-Scans from 222.186.13.212, 58.218.204.110, 202.102.234.71 -- same TCP ports scanned, same pattern, same China; they scan everyday automatically the whole internets. I do not understand, why the I...
222.186.13.212 - 222.186.13.212 port-Scan from China
Port-Scan from 222.186.13.212 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. 2479, 9415, 9000, 1080, 8080
8085, 9415, 9090, 2479, 9000
port scan by 222.186.13...
58.218.204.110 - daily port-Scan from China
Port-Scan from 58.218.204.110 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. ...
95.173.175.50 - Portscan
Sat Jul 17 02:36:07 2010 Unrecognized attempt blocked from 95.173.175.50:80 to 81.228.153.93 TCP:17107
Sat Jul 17 02:41:37 2010 Unrecognized attempt blocked from 95.173.175.50:80 to 81.228.153.93 TCP...
74.125.19.100 - google port scanning
[Tue Jul 06 21:40:56 2010]:[FW] **Port Scan Detected** 74.125.87.190 -> 188.26.215.114
[Tue Jul 06 21:42:19 2010]:[FW] **Port Scan Detected** 188.244.31.100 -> 188.26.215.114
=)...
109.87.71.111 - Firewall Attack Detector
IP 109.87.71.111 blocked by Firewall Attack Detector. "host blocked. SCAN (14348, 36895, 33055, 10243, 20480, 16415)"...
61.128.110.96 - chinese port scanner
This individual invaded my computer months ago---assessing my pay-pal account by using e checks to obtain money. He continues to get thru pay-pal inspite of them being notified...
71.98.210.40 - Port Scan Attacks
The IP <71.98.210.40> has been logged by my firewall as attempting smurf attack. It has logged two today 7/14/2010....
202.102.234.71 - Port Scan Attacks
The IP <202.102.234.71> is scanning my network constantly for open ports. My firewall is logging scans from this address every few minutes. Please stop this abuse of the internet!!!...
222.247.55.163 - Port Scan Attacks
The IP <222.247.55.163> is scanning my network constantly for open ports. My firewall is logging scans from this address every few minutes. Please stop this abuse of the internet!!!...
202.102.234.71 - daily port-Scan from 202.102.234.71
Port-Scan from 202.102.234.71 every day at least two times, TCP ports 8035, 8085, 3246, 1080, 2479, 8090, 80, 9000, 9090, 9415 and more. Firewall blocks it easily....
58.218.204.110 - daily port-Scan from 58.218.204.110
Port-Scan from 58.218.204.110 every day at least two times, TCP Ports 8035, 3246, 1080, 8090, 80, 9090 and more. Firewall blocks it easily.
...
221.195.73.68 - Persistent port scanning since the last couple of weeks
Sygate firewall message:
Somebody is scanning your computer.
Your computer's TCP ports:
9415, 3246, 2479, and 1080 have been scanned from 221.195.73.68.....
58.218.204.110 - Description explains it all
"GET http://proxy.adsweet.com/proxyheader.php HTTP/1.1" 404 213
I might be a nwb at setting up a server
but 5 times in the last 24 hours. Don't want it did not ask for it....
87.24.151.89 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
174.36.63.82 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
203.160.140.22 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
216.58.224.42 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
205.177.210.236 - Port Scanning scanning multiple ports
This IP address has been scanning our firewall consistantly dos scanning multiple ports...
203.160.142.64 - Constant port scanning
This IP address has been scanning our firewall consistantly for weeks scanning 10 random ports at a time....
123.30.184.35 - Constant port scanning
This IP address has been scanning our firewall consistantly for weeks scanning 10 random ports at a time....
68.94.156.1 - Continues to look for Open Ports
Still Scanning Hundreds of Ports at a time, His computer is tight, No doubt serious criminal intent. Anybody out there with some cyber weaponry I might aquire?...
88.208.237.28 - VOIP Scan detected
ET SCAN Sipvicious User-Agent Detected (friendly-scanner)
ET SCAN Sipvicious Scan...
70.183.193.78 - HACKER
this IP address continually attacks my site
70.183.193.78
he will use these additional IP adddresses since I try to block his main IP
166.204.202.15...
66.35.46.195 - Ports 33436 and 33437
Appears to be traceroutes, but why several hundred traceroutes to all of our public IPs/month?...
58.218.204.110 - This IP address attempted to Port Scan my computer
Net Barrier X5 on my Mac caught this IP address attempting to port scan my computer. Had just disinfected a family member's PC after discovering a number of trojans and other virii and malware....
87.24.151.89 - Port Scanning
Mon Jul 12 08:25:45 2010 Unrecognized attempt blocked from 87.24.151.89:2866 to 81.228.158.157 UDP:33381
Mon Jul 12 08:25:47 2010 Unrecognized attempt blocked from 87.24.151.89:2866 to 81.228.158.157...
58.218.204.110 - Flagged by IDS system - TCP Port Scan
Flagged by IDS system - TCP Port Scan
Date: 07/12 00:12:58 Name: (portscan) TCP Portscan
Priority: 4 Type: n/a
IP info: 58.218.204.110:n/a -> 204.xxx.xxx.xxx...
221.192.199.46 - 221.192.199.46 trying to hack my computer daily
Mostly to TCP port 8085 attempt to access my computer daily, multiple times as seen in log. I have blocked this IP address with McAfee but I am not a computer tech person, so I don't know what else t...
221.192.199.35 - Atempted Port scan
07/10/2010 09:15:33.304 - Possible Port Scan Dropped - Source:221.192.199.35, 12200, WAN -
Destination:204.195.30.19, 6588, WAN - TCP scanned port list, 8080, 7212, 8000, 1080, 8118 -...
62.3.194.146 - 62.3.194.146United Kingdom
port scan from this asshole several port probed to hack my computerinetnum: 62.3.192.0 - 62.3.195.255
netname: NILDRAM-DSL-STATIC-CUST29-01
descr: static /29 adsl customers
country: GB
adm...
62.3.194.146 - 62.3.194.146United Kingdom
port scan from this asshole several port probed to hack my computerinetnum: 62.3.192.0 - 62.3.195.255
netname: NILDRAM-DSL-STATIC-CUST29-01
descr: static /29 adsl customers
country: GB
adm...
212.227.35.235 - Why is China scanning for open ports?
I had a honeypot on a well known proxy port and a scan originated from China. What is the deal? Is it part of some sort of Chinese intelligence gathering?
I encourage you to discuss this with me vi...
71.234.102.202.h - Spaming Port Scanner
These folks been scanning least 12-20 ports all randomly ever hour on the hour.. I am using Norton FIrewall part of the security suite.. anyone else having theses troubles from this IP address?
...
scanning my port doing an executable file listed as an outgoing file using TCP...of course always goes thru a company router alot of times i backtarce and it comes up thru microsoft..i have learned ...
112.201.54.124 - [DoS Attack: RST Scan] from source 112.201.54.124
[DoS Attack: RST Scan] from source 112.201.54.124, port 4348, Wednesday, July 07,2010 14:56:27...
221.195.73.68 - Causing intermittent interruptions in service
7 07/06/2010 20:13:18 Unrecognized attempt blocked from 61.176.216.102:4463 to 24.206.117.104 TCP:2967
8 07/06/2010 20:34:11 Unrecognized attempt blocked from 61.164.148.11:6000 to 24.206.117.104 TC...
202.102.234.71 - Busy, busy China-men
Eight port scans in 2 seconds once a day from this IP and another 8 scans from 221.195.73.68 (you guessed it, also Hebei China) each day. My Zone Alarm firewall is catching them but this is annoying....
221.192.199.46 - 221.192.199.46 info from McAfee's Visual Tracer
Re 221.192.199.46 attacking TCP port 8085
using McAfee\'s Visual Tracer in Network View, I obtained this:
inetnum: 221.192.0.0 - 221.195.255.255
netname: UNICOM-HE
descr: China Unicom Hebei Prov...
I have this IP and few others from same location constantly scanning my router... It is sometimes starting to result in internet service loss or distruption. Is there any way to stop this ?...
68.142.233.94 - DOS Attack
admin login] from source 192.168.1.80, Monday, July 05,2010 15:39:35
[admin login failure] from source 192.168.1.80, Monday, July 05,2010 15:12:33
[admin login] from source 192.168.1.80, Monday, Jul...
15.216.110.140 - Port Scanning
Port scanning my home router. Afterwards repeated Lan access from remote entries in Router log to various computers behind my firewall. ...
87.24.151.89 - Port scan reported at 17:39 BST
Netgear router reported a port scan from 87.24.151.89 at 17:39 BST on July 05 2010....
202.102.234.71 - Getting hits 15 to 20 times a day
221.195.73.68 and 71.234.102.202.ha.cnc are trying to get at the MAC kernel. So far Norton has stopped them but it is very aggravating. I believe it is only a matter of time before they crash my sys...
202.102.234.71 - 202.102.234.71
Whoever that is he is trying to get access to my computer -.- Can I block him somehow?...
68.94.157.1 - Scanning 200 ports at a time, several attempts so far.
Appears to be looking for an entrance or specific port. scanning 200 ports at a time counting back from 10,000. Serious hacker, having scanned his IP found it locked tight. Most certainly only uses...
68.94.156.1 - Scanning 200 ports at a time, several attempts so far.
Appears to be looking for an entrance or specific port. scanning 200 ports at a time counting back from 10,000. Serious hacker, having scanned his IP found it locked tight. Most certainly only uses...
202.102.234.71 - 202.102.234.71
Port scans against my edge router from China; 8085, 9090, 2479, 9000, 3246, 8090. Multiple attempts....
221.192.199.46 - 221.192.199.46 221.192.199.48
I've had 10 of them already in the last hour please do something about this!...
202.102.234.71 - 202.102.234.71
and after 5min again with other ports
Your computer's TCP ports: 8085, 9415, 9090, 2479 and 9000 have been scanned from 202.102.234.71 ...
202.102.234.71 - 202.102.234.71
Your computer's TCP ports: 8085, 9090, 9000, 3246 and 1080 have been scanned from 202.102.234.71 ...
202.102.234.71 - scanning abuse ... I wish to prosecute
Somebody is scanning your computer.
Your computer\\\'s TCP ports:
8085, 9415, 9090, and 9000 have been scanned from 202.102.234.71..
I\\\'ve been having issues all night and was forced to dir...
74.208.221.132 - TCP port scans from 74.208.221.132
Your computer's TCP ports:
80, 3389, 110, and 1433 have been scanned from 74.208.221.132...
202.102.234.71 - Someones looking for open ports
Ports scanned 8085,8090,9000,2479,9090,9415 and 3246 from 202.102.234.71...
202.102.234.71 - TCP scans from 202.102.234.71
Somebody is scanning your computer.
Your computer\\\'s TCP ports:
8085, 9415, 2479, 3246 and 8090 have been scanned from 202.102.234.71....
87.248.217.254 - what the hell does this guy wants ???
**TCP FIN Scan** 192.168.2.101, 1874->> 87.248.203.254, 80 (from ATM1 Outbound)...
87.248.217.254 - what the hell does this guy wants ???
**TCP FIN Scan** 192.168.2.101, 1874->> 87.248.203.254, 80 (from ATM1 Outbound)...
87.248.217.254 - what the hell does this guy wants ???
**TCP FIN Scan** 192.168.2.101, 1874->> 87.248.203.254, 80 (from ATM1 Outbound)...
87.248.217.254 - what the hell does this guy wants ???
i have a port scan from this adress and he s from netherland.how can i block that ?...
125.45.109.166 - twelve connection attempts from port 12200
Jun 25 20:59:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.113:8080 in via ppp0
Jun 25 20:59:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.113:80...
125.45.109.166,1 - Non-stop scans daily
This must be blocked at the country\'s border by routers!!! Dont let this traffic slow down America\'s Internet....
125.45.109.166,1 - 125.45.109.166 is Back
24 June 2010 22:55:59 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]
21 June 2010 22:56:22 - TCP Packet - Source:125.45.109.166 Destination:62.49.7.5 - [PORT SCAN]...
80.121.201.140 - This ip is scanning my firewall every 25 minutes
UTC 06/24/2010 14:31:55.208 - Alert - Intrusion Prevention - Possible port scan detected - 80.121.201.140, 62128, X1 - my ip address, 48329, X1 - UDP scanned port list, 29083, 35915, 23834, 47445,...
84.119.41.172 - This ip is scanning my firewall every 25 minutes
UTC 06/24/2010 20:49:15.400 - Alert - Intrusion Prevention - Possible port scan detected - 84.119.41.172, 55432, X1, 84-119-41-172.dynamic.xdsl-line.inode.at - my ip, 12200, - UDP scanned port li...
202.102.234.71 - 202.102.234.71
This address scanned 7 times each to a different port all at 15:56:54 MDT on 6/24/10. Router dropped packet each time....
125.45.109.166 - 40 connection attempts from port 12200
Jun 24 18:14:25 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.131:8080 in via ppp0
Jun 24 18:14:25 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.131:80 i...
222.45.112.59 - port scans from 222.45.112.59
every day port scans, 9415, 9090, 2479, 9000 and 1080 where scanned, we know where he lives, lets get him!...
125.45.109.166 - Here we go again
In the space of two seconds, 125.45.109.166's port 12200 scanned my local ports 50050, 29505, 3246, 9415, 2479, 6588, 553, 554, 8888, 8000, 8080, 8085, 8088, 80, 3124, 3127, 3128, 7212....
222.59.180.204 - Starting to piss me off!
Security alert type : Port Scan
Protocol type : TCP
IP source address : 222.45.112.59
Time at last attempt : 6/20/10 07:21:17 AM
Number o...
125.45.109.166 - 20 connection attempts from port 12200
Jun 21 16:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.33:8080 in via ppp0
Jun 21 16:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.33:80 in ...
212.227.35.235 - [Port Scan] + [DOS]
Sat, 2010-06-19 21:52:51 - TCP Packet - Source:212.227.35.235,1107 Destination:00.000.000.000,15000 - [DOS]
Sat, 2010-06-19 21:52:51 - TCP Packet - Source:212.227.35.235,1108 Destination:00.000.000.0...
87.24.151.89 - Port scan reported at 07:16 BST
TCP Packet - Source:87.24.151.89 - [PORT SCAN]
Reported at 07:16 British Summer Time
...
125.45.109.166 - 40 connection attempts from port 12200
Jun 20 20:52:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.38:8080 in via ppp0
Jun 20 20:53:00 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.38:80 in ...
221.195.73.86 - More noob chinks
01:10:33 221.195.73.86 Subnet blocked for 1 min SCAN (16415, 14340)
If my firewall doesn't block them I got PeerBlock set to filter all China IPs anyways....
125.45.109.166 - 20 connection attempts from port 12200
Jun 20 00:02:23 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.66:8080 in via ppp0
Jun 20 00:02:23 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.66:80 in ...
77.40.130.251 - i have 30 events per day by this ip scanning my ports
77.40.130.251 this ip has been scaning my ports it shows me in mcafee log viewer - it is going 20-30 times a day for about week or two now, please advise what to do...
125.45.109.166 - Port scans
Somebody is scanning your computer.
Your computer's TCP ports:
8088, 553, 554, and 808 have been scanned from 125.45.109.166.....
119.48.58.38 - port scan attack
Port scan attack
Firewall protection
6/19/2010 12:04:...Blocked
Source IP address: 119.48.58.38
xxxxxxxxxx and xxxxxxxxxxxx
Port scan attack
Firewall protection
6/19/2010 11:00:... Blocked
So...
119.48.58.38 - port scan attack
Port scan attack
Firewall protection
6/19/2010 12:04:...Blocked
Source IP address: 119.48.58.38
xxxxxxxxxx and xxxxxxxxxxxx
Port scan attack
Firewall protection
6/19/2010 11:00:... Blocked
So...
64.29.219.134 - DoS Attack: ACK Scan
[DoS Attack: ACK Scan] from source: 64.29.219.134, port 35947, Monday, June 14,2010 00:51:05
[DoS Attack: ACK Scan] from source: 64.29.219.134, port 15082, Monday, June 14,2010 00:50:33
[DoS Attack:...
125.45.109.166 - nineteen connection attempts from port 12200
Jun 18 03:25:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.148:80 in via ppp0
Jun 18 03:25:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.148:3128 i...
125.45.109.166 - 40 connection attempts from port 12200
Jun 17 21:47:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.93:8080 in via ppp0
Jun 17 21:47:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.26.93:80 in ...
125.45.109.166 - 40 connection attempts from port 12200
Jun 17 11:23:03 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.25:8080 in via ppp0
Jun 17 11:23:03 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.25:80 in ...
68.105.28.11 - UDP Port Scans from 68.105.28.11 - Random ports
Random UDP (i.e., 5, 59396, 59908, 61956) port scans occur several times a day. These attempts are blocked and reported from the firewall (Comodo) application. All system related scans with various ma...
222.208.183.218 - Port 8000,8080,80,7212 scanning
This person/organisation was blocked at firewall on 6th June. Port scanning by them continues right through on the 17th June 2010...
125.45.109.166 - 20 connection attempts from port 12200
Jun 16 12:24:41 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.233:8080 in via ppp0
Jun 16 12:24:41 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.233:80 i...
125.45.109.166,1 - port scanning dirt bag
The commies are attacking by port scanning. At least this hacker is not succeeding....
125.45.109.166 - 39 connection attempts from port 12200
Jun 16 02:10:56 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.194:8080 in via ppp0
Jun 16 02:10:56 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.194:80 i...
125.45.109.166 - Repeated scans over the past month
Just suffered another attack. Same ports that were scanned earlier were scanned again from remote port 12200, in the exact same order as before. All in one second. Seems to be be automated....
125.45.109.166 - Repeated scans over the past month
This ip address has been scanning my computer twice a day for the past month. Each incident involves the scanning of several ports. Just a while ago, it scanned multiple ports in the space of a single...
125.45.109.166 - 74 connection attempts from port 12200
Jun 14 04:59:10 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.132:8085 in via ppp0
Jun 14 04:59:10 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.132:3246...
125.45.109.166 - fifteen connection attempts from port 12200
Jun 14 02:33:48 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 14 02:33:48 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:3246...
213.5.71.85 - Dolph Lambert
http://acleris.com/dls/dlsjs-07x/78/aerial-maps167.html Aerial Maps , bsqwqv , http://diverswest.biz/aspnet_client/system_web/061/motorcycle-gear194.html Motorcycle Gear , 43988 , http://consumed.co...
125.45.109.166 - seventeen connection attempts from port 12200
Jun 13 23:56:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 13 23:56:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:3246...
125.45.109.166 - nineteen connection attempts from port 12200
Jun 13 21:36:27 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 13 21:36:27 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:9415...
125.45.109.166 - 20 connection attempts from port 12200
Jun 13 19:16:14 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:8085 in via ppp0
Jun 13 19:16:14 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.170:9415...
221.192.199.46 - Scanning my ports everyday
Not sure how many weeks this has been going on, but I\'ve been checking my logs and this guy is constantly scanning them....
125.45.109.166 - 40 connection attempts from port 12200
Jun 13 08:29:39 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.72:8085 in via ppp0
Jun 13 08:29:39 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.72:9415 i...
222.59.180.204 - Constantly port scanning, firewall blocks all activity
Keep getting port scanning from
222.45.112.59
CHINA RAILWAY TELECOMMUNICATIONS CENTER
causing firewall to shut down all activity for a period of time. This is getting on my nerves now....
218.8.245.123 - this ip is connected with skyfleck.com
this IP is trying to connect to skyfleck.com
skyfleck.com/perfmonss.bin, 218.8.245.123, -, trojan Refpron
and
skyfleck.com/snmp.bin, 218.8.245.123, -, trojan Refpron
related IP\'s 221.19...
125.45.109.166 - 20 connection attempts from port 12200 in two seconds
Jun 11 22:36:51 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:8085 in via ppp0
Jun 11 22:36:51 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:3246...
125.45.109.166 - Fifteen connection attempts from port 12200 in one second
Jun 11 18:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:8085 in via ppp0
Jun 11 18:45:24 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.118:2479...
125.45.109.166 - 125.45.109.166
multiple port scans in a few minutes. Can we just smart bomb the site and get it over with?...
125.65.165.184 - script '/var/www/prx2.php' not found or unable to stat
This user tried to execute the script prx2.php...
125.45.109.166 - 82 connection attempts from port 12200
Jun 9 09:21:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.121:8080 in via ppp0
Jun 9 09:21:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.121:8085...
129.33.82.58 - 129.33.82.58 Durham United States
PORT SCAN FROM IBM HEADQUARTERS IN NORTH CAROLINA PORT RANGE 33452....33463 AND ICMP ECHO REPLYES.....DID THEY HACK COMPUTERS IN LUNCH BREAK?????...
193.88.6.12 - Keeps port scanning twice a day
Noticed this a while ago and the trend is almost alway the same, two port-scans per day directed to a single IP in my network....
125.45.109.166,1 - Unsolicited port scans on my Router
Unsolicited port scan on my Router
No.001 Apr 29 20:41:17 - [Firewall Log-PORT SCAN] TCP Packet - 125.45.109.166 --> 213.46.72.115
No.002 Apr 30 06:29:55 - [Firewall Log-PORT SCAN] TCP Packet - ...
221.192.199.46 - Excessive
Blocked incoming TCP connection request from 221.192.199.46:12200 from Hebei, China
I logged a couple hundred tcp attempts from the IP address, in a couple minutes. Enough is enough Is this legal?...
125.45.109.166 - IF This was my house
347 Blocked incoming TCP connection request from 125.45.109.166:12200 in less then 20 minutes, a bit excessive? ...
125.45.109.166,1 - Unsolicited Port Scan 8088, 8888, 808, and 29505
See this IP hit my firewall every six to seven hours....
218.3.204.139 - Tried requesting Remote Desktop Access
I was working online through my BSNL Broadband service in India. Suddenly, I received a remote desktop access request from this IP. It seems person at this IP had been analyzing my system, scanning fo...
125.45.109.166 - 80 connection attempts from port 12200
Jun 6 02:15:02 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.191:8080 in via ppp0
Jun 6 02:15:02 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.191:8085...
125.45.109.166 - 28 connection attempts from port 12200 in four seconds
Jun 5 05:59:28 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:8080 in via ppp0
Jun 5 05:59:28 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:80...
125.45.109.166 - 27 connection attempts from port 12200 in four seconds
Jun 5 05:18:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:8080 in via ppp0
Jun 5 05:18:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.215:80...
125.45.109.166,1 - 125.45.109.166 is Port Scanning
This IP address (125.45.109.166) is port scanning my router daily...
222.45.112.59 - Unsolicited Port Scan TCP ports 8085,9415,2479 & 9090.
Why is the Beijing Rail Company scanning Australian home PC\\\'s???
What is their intent?????...
222.45.112.59 - Unsolicited Port Scan TCP ports 8085,9415,2479 & 9090.
Why is the Beijing Rail Company scanning Australian home PC\'s???
What is their intent?????...
122.164.179.21 - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them. Recent Security logs:
Wed Jun 2 22:28:59 2010
=>Found attack from 122.164.179.21.
Source port is 10496 and...
221.192.199.48 - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them. Recent Security logs:
Wed Jun 2 21:04:07 2010
=>Found attack from 221.192.199.48.
Source port is 12200 a...
221.192.199.49 - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them. Recent Security logs:
Wed Jun 2 20:44:47 2010
=>Found attack from 221.192.199.46.
Source port is 12200 a...
116.87.165.13. - I found this in my router's security log
Recently I have noticed an increase of foreign ips scanning my ports. This is one of them....
221.192.199.46 - He's been scanning my ports on my router consantly
His constant scanning has been filling my router\'s security log. I'd would really like something to be done about this guy cuz its beginning to piss me off....
62.220.120.165 - Port scans, sub7 attacks and net spy attacks
A zombie or a little hacker? If you try to enter that IP address in your browser you'll see an ISS message so they're running a windows-based system....
124.237.84.206 - Post scan detected from IP address 124.237.84.206
Port scan reported by Netgear router at 07:01 GMT from IP address 124.237.84.206...
221.195.73.86 - attempts to connect on ports 1080 and 8000
attempts coming from port 12200 knocking on ports 8000 and 1080 every few minutes. piss off you a-holes....
125.45.109.166,1 - Port scanning entire 68.&69. netblocks repetitively
I ignored the few I reviewed at first. Still dont care...but its showing up on all the Comcast Resi IP connections I monitor, multiple times a day, since at least 4/27/10.
I still Love how people th...
125.45.109.166 - 41 connection attempts from port 12200 in five seconds
May 29 19:22:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.4:8080 in via ppp0
May 29 19:22:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.4:8085 in ...
212.227.35.235 - Port Scan
Port Scan from 212.227.35.235 occured 1 time on 29/05/2010 at 13:24 BST....
125.45.109.166 - 41 connection attempts from port 12200
May 29 10:39:18 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.168:8080 in via ppp0
May 29 10:39:18 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.31.168:8085...
212.227.35.235 - Portscans
Port scan! From 212.227.35.235:1094 to 87.54.108.171:6666, proto TCP (zone Untrust, int ethernet0/0). Occurred 1 times.
Port scan! From 212.227.35.235:1084 to 87.54.108.171:10000, proto TCP (zone Unt...
222.45.112.59 - Port Scanning
Getting scanned twice a day for the month of may 2010 so far not stopping...
222.186.30.249 - Portscan 24/7
2010-05-27 22:31:19 12613: May 27 21:31:24.208 PST: %SEC-6-IPACCESSLOGP: list 102 denied tcp 222.186.30.249(12200) (FastEthernet0/0 001d.70cc.60e2) -> (Local IP)(3128), 1 packet
2010-05-27 22:38:13 1...
125.45.109.166 - PITA server
This bot keeps port scanning 10-15 times a day!
[Firewall Log-PORT SCAN] TCP Packet - 125.45.109.166 --> xx.xx.xxx.xx...
125.45.109.166 - 84 connection attempts from port 12200
May 28 17:32:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.175:8080 in via ppp0
May 28 17:32:59 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.175:8085...
61.183.15.9 - Regular Port Scanning
Noticed our ZoneAlarm Pro software firewall (resident behind our router hardware firewall) picking up single port scanning attempts from 61.183.15.9 on May 13/10, May 24/10 and May 28/10. ZA Pro preve...
207.190.52.41 - Port Scanned
Our Network was port scanned at 00:03 GMT+1 by this IP Address. This IP address/company should be disconnected from the internet for criminal activity....
222.45.112.59 - how to stop this scanner
is possible to sue this chinese for the constant port scans?...
125.45.109.166,1 - 125.45.109.166 attacking multiple times a day
This IP address has been attempting to access my system for over a month. It's the same IP every time and it won't give up!...
61.183.15.9 - 61.183.15.9 - - [22/May/2010:19:20:53 -0400] "GET http://www.wantsfly.com/prx2.php HTTP/1.0" 403 210
61.183.15.9 - - [22/May/2010:19:20:53 -0400] "GET http://www.wantsfly.com/prx2.php HTTP/1.0" 403 210
What are the Chinese up to?...
222.45.112.59 - 8085, 9415, 2479, and 1080 have been scanned
Port scanning more ports today (seems to alternate):
8085, 9415, 2479, and 1080 have been scanned...
125.45.109.166,1 - Firewall alert to port scan attack
I get alerted by my firewall at least five times a day that the i.p. address 125.45.109.166 is attempting to scan my tcp ports. It happens at least five times a day. It makes several attempts to scan ...
222.45.112.59 - 222.45.112.59 scanning ports: 9415 9090 9000 8090
222.45.112.59 was caught and blocked by my firewell attempting to scan ports:
9415
9090
9000
8090...
198.186.192.44 - not sure what
198.186.192.44 - - [23/May/2010:21:35:54 -0400] "GET / HTTP/1.1" 200 110
...
61.183.15.9 - remote access attempt
perhaps a few of them:
64.2.64.167 - - [23/May/2010:18:00:44 -0400] \"GET /webmail/README HTTP/1.1\" 404 212
64.2.64.167 - - [23/May/2010:18:00:44 -0400] \"GET /roundcube/README HTTP/1.1\" 404 214...
125.45.109.166 - Another port scan
Yet another port scan from those dirty yellow niggers in China
Port scan attack Firewall protection 24/05/2010 20:06:29 Blocked Source IP addres...
125.45.109.166 - 45 connection attempts from port 12200
May 24 18:44:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.250:3246 in via ppp0
May 24 18:44:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.27.250:2479...
221.192.199.35 - prx2.php
[error] [client 221.192.199.35] script \\\\\\\'/var/www/vhosts/default/htdocs/prx2.php\\\\\\\' not found or unable to stat...
125.45.109.166 - 16 connection attempts from port 12200 in three seconds
May 24 00:11:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.194:8080 in via ppp0
May 24 00:11:20 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.194:80...
222.45.112.59 - Port Blockling Successful
Several times daily 222.45.112.59 has been scanning ports; 8085, 2479, 9090, 9000, 8080, 7212, 9415, 3246, 3128, 8090 - this is ridiculous. How do we stop this!! AARRGH...
125.45.109.166 - 54 connection attempts from port 12200
May 23 13:35:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.137:8080 in via ppp0
May 23 13:35:54 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.28.137:8085...
212.227.35.235 - 212.227.35.235 Karlsruhe
syn flood and after port scan 2:42:46 PM 212.227.35.235 Subnet blocked for 60 min SCAN (40960, 26385, 13572)
...
222.45.112.59 - eset detected port scanning attack since 5/18/10
it seams to know when to scan right after pc restores from sleep mode
but i cant find no malicious files with anti virus
...
125.45.109.166 - 38 connection attempts from port 12200 in four seconds
May 22 15:18:16 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.144:8080 in via ppp0
May 22 15:18:16 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.29.144:8085...
I dont understand what all this is but I know Panda antivirus was recommended to me along time ago and on this case as well as many other has worked wonderfully at stopping what ever someone is trying...
74.125.127.118 - ZIOGOOGLE caught port scanning agian
Another address from which google uses to carry out port scan attempts and other malicious attacks on internet users
everyone boycott google now and switch to the safe alternative of yahoo or scroo...
74.125.19.100 - ZIOGOOGLE caught port scanning agian
I'm also contiunually getting port scanning attempts/attacks on my IP from the zionist monster google
why cant they just f*k off filthy bastards...
222.45.112.59 - Port scan
Same here, been getting port scans for the last month from those filthy yellow niggers
Panda Global Protection 2010 incident report
...
125.45.109.166,1 - Port scan
Had yet another port scan from dirty yellow niggers from Bejing
Panda Global Protection 2010 incident report
...
222.45.112.59 - Endless port scanning 3128 9000 8085 1080 ....
till only scan... no problem! But is so annoying! would like to smash it down ;)...
125.45.109.166 - 39 connection attempts from port 12200 in four seconds
May 20 12:51:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.43:8080 in via ppp0
May 20 12:51:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.43:8085 i...
125.45.109.166 - This ip seems to be looking for proxies to attack
Doing a quick scan every couple of days. Always the same ports:
Tue, 2010-05-18 06:31:32 - TCP Packet - Source:125.45.109.166,12200 Destination:70.111.62.37,6588 - [DOS]
Tue, 2010-05-18 06:31:32 - T...
125.45.109.166 - 22 connection attempts from port 12200 in three seconds
May 19 23:31:17 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.165:8080 in via ppp0
May 19 23:31:17 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.165:80...
222.45.112.59 - port Scan
Another scan of my ports of China Address:222.45.112.59
these idiots not understand that any attempt was blocked.
Have a good firewall...
125.45.109.166 - 31 connection attempts from port 12200 in three seconds
May 18 23:45:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.175:8080 in via ppp0
May 18 23:45:12 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.175:24...
66.35.46.194 - Various Port scanning port 12462 & 10672
58.60.10.10 is scanning on ports 12462 & 10672 to get access to my network...
58.60.10.10 - Various Port scanning port 12200
58.60.10.10 is scanning on port 12200 to get access to my network...
200.75.107.161 - Various Port scanning port 63479
200.75.107.161 is scanning on port 63479 to get access to my network...
220.162.207.62 - Various Port scanning port 4545 & 4547
220.162.207.62 is scanning on ports 4545 & 4547 to get access to my network...
41.224.105.218 - Various Port scanning port 63441 & 63643
41.224.105.218 is scanning on ports 63441 & 63643 to get access to my network...
125.45.109.166,1 - Random Port Scan
Symantec firewall detcted the port scan from TCP 12200 to my port 9000. It was blocked by default. I just reinstalled my OS and was updating windows service packs when it came up. It only happened onc...
75.125.39.74 - Intrusion.Generic.TCP.Flags.Bad.Combine.attack TCP from 75.125.39.74 to local port 1234
75.125.39.74 Intrusion.Generic.TCP.Flags.Bad.Combine.attack TCP from 75.125.39.74 to local port 1234...
125.45.109.166 - 36 connection attempts from port 12200 in three seconds
May 17 22:40:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:8080 in via ppp0
May 17 22:40:14 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:80...
222.45.112.59 - Somebody is scanning your computer from 222.45.112.59
222.45.112.59 - Geo Information
IP Address 222.45.112.59
Host 222.45.112.59
Location CN, China
City Beijing, 22 -
Organization CHINA RAILWAY TELECOMMUNICATIONS CENTER
ISP CHINA RAILWAY TE...
75.125.39.74 - Internet Protocol (IP) half scan IP 75.125.39.74
Internet Protocol (IP) half scan IP 75.125.39.74...
66.196.65.172 - 66.196.65.172&66.196.65.174
SUNNYVALE DESPERATE PORT SCANNING LIKE CRAZY SLEEZY SLAVES FROM CALIFORNIA INKTOMI CORPORATION WHO ARE THOSE GUYS WHO ARE SO CURIOUS TO ENTER WITH BRUTE PORT SCANNING INTO MY COMPUTER , I WILL LOOK FO...
66.196.65.172 - 66.196.65.172&66.196.65.174
SUNNYVALE DESPERATE PORT SCANNING LIKE CRAZY SLEEZY SLAVES FROM CALIFORNIA INKTOMI CORPORATION WHO ARE THOSE GUYS WHO ARE SO CURIOUS TO ENTER WITH BRUTE PORT SCANNING INTO MY COMPUTER , I WILL LOOK FO...
125.45.109.166 - 34 connection attempts from port 12200 in two seconds
May 17 13:37:04 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:8080 in via ppp0
May 17 13:37:04 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.241.185:80...
125.45.109.166 - port scan from 125.45.109.166
been getting port scans from this filth every day for the last month.
Port scan attack Firewall protection 17/05/2010 12:38:43 Blocked Source ...
125.45.109.166,1 - Constant daily attacks
My DSL router has been receiving daily DOS and PORT SCANS from this IP for several weeks.
Fri, 2010-05-14 18:58:30 - TCP Packet - Source:125.45.109.166,12200 Destination:70.252.56.222,8088 - [DOS]
...
125.45.109.166 - 37 connection attempts from port 12200
May 16 18:45:08 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.177:3246 in via ppp0
May 16 18:45:08 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.177:80 i...
125.45.109.166 - 37 connection attempts from port 12200 in four seconds
May 16 09:38:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.18:8080 in via ppp0
May 16 09:38:34 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.30.18:8085 i...
222.45.112.59 - What the hell...
What the hell is wrong with these Chinese idiots from Beijing irritating us by scanning our ports.
We know you guys live for $3 a day...but we have better things to do so stop annoying us....
125.45.109.166 - 33 connection attempts from port 12200 in two seconds
May 15 09:23:33 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.178:8080 in via ppp0
May 15 09:23:33 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.216.178:80...
125.45.109.166 - 28 connection attempts from port 12200 in three seconds
May 14 14:09:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.186:8080 in via ppp0
May 14 14:09:19 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.236.186:32...
125.45.109.166,1 - Router shows constant activity on incoming various ports
Router log shows constant activity on incoming various ports,
I don\\\'t know what to do. I put it in the restricted sites in internet optons....
125.45.109.166 - 56 connection attempts from port 12200
May 13 19:34:58 localhost kernel: ipfw: 55003 Deny TCP 125.45.109.166:12200 4.154.26.141:8080 in via ppp0
May 13 19:34:59 localhost kernel: ipfw: 55003 Deny TCP 125.45.109.166:12200 4.154.26.141:3246...
218.30.22.82 - continues to attack daily
5/10/2010 11:43:22 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 218.30.22.82. Protocol/service: UDP on local port 1434. Time: 5/10/2010 11:43:22 PM...
122.225.100.154 - continues to attack daily
5/11/2010 1:47:18 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker\'s IP address: 122.225.100.154. Protocol/service: UDP on local port 1434. Time: 5/11/2010 1:47:18 PM...
122.225.100.154 - continues to attack daily
5/11/2010 1:47:18 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 122.225.100.154. Protocol/service: UDP on local port 1434. Time: 5/11/2010 1:47:18 PM
...
60.161.78.155 - continues to attack daily
5/11/2010 3:23:41 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker's IP address: 60.161.78.155. Protocol/service: UDP on local port 1434. Time: 5/11/2010 3:23:41 PM
...
190.202.117.178 - continues to attack daily
5/12/2010 6:47:44 PM Intrusion.Win.MSSQL.worm.Helkern! Attacker\'s IP address: 190.2.29.193. Protocol/service: UDP on local port 1434. Time: 5/12/2010 6:47:44 PM...
124.40.51.146 - This IP has been scanning ports on my firewall.
I've been watching this IP address scan ports on my firewall. I'm getting UDP packet dropped as he scans each one....
221.192.199.35 - TCP port scans daily 221.192.199.35
TCP port scan from 221.192.199.35 several times a day (Hebei, China).
...
221.192.199.48 - How long?
"Report the abuser now!"?? FOR WHAT?? I see 35 reports here going back over 3 months and current reports keep coming in. WHEN will anything get done? HOW MANY reports does it take? Does this site comp...
125.45.109.166 - 60 connection attempts from port 12200
May 12 04:49:21 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.242:8080 in via ppp0
May 12 04:49:21 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.24.242:3246...
125.45.109.166,1 - Constant scanning, 1 minute apart
This IP has been port scanning my system, one minute apart at times....
95.100.105.83 - Port scan from AKAMAI TECHNOLOGIES
16:41:05 95.100.105.83 Subnet blocked for 60 min SCAN (40688, 42480, 41200)ASSHOLES!!!!
...
125.45.109.166 - 41 connection attempts from port 12200 in two seconds
May 11 08:54:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:8080 in via ppp0
May 11 08:54:44 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:80...
125.45.109.166 - 41 connection attempts from port 12200 in three seconds
May 11 07:03:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:8080 in via ppp0
May 11 07:03:13 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 12.76.210.160:80...
222.45.112.59 - Constant Port Scanning
Every 2 hours this guy is scanning my ports. I\\\'ve changed my ip address and he seems to be able to tack me down....
222.45.112.59 - Constant Port Scanning
Every 2 hours this guy is scanning my ports. I\'ve changed my ip address and he seems to be able to tack me down....
125.45.109.166,1 - This IP has been port scanning our network for weeks now.
Router log...
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destination:213.41.191.190,9090 - [DOS]
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destin...
125.45.109.166,1 - This IP has been port scanning our network for weeks now.
Router log...
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destination:213.41.191.190,9090 - [DOS]
Tue, 2010-04-06 23:26:48 - TCP Packet - Source:125.45.109.196,12200 Destin...
125.45.109.166 - Several port scan daily
Several port scans every day now for two weeks. Cisco firewall blocks them thank goodness.
Emailed a few formal complaints to operators of IP\'s ISP but no replies....
125.45.109.166 - 62 connection attempts from port 12200
May 10 04:17:42 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.178:8085 in via ppp0
May 10 04:17:42 localhost kernel: ipfw: ##### Deny TCP 125.45.109.166:12200 4.154.25.178:3246...
125.45.109.166 - Almost daily port scanning from port 12200.
This person tries every port possible one after another then has lunch and tries them all again. Everything gets blocked, but I just don't like it. 50 attempts on 05-09-2010....
83.85.97.43 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he\\\\\\\'s using rippers everytime he view my website....
83.85.99.29 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he\\\'s using rippers everytime he view my website. can...
81.204.56.105 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he\'s using rippers everytime he view my website. can y...
82.170.234.57 - This guy uses rippers everytime he checks my website
user of this ip address was banned from viewing my website for personal reasons but apparently he keeps on checking the website and i discovered he's using rippers everytime he view my website. can yo...
125.45.109.166 - Firewall Port Scan continually
09.05.10 12:56:45 kernel Symantec Intrusion Prevention has detected and blocked a portscan from 125.45.109.166 ...
125.45.109.166,1 - This IP has been port scanning my router frequently many times a day
This IP has been port scanning my router frequently many times a day...
125.45.109.166,1 - I've been receiving security bulletins from my wireless router that this china located address is port scanning
Does this site do anything to stop any reported abuse?
is it even possible to stop them as he may be using an IP masking software such as hideip etc etc and
the person may well be a 45 year old ...
222.45.112.59 - Same as everyone else...
Small sample:
05/07/2010 04:17:36.032 - Possible Port Scan Dropped - Source:222.45.112.59, 12200, WAN - Destination:76.14.238.90, 8090, WAN - TCP scanned port list, 8085, 9415, 2479, ...
78.188.215.105 - Scanning RDP port 3389
This IP is logged as connecting to various workstations RDP port 3389 and attempting a brute dictionary style attack to guess the login credentials....
222.45.112.59 - Persistent Port Scanning
Every day some one from China is constantly scanning my ports. This ip address 222.45.112.59 among others has several attemps per day. Ports 3128, 9000, 9090, 3246, 8090 and 1080...
125.45.109.166,1 - Persistent attack from IP 125.45.109.166
This IP has been port scanning our network for weeks now. Reviewing the logs, it appears the (source port) Src 12200 is hitting a variety of of destination ports. The firewall appears to be doing it...
125.45.109.166,1 - Constant attacks daily trying to get into my ports
Constant attacks daily from IP 125.45.106.66 trying to gain access at port 12200...
222.45.112.59 - Constant port scanning
Scans either at 20min or at 4-hour intervals.
Scans ports 9420, 8085, 8090, 9415, 3246, 3128, 2479, 9000, 9090. Always from port 12200....
117.87.35.251 - china unicom henan province network doing portscans daily on pc
Scans my pc 2-3 times a day it seems...
221.192.199.46 - attacking router
attempts from this IP day and night every 5 minutes or so. Log is filled with attempts by this IP. Have home office, very concerned about the persistent attempts....
221.192.199.48 - Several port scanns by this guy, wide range of ports
Wed May 5 12:45:35 2010
=>Found attack from 221.192.199.48.
Source port is 12200 and destination port is 3246 which use the TCP protocol.
Wed May 5 12:52:15 2010
=>Found attack from 221.192.199.46...
221.192.199.46 - Port Scanning
Port scanning as others reported...phishing for open ports.
221.192.199.46...
10.0.69.187 - Port Scanning from 10.0.69.187 and 10.0.69.61
My Bitdefender reported me some port scan attempts.
I checked the logs of the Firewall.
\\\"A port scan generated by the IP 10.0.69.187 has been detected
Event Type: Port scan Detected
Action T...
125.45.109.166,1 - attempted port entry
Constant attacks daily from IP 125.45.106.66 trying to gain access at port 12200...
125.45.109.166,1 - 125.45.109.166,12200 is continuing to scan ports and has for several days
125.45.109.166,12200 is continuing to scan ports and has for several days...
125.45.109.166 - regularly attacking my ports
I get about an attack an hour from this Chinese IP. Hopefully my firewall is successfully blocking it....
125.45.109.166,1 - Attempted port entry
Port scan entry 125.45.109.166,12200 attempts to attack daily, couple of times during the day....
125.45.109.166,1 - Attempted port entry
Port scan entry 125.45.109.166,12200 attempts to attack daily, couple of times during the day....
115.178.60.138 - Failed login attempts from this IP
5 failed login attempts to account root (system) -- Large number of attempts from this IP: 115.178.60.138...
222.45.112.59 - Port Scanning
Logs showing portscan attempts every other 5-10 minutes that I'm online ...
125.65.112.161 - prince philip was right
why is it all tiddlywinks that are doing this,theyre already buying all our metal.never eating chinky food again...
125.45.109.166 - 125.45.109.166 TCP 12200 to (my IP tcp 9000)
this is the latest ipfrom china attempting to portscan my ip addy. fortunatly autoblock takes care of these pests.this is second one from beijing,usually from ningbo,i think it might have something to...
23.128.240.85 - Repeated port scans on port 49154
This IP address has run port scans repeatedly, every 7 to 8 minutes. The address is reserved to IANA. I will send them an abuse report....
221.12.160.198 - Apr 30 15:13 found (again from China) 11 attempts to connect
Apr 30 @ 15:13 found (11) attempts to connect continuously each time with warning: this IP is sending large amounts of various TCP/IP packets. Receiving IP addresses (some previous and some new) from ...
221.12.160.198 - 5 connections
router log has flagged up five attacks from this address
"Fri, 2010-04-30 19:48:45 - TCP Packet - Source:221.12.160.198,12200 Destination:89.242.250.95,8008 - [DOS]
Fri, 2010-04-30 19:48:45 - TCP Pa...
221.192.199.48 - Another Chinese idiot messing with our computers.
I still keep getting port scans from these morons.
It is sad that the Chinese government is so weak in technology that it cannot catch these port scanner in their country and arrest them or give ch...
221.192.199.48 - Another Chinese idiot messing with our computers.
I still keep getting port scans from these morons.
It is sad that the Chinese government is so weak in technology that it cannot catch these port scanner in their country and arrest them or give ch...
125.45.109.166 - Another Chinese idiot messing with our computers.
Another Chinese idiot messing with our computers. You port scanners have no life.
I feel sorry for you or your job (if you are getting paid for doing this shit)...
218.30.22.82 - Detected: Intrusion.Win.MSSQL.worm.Helkern
25.4.2010 13:48:22 Network attack, blocked. Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 218.30.22.82 to local port 1434...
122.225.100.154 - Detected: Intrusion.Win.MSSQL.worm.Helkern
28.4.2010 21:38:08 Intrusion.Win.MSSQL.worm.Helkern UDP from 122.225.100.154 to local port...
60.161.78.155 - Detected: Intrusion.Win.MSSQL.worm.Helkern
30.4.2010 15:31:19 UDP from 60.161.78.155 to local port 1434...
125.45.109.166 - 27 portscans in 3 days from 125.45.109.166
Notice this occuring through Norton's and had pop-up notifications 5 times in 2 minutes for this IP. This is what I can get out of it...
Activity: An intrusion attempt by 125.45.109.166 was blo...
125.45.109.166 - They have scanned us the last two days
There was no harm. Firewall blocked all access. This is not the first time we have been scanned from a China IP. About a month ago there were several all in one week. It was the same result, our fi...
125.45.109.166 - portscan from 125.45.109.166
125.45.109.166 has been running portscans for the last two days...
125.45.109.166 - attempts to attack
I\\\\\\\'m a home computer user , don\\\\\\\'t know why this computer in China tries to attack my computer, my anti-virus program blocked an attack right now and I had another attack attempt two days ...
125.45.109.166 - scanning hourly
scanning hourly and weekly, router is blocking, but concerned because I also have a home office and running router behind another router (Cisco for home office use). D-link only router that allows Cis...
121.134.150.3 - Constant Port Scanning by 222.45.112.59
triggers IDS all the time when machine is on public wan
Event Description: Somebody is scanning your computer. Your computer\\\'s TCP ports: 8085, 9415, 2479, 3246 and 9090 have been scanned from 2...
222.45.112.59 - Constant Port Scanning by 222.45.112.59
triggers IDS all the time when machine is on public wan
Event Description: Somebody is scanning your computer. Your computer\'s TCP ports: 8085, 9415, 2479, 3246 and 9090 have been scanned from 222...
222.45.112.59 - Constant Port Scanning by 222.45.112.59
Router logs are filling up with \"Blocked incoming TCP connection request from 222.45.112.59:12200\" notifications. There are 2 every 3 hours around the clock.
Scanning ports: 3128, 2479, 9415, 9...
125.45.109.166 - Port Scans from 125.45.109.166
Multiple port scans from this IP address over the last few hours...
218.206.235.130 - Nmap TCP Scan
attempt to scan and access router on TCP port. Reported and blocked by software firewall....
125.45.109.166 - 125.45.109.166 Multiple TCP packets on port 12200
More attacks from China. According to Whois from China Unicom Henan province network.
Two - three times a day.
More info here http://forums.remote-exploit.org/general-discussion/11321-serious-offsho...
125.45.109.166 - Port scanning and DOS attack
Normal China attacks... The big problem is that it is continuous and very annoying.
What we need is some way to stop the router from even responding to this batch of IPs....
89.187.31.106 - Port Scanning by Infostealer Snifula.B
Every time I get onto the internet, Norton Protection Center says it has blocked an intrusion attempt by this IP address. Again this occurs almost every time I surf the web....
125.45.109.166 - Multiple attempts to connect
April 27 (11) attempts to connect within 6 secs. continuously. Alerts stating: This IP sending a large amount of various TCP/IP packets....
Can't we do something to stop this!!
The only way to stop clogging up the router email is to turn off all router warnings.
Regards,
John...
Can't we do something to stop this!!
The only way to stop clogging up the router email is to turn off all router warnings.
Regards,
John...
221.12.160.198 - Portscan warning from 221.12.160.198
I just received a Portscan warning from 221.12.160.198. I seem to be getting quite a bit of attempted Portscans from China these days. This one cam at 1:45 pm Pacific....
221.192.199.46 - Repeated attacks on router
Port scans throughout they day.
[LAN access from remote] from 221.192.199.48:12200 to my local IP:8085. ...
123.11.240.130 - Continuous connecting attempts
Apr 23 10:13:59 - Sending a large amount of various TCP/IP packets.(11) connecting attempts in 4 sec. ...
114.47.171.19 - annoying logs
so many attempts during the past days scanning the same ports over and over.
cleaned logs numerous times and they just keeps filling up, once they are refreshed...
124.40.51.150 - Port Scanning
ISA Server detected an all port scan attack from Internet Protocol (IP) address 124.40.51.143....
123.4.42.80 - Port Scan detected
Time: 5:04AM
Date: 4/23/2010
Intrusion: Portscan.
Intruder: 123.4.42.80(12200)
Risk Level: Medium.
Protocol: TCP
Attacked Port: 9000...
222.45.112.59 - Port scan by 222.45.112.59
Same thing as described earlier - the same ports were scanned....
123.4.42.80 - 11 connection attempts in 3 secs
Apr 21 11:05:53 was last attempt. Found 11 connection attempts in 3 secs. My security message stated that this IP (China, again) was sending a large amount of various TCP/IP packets....
222.136.98.98 - possible intruder
firewall is blocking this stupid kiddo/bot from getting on my computer...someone take him out plz...
221.192.199.49 - Source port is 12200 and destination port is 8000
About a hundred attempts at ports 8080 and 8000 over the past few days from CHINANET Hunan province network....
222.136.98.98 - Portscans von 222.136.98.98
At 3 times (3 different days) BD's firewall indicated me that IP 222.136.98.98 was scanning my PC. Kill the rat !...
221.192.199.46 - Repeated attacks on router
This IP [221.192.199.46 ] consistently and repeatedly attacks my router with port scanning...
221.192.199.46 - Repeated attacks on router
This IP [221.192.199.46 ] consistently and repeatedly attacks my router with port scanning...
221.192.199.46 - Repeated attacks on router
This IP [221.192.199.46 ] consistently and repeatedly attacks my router with port scanning...
Apr 19 18:40:01 cs1 kernel: [821357.125652] Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=40:40:49:92:1d:9b:88:43:e1:08:de:ff:08:00 SRC=92.52.76.67 DST=173.203.105.107 LEN=32 TOS=0x00 PREC=0x00 TTL=1 ID...
93.183.135.113 - port scanning
from this ip my firewall detected port scanning on date 20:59 19.4.2010 ...
222.59.180.204 - Port Scan by 222.45.112.59 CHINA RAILWAY TELECOMMUNICATIONS CENTER
inetnum: 222.45.0.0[Who Is IP][trace][Reverse IP Search] - 222.45.255.255[Who Is IP][trace][Reverse IP Search]
netname: HTECH
descr: Kunde Htech Ltd Co
descr: 11 Yanan Road No398,Hangzhou,Zhejiang...
123.11.242.231 - Another chinese port scanner
Several scans in past 48 hours - specifically, ports 3128,1080,8000,9000,8085,3246,2479,9415 were probed. Appears to be automated, since a few other ports are scanned within half a second or so of the...
221.45.122.59 - More annoying port scans
This is the third IP address doing port scans on my computer: 221.45.122.59
I thought it was just the Chinese doing these scans, and now there\'s Japan too. I wonder what they get with all these mill...
99.165.229.47 - router blocked attack
=>Found attack from 99.165.229.47.
Use the ICMP protocol.
Sat Apr 17 00:31:16 2010 ...
61.155.58.151 - router blocked attack
=>Found attack from 61.155.58.151.
Source port is 6000 and destination port is 1433 which use the TCP protocol.
Sat Apr 17 03:35:38 2010...
123.11.242.231 - More annoying port scans
This is the second IP address doing port scans on my computer: 123.11.242.231
The previous one was: 221.192.199.48
How the hell do we stop these Idiots. They have no life and too much time in th...
77.45.164.126 - router blocked attack
Found attack from 77.45.164.126.
Source port is 1152 and destination port is 8085 which use the TCP protocol.
Sat Apr 17 06:31:16 2010
...
125.128.105.249 - router blocked attack
Sat Apr 17 17:19:02 2010
=>Found attack from 125.128.105.249...
61.183.15.9 - Asian Monkey
61.183.15.9 - - [17/Apr/2010:09:35:28 -0400] \"GET http://www.wantsfly.com/prx2.php HTTP/1.0\" 404 529 \"-\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\"...
77.75.232.236 - scanned at least 10 ports
Recent connectivity problems with broadband - sorted by provider - now being scanned by MURPHX INNOVATIVE in EASTLEIGH HAMPSHIRE - suspiciously physically rclose to my locality. No problems prior to o...
222.45.112.59 - Consistent scanning
This IP has been scanning several ports at very close to 4-hour intervals for about a week now. Ports are 3128, 3246, 2479, 8085, 9090, 9415, 1080, and 9000 so far. ...
119.188.7.31 - on going Port Scan
Firewall tracked an IP port scanning our external address for most of the ngiht - Starting a New Port Scan every 4 sec - this has happened before - actually shuting down the older unit - but not any m...
193.43.134.114 - Infostealer Snifula.B HTTP Activity
Every time I get on the internet, this IP address Port Scans my computer. This occurs every time I switch to another webpage. It shows up in Norton Protection Center 2008. Norton placed the IP address...
89.187.37.106 - Infostealer Snifula.B HTTP Activity
Every time I get on the internet, this IP address Port Scans my computer. This occurs every time I switch to another webpage. It shows up in Norton Protection Center 2008. Norton placed the IP address...
66.35.46.194 - Ports 33436 and 33437
Apr/14/2010 19:56:40 Drop UDP packet from WAN 66.35.46.195:10596 65.25.237.67:33436 Rule: Default deny
Apr/14/2010 19:56:35 Drop UDP packet from WAN 66.35.46.195:10596 65.25.237.67:33436 Rule: De...
221.192.199.35 - Multiple IPs, all originate in Beijing
firewall detected port scan attack on 4/13/10 at 9:35PM EST. several other IP addresses also originating from this providence in beijing have either tried a DoS or a DNS cache poisioning attack....
221.192.199.48 - Getting scaned repeatedly by
This person\\\'s name is Kong Lingfei. He is located somewhere in China, just west of Beijing (? - spell). I located him using : IP-address.com . It turns out this \\\"Mo****F****** is working in ta...
221.192.199.48 - Getting scaned repeatedly by
This person\'s name is Kong Lingfei. He is located somewhere in China, just west of Beijing (? - spell). I located him using : IP-address.com . It turns out this \"Mo****F****** is working in tandom...
222.45.112.59 - Read this!
UPDATE: I decided to screw with this hacker\'s IP and started scanning ALL of their ports in fragments. To add to their confusion I use a VPN and kept changing IP\'s while I was doing it to send a mes...
221.192.199.48 - Read this!
I can't find the same thread with the IP that keeps scanning me but wanted to share some info you might find useful. I've been scanned by 222.45.112.59 every day, every hour for awhile. I launched a l...
222.45.112.59 - Many scanned as well daily
I've been using Comodo firewall and appears it is blocking all of the port scans. It wasn't until I really started looking into my own security that I noticed the 222.45.112.59 IP constantly every day...
221.192.199.48 - port scan attacks
i keep getting port scans from this ip address it is always blocked but is still an unwanted intrusion can i stop them anyway?...
66.196.65.168 - 66.196.65.168 a bunch of wankers assholes!!!
2/10/2010 10:32:16 PM 66.196.65.168 Subnet blocked for 60 min SCAN (46275, 46787, 46531)
2/10/2010 10:32:15 PM 66.196.65.170 Subnet blocked for 60 min SCAN (46019, 47299, 45763)
2/10/2010 10:32:15 P...
221.192.199.48 - No Action from 221.192.199.48 abuse site - suggest PING flood
These jerks won\\\'t quite.
I suggest a multihost, coordinated PING flood of 221.192.199.48. Simple, but highly effective if several hundred hosts start doing it right now....
222.45.112.59 - Multiple Scans daily
Receiving continous Port Scanning daily from this IP. Examples of Ports: 9415,3246,8085,2479,1080. As in prior complaints, it is being managed by my Firewall as well as Banned...
98.174.29.24 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.147 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.144 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.59 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.83 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.9 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.72 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.88 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.48 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.35 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits....
98.174.29.24 - Port scans and exploits from Cox Comm. address space
Over about a month my bank received over 260 attacks including port scans, TCP FIN scans, iframe exploits. ...
221.192.199.48 - consistent daily mutiple attempts at penetration
this ip 221.192.199.48 shows up in my router firewall logs and Commodo firewall logs daily , multiple instances , repeated in quick succession 3x/sec tcp probes every 7 minutes from thier port 12200 t...
221.192.199.46 - consistent daily mutiple attempts at penetration
this ip 221.192.199.46 shows up in my router firewall logs and Commodo firewall logs daily , multiple instances , repeated in quick succession 3x/sec tcp probes every 7 minutes from thier port 12200 t...
221.192.199.46 - Scanning following ports every few minutes...
Filling up my firewall log with these blocked requests:
[INFO] Sat Apr 03 05:59:49 2010 Blocked incoming TCP connection request from 221.192.199.46:12200 to ip:3246
[INFO] Sat Apr 03 05:59:49 201...
221.192.199.35 - Ports Scanned and Amplitude Modulation
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.35
Time at last attempt : 3/30/10 04:46:10 PM
Number ...
193.120.212.47 - UDP Port scans every 4 minutes
This IP has started port scans on my network 2 days ago. My logs are full of scans from this IP every 4 minutes on different UDP ports....
63.138.203.17 - Port Scan Into Smurf Aplification attack
Weird thing this morning my sonic wall get reset at at 8:00 a.m. est. not even 2 minutes later we get a port scan from IP: 63.138.203.17, on this same network in the same connection we then get a Smur...
222.136.98.98 - Portscan from 222.136.98.98
Yesterday and today my Bitdefender's firewall have blocked some port scan from IP 222.136.98.98.
I hope someone will stop him....
216.240.129.237 - port scanning every 5-15 seconds
every 5-15 seconds this ip address scans my port, out of the blue it just happened....
222.186.25.29 - port scanning - constant connection attempts
122.227.164.71 keeps trying every port imaginable, trying to find a way to make a connection through my router....
66.235.184.210 - Port Scanning
107 port scans on ports 53 and 80 over a course of 6 hours and 54 minutes. All scans rated "high" by ZoneAlarm....
221.192.199.46 - Scanning following ports every few minutes
Not sure how long this has been going on.
[INFO] Tue Jan 12 20:46:18 2010 Blocked incoming TCP connection request from 221.192.199.48:12200 to Port :2479
[INFO] Tue Jan 12 20:36:53 2010 Blocked...
66.35.46.193 - scanning
he keeps scanning from his port 10524 and keep it going on for a while, firewall is stopping him though...
192.168.1.114 - port scan attempts.
MANY port-scan attempts. All blocked by Bitdefender thankfully....
221.192.199.48 - several attempts at scanning local ports on my PC
Norton Internet Security Suite prevented inbound TCP connection from 221.192.199.48 targeting my local service ports: (2479)(3246)(8085)...
222.215.230.49 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
61.183.15.9 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
221.192.199.35 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
221.195.73.86 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
222.186.25.29 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
122.227.164.71 - Incessent remote access attempts
Continuous Multiple attempts at [LAN access from remote] systems (all part of CHINANET) are being logged by my router. Just this past week the following addresses have been logged attempting access.
...
115.89.24.180 - trying to attack through firewall
=>Found attack from 115.89.24.180.
Source port is 12200 and destination port is 3246 which use the TCP protocol.
=>Found attack from 115.89.24.180.
Source port is 12200 and destination port is 8...
89.148.38.149 - atemp made to scan my computer
this ip address atemped to search my pc for open ports ...
81.208.123.221 - Scanning my System by sending large amount of Various TCP/IP Packet
My Security stopped and displayed 12 attempts to access within 5 minutes. Stating that this IP is attempting to Scan by sending large amount of Various TCP/IP Packets and secure sockets....
67.36.220.70 - TCP NUll Scans Several Times a day.
This ip address continues to be detected by our firewall as scanning our ports. Have sent email, but did not stop the scanning....
124.40.51.150 - I am getting 24/7 UDP port scanning from these IP's.
124.40.51.150
124.40.51.149
124.40.51.147
124.40.51.146
124.40.51.145
124.40.51.143
124.40.51.142
It started on 3/12/10 and it seems to be hitting in a sequence of the scanners IPs with ajoynin...
87.0.40.124 - Portscans IP 87.0.40.124
3 Portscans from Italy on my router:
No. Time Source IP DestinationIP Note
1|03/14/2010 22:59:31 |87.0.40.124:2538 |84.245.32.12:6662 |ATTACK
ports scan TCP
End of Alert
No. ...
141.223.23.36 - Port Scanning & Brute Force FTP Login Attempts
Looks to be a script setup to find IPs where port 21 is open, then it attempts to brute force/guess Administrator passwords. Thankfully remote administration is disabled for my server. The attempts se...
222.136.98.98 - Portscans van 222.136.98.98
Yesterday and today my firewall blocked 4 portscans from IP 222.136.98.98 on my port 6000. As I read i'm not the only one. I wish I could get that chinese in my hands......
188.243.250.101 - Many attempts to access my Ports
Unable to ID what Country this IP is coming from. My software reports 16 attempts within 45 minutes to access my Ports....
122.227.164.71 - looking for http port 8000 /intl/zh-CN from 122.227.164.71
Looking for web based protocol on my port 8000. Obviously the wrong protocol yet they found it....
115.89.24.180 - scanner
Found attack from 115.89.24.180.
Source port is 12200 and destination port is 8085 which use the TCP protocol. ...
221.195.82.100 - Port Scanning
Total Attacks Blocked 40 252
High Risk 0 0
Med Risk 0 0
Low Risk 40 252
TCP Port Scan Detected, Packet Dropped 40 252 ...
218.207.71.223 - 218.207.71.223......BEIJING CHINA MONKEY
21:50:32 218.207.71.223 Subnet blocked for 60 min SCAN (10243, 16415, 47138, 36895, 14348, 64776, 38175)
...
121.12.107.194 - attack
This ip address has been trying to access my pc. I went to sleep with it on and when i got up my malware protection was telling me it had blocked this I.p. address from accessing my computer 20 times....
221.195.73.68 - Scanning stopped after third report.
Daily port scanning stopped as of 02 March 2010 after third abuse report to Unicom....
194.109.21.230 - port scan
I have tried to contact the provider of this ip and here is their response: That box is proxyscan.xs4all.nl. Every time you connect to one of our irc servers, this box will scan for open proxies which...
222.136.98.98 - port scan from 222.136.98.98
From three month this boy (with the IP 222.136.98.98) scanning my ports. My Firewall block his attacks. My ports was scaned by 222.186.25.125 and 222.186.25.7, too( maybe the same little boy)....
222.215.230.49 - Cyber Warfare
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
119.145.149.38 - Cyber Warfare
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
74.125.19.100 - GOOGLE PORT SCAN IP RANGE....WTF???
02:23:07 74.125.19.100 Detected attack, host not blocked SINGLE_SCAN_PORT (4803)
02:23:07 74.125.87.190 Detected attack, host not blocked SINGLE_SCAN_PORT (4291)
02:23:06 74.125.87.91 Detected attac...
189.127.142.34 - Port scanning HACK
Firewall log:
Mon Mar 8 19:30:47 2010 =>Found attack from 189.127.142.34. Source port is 1837 and destination port is 61043 which use the TCP protocol....
Firewall log:
Mon Mar 8 04:35:12 2010 =>Found attack from 221.192.199.48. Source port is 12200 and destination port is 3246 which use the TCP protocol. Mon Mar 8 04:35:12 2010 =>Found attack from 221...
222.208.183.218 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
58.215.75.62 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sun Mar 7 23:57:19 2010 =>Found attack from 58.215.75.62. Source port is 4982 and destination port is 10000 which use the TCP protocol....
115.89.24.180 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sun Mar 7 21:53:16 2010 =>Found attack from 115.89.24.180. Source port is 12200 and destination port is 3246 which use the TCP protocol....
74.69.105.64 - uninvited port probe
Sun Mar 7 14:12:34 2010
=>Found attack from 74.69.105.64.
Source port is 60864 and destination port is 443 which use the TCP protocol....
71.36.188.21 - uninvited port probe
Sun Mar 7 12:12:21 2010
=>Found attack from 71.36.188.21.
Source port is 46053 and destination port is 51215 which use the TCP protocol.
This is from my security log on my router....
115.89.24.180 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sat Mar 6 23:05:23 2010 =>Found attack from 115.89.24.180. Source port is 12200 and destination port is 8085 which use the TCP protocol. Sat Mar 6 23:05:23 2010 =>Found attack from 115...
61.14.72.182 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Fri Mar 5 17:07:03 2010 =>Found attack from 61.14.72.182. Source port is 2278 and destination port is 5900 which use the TCP protocol....
118.169.207.62 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Mar 4 17:34:16 2010 =>Found attack from 118.169.207.62. Source port is 40163 and destination port is 25 which use the TCP protocol. ...
221.195.73.86 - Just cut the chinks off...
I have various port scanning going on from this primary provider: China-Network-Communications-Group China Network Communications (CNC Group)
Just find the main line and cut the chinks off until th...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
61.183.15.9 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
204.236.206.235 - Possible Bot
Host ISP: AMAZON.COM INC
Host Name: ec2-204-236-206-235.compute-1.amazonaws.com
.
Firewall log:
Wed Mar 3 15:49:06 2010 =>Found attack from 204.236.206.235. Source port is 29046 and destinatio...
221.192.199.46 - port scanning every 5 minutes
Like the other report, firewall is dropping connections from this IP with origin port 12200 to either 3246 or 8085 internal ports. The pattern is repeating every 5 minutes filling the logs....
200.57.68.15 - Wetback Hacker or Bot Net Dupe?
Firewall log:
Tue Mar 2 17:07:49 2010 =>Found attack from 200.57.68.15. Source port is 1816 and destination port is 5900 which use the TCP protocol. ...
218.4.58.82 - 218.4.58.82 PORT SCAN CHIPMUNK
23:43:05 218.4.58.82 Subnet blocked for 60 min SCAN (13568)
...
190.34.74.210 - Central American MONKEY MONKEY MONKEY
Firewall log:
Tue Mar 2 14:30:12 2010 =>Found attack from 190.34.74.210. Source port is 33410 and destination port is 22 which use the TCP protocol....
58.221.34.18 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
201.160.123.211 - Wetback Port Scanner
Firewall log:
Sun Feb 28 23:23:54 2010 =>Found attack from 201.160.123.211. Source port is 1161 and destination port is 34365 which use the TCP protocol.
...
65.55.50.85 - Port Scanning
PORT SCANNER ATTACK detected from 65.55.50.85. Source port is 62423, and destination port is 8000 which use the TCP protocol...
121.214.200.159 - 121.214.200.159 Port scan successfully blocked the bastard
121.214.200.159 Port scan successfully blocked the bastard...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sat Feb 27 22:36:54 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 8080 which use the TCP protocol. Sat Feb 27 22:36:54 2010 =>Found attack from 2...
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
190.43.245.118 - Peruvian FLAKE!
Firewall log:
Fri Feb 26 15:22:00 2010 =>Found attack from 190.43.245.118. Source port is 2065 and destination port is 23 which use the TCP protocol....
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. This will effectively form a...
202.108.254.228 - Asian MONKEY MONKEY MONKEY MONKEY
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
93.186.118.142 - multiple DOS attempts on multiple ports
Tue, 2010-02-23 23:26:03 - TCP Packet - Source:93.186.118.142,3611 Destination:88.79.124.196,7474 - [DOS]
Tue, 2010-02-23 23:26:04 - TCP Packet - Source:93.186.118.142,3565 Destination:88.79.124.196,...
221.192.199.35 - Asian MONKEYS MONKEYS MONKEYS MONKEYS
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.35 - Asian MONKEYS MONKEYS MONKEYS MONKEYS
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.35 - Asian MONKEY MONKEY MONKEY MONKEY
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
80.239.242.252 - 80.239.242.252
Hostname: global-turbo-1-lvs-seele.opera-mini.net
ISP: TeliaSonera AB
Organization: Opera Software ASA
Proxy: None detected
Type: Broadband
Assignment: Static IP PORT SCAN01:55:37 80.239.242.252 ...
61.163.6.227 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Mon Feb 22 19:54:20 2010 =>Found attack from 61.163.6.227. Source port is 6000 and destination port is 1433 which use the TCP protocol.
...
217.132.88.100 - Have a Bagle and some Lockes you knikajou!
Firewall log:
Mon Feb 22 16:30:15 2010 =>Found attack from 217.132.88.100. Source port is 10396 and destination port is 44566 which use the TCP protocol....
93.186.118.142 - Port scanning attack
on 02/20/2010 at 11:12:47 this IP was logged 13 times in my router: ports scan TCP 93.186.118.142 ATTACK.
...
221.192.199.48 - ISPs just need to do an upstream block
I wish ISPs and major providers would take the hint that there's nothing of value coming from this IP address and it's cohort 221.192.199.46 and block it up stream. Yes it's drastic, but since they've...
61.183.15.9 - Asian Monkey Monkey Monkey Monkey Monkey
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.192.199.48 - chink keeps scanning my ports
Why are these jerks scanning my ports? I allowed my neighour access to my internet network and now all of a sudden I get these awful breed of people trying to steal identity. Shut them down. Stop wast...
174.129.122.100 - Port Scanner
Firewall log:
Sun Feb 21 15:20:31 2010 =>Found attack from 174.129.122.100. Source port is 32386 and destination port is 5900 which use the TCP protocol....
221.192.199.35 - 221.192.199.35 Scanning port 80, 8080, 8443
This IP along with other China based IP showed up in Router log to be trying to access ports 80, 8080 and 8443....
93.186.118.142 - DOS attempted on port 7878
DOS Attack on port 7878 failed as detected by firewall. Message from firewall: TCP Packet - Source:93.186.118.142,3609 Destination:84.58.16.119,7878 - [DOS]...
221.192.199.35 - This site has been scanning my camera ports
We have several IP cameras at our business and 221.192.199.35 has been scanning our ports 8080 and 8081...
221.192.199.35 - This site has been scanning my camera ports
We have several IP cameras at our business and 221.192.199.35 has been scanning our ports 8080 and 8081...
221.192.199.35 - This site has been scanning my camera ports
We have several IP cameras at our business and 221.192.199.35 has been scanning our ports 8080 and 8081...
66.165.164.254 - Puerto Rican MONKEYS!
Attacking From Miami, FL
Firewall log:
Sun Feb 21 01:41:53 2010 =>Found attack from 66.165.164.254. Source port is 27381 and destination port is 5900 which use the TCP protocol....
188.134.1.141 - Russian Hacks!
Firewall log:
Sat Feb 20 20:34:25 2010 =>Found attack from 188.134.1.141. Source port is 3067 and destination port is 4899 which use the TCP protocol....
221.192.199.48 - Asshole chink keeps scanning my ports
See numerous chink IP addresses in my logs every time I look. This particular sh!thead (+/- a few numbers on the last IP octet) has been scanning for at least 5 hours now. Dumb@ss keeps scanning the...
90.58.44.157 - Freaking Frogs!
Firewall log:
Sat Feb 20 17:58:57 2010 =>Found attack from 90.58.44.157. Source port is 1771 and destination port is 34365 which use the TCP protocol....
217.58.115.114 - Hacker WOPs
Firewall log:
Sat Feb 20 15:42:19 2010 =>Found attack from 217.58.115.114. Source port is 4526 and destination port is 32000 which use the TCP protocol.
...
24.87.34.195 - Scanning and DOS attacking my ip
am receiving alot of dos attacks in all my ports on my router......
90.58.44.157 - Freaking Frogs!
Firewall log:
Fri Feb 19 16:55:58 2010 =>Found attack from 90.58.44.157. Source port is 3547 and destination port is 34365 which use the TCP protocol.
...
98.246.22.77 - 98.246.22.77- Newton or Oregon, Portland spoofed IP????
03:50:14 98.246.22.77 Subnet blocked for 60 min SCAN (54770, 2035, 14323)
those IP are scanning ports from Europe daily on this net range so i will call Chinese to spank them ALL!!!!!...
65.126.184.164 - 65.126.184.164 COLORADO DUMBASS HACKER
03:49:47 65.126.184.164 Subnet blocked for 60 min SCAN (21750, 26102, 31990)
wtf is going on with those sleezy yankee worms????...
62.39.109.24 - Haven't done anything really, yet
Have been trying to access my FTP server without any username and password....
130.94.69.111 - Haven't done anything really, yet
Have been trying to access my FTP server a few time without any username and password....
66.240.231.154 - Monkeys! Monkeys! Monkeys! Monkeys!
Amature Attack on Port 80...
Firewall log:
Thu Feb 18 03:05:05 2010 =>Found attack from 66.240.231.154. Source port is 17272 and destination port is 80 which use the TCP protocol. ...
61.183.15.9 - Asian Monkey Monkey Monkey Monkey
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
222.208.183.218 - Port Scaning
17.02.2010 22:24:16
222.208.183.218 SCAN (16415, 36895, 14340)
17.02.2010 21:14:21
222.208.183.218 SCAN (16415, 36895, 14340)
17.02.2010 19:43:44
222.208.183.218 SCAN (16415, 36895, 1434...
222.136.98.98 - more Port scan from 222.136.98.98
Since December I have experienced more than 30 intrusion attempts of the Chinese 222. 136.98.98 fortunately blocked by my firewall...
62.146.210.52 - 62.146.210.52 AVIRA HEADQUARTERS PORT SCAN 2 TIMES
General Information
Hostname: www1.avira.com
ISP: IP Partner
Organization: Avira GmbH
Proxy: None detected
Type: Corporate
Blacklist:
Geo-Location Information
Country: Germany
State/...
62.146.210.52 - 62.146.210.52 AVIRA HEADQUARTERS PORT SCAN
General Information
Hostname: www1.avira.com
ISP: IP Partner
Organization: Avira GmbH
Proxy: None detected
Type: Corporate
Blacklist:
Geo-Location Information
Country: Germany
State/...
222.208.183.218 - port scanning
Constant port scanning. Reported twice to their service provider to no avail....
92.30.36.138 - 92.30.36.13- north u.k PORT SCAN
18:08:17 92.30.36.138 Subnet blocked for 60 min SCAN (22013, 27645, 31229)
all the bastards are from U.K AND USA....i will bann you forever ...
89.144.195.33 - Vienna 89.144.195.33
14:42:27 89.114.195.33 Subnet blocked for 60 min SCAN (10221, 17389, 26861)
another port scan another jerk blocked...
64.13.192.122 - 64.13.192.122 CULVER CITY port scan
14:34:54 64.13.192.122 Subnet blocked for 60 min SCAN (61164, 60908, 30189)
SUCKERS......LOL...
67.228.100.146 - Every Day an attack by them
It's not the first attempt, now I am going to do everything to get them down....
75.72.178.147 - 75.72.178.147 Minneapolis -USA
04:00:22 75.72.178.147 Subnet blocked for 60 min SCAN (5350, 12006, 17126)
ARE THOSE GUYS DUMBASSES????? WHO KNOWS???...
99.228.172.207 - 99.228.172.207 Brampton Canada
PORT SCAN 03:55:56 99.228.172.207 Subnet blocked for 60 min SCAN (39652, 46564, 52196)
......i think those guys are in vain trying to hack me LOL...
63.160.235.197 - PORT SCAN
PORT SCAN FROM THIS BASTARD 2 TIMES IN 5 MINUTES , IP IS BLOCKED :P.....I WILL SEND YOU POLICE HOME MTF.....:p02:56:41 63.160.235.197 Subnet blocked for 60 min SCAN (2260, 16596, 30676, 44244, 59860, ...
219.238.46.170 - Yet AGAIN... Asian Monkeys!
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
221.195.73.86 - AGAIN--- Asian Monkeys!
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit qu...
83.136.12.22 - nmap null scan attacks
repeated..about 3-4 a day nmap null scan attacks are blocked by norten...
221.195.73.86 - Asian Monkeys!
FYI: The Chinese Government is in a perpetual state of cyber warfare. The objective, for now, is to plant as many trojans as possible in american based computer users machines. The trojans will sit...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Sun Feb 14 02:03:28 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 7212 which use the TCP protocol. Sun Feb 14 02:03:28 2010 =>Found attack from 2...
112.72.212.5 - Korean MONKEY MONKEY MONKEY MONKEY
Firewall log:
Fri Feb 12 19:53:38 2010 =>Found attack from 112.72.212.5. Source port is 40132 and destination port is 21 which use the TCP protocol....
221.192.199.48 - 221.192.199.46 scanning ports 8000 and 8085
I'm seeing repeat scans of ports 8000 and 8085 from IP address 221.192.199.46. It seems to scan my IP addresses about once every few minutes. Usually SYN scans.
A sample log is listed below.
...
218.61.126.21 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Feb 11 20:15:11 2010 =>Found attack from 218.61.126.21. Source port is 6000 and destination port is 2967 which use the TCP protocol....
174.129.136.236 - Hacker MONKEY
Firewall log:
Thu Feb 11 17:29:48 2010 =>Found attack from 174.129.136.236. Source port is 7265 and destination port is 5900 which use the TCP protocol....
221.214.140.228 - The Asian MONKEY again...
Firewall log:
Thu Feb 11 16:40:42 2010 =>Found attack from 221.214.140.228. Source port is 6000 and destination port is 2967 which use the TCP protocol....
118.161.248.236 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Feb 11 13:48:08 2010 =>Found attack from 118.161.248.236. Source port is 1154 and destination port is 25 which use the TCP protocol. ...
113.31.22.140 - Asian MONKEY MONKEY MONKEY MONKEY
Chinese Government seeks only to subvert internet rules and use the internet as a vehicle to case disruption and/or conduct espionage. I say we should nuke them and cull the herds of Asian Monkeys! ...
113.31.22.140 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Thu Feb 11 02:54:11 2010 =>Found attack from 113.31.22.140. Source port is 6000 and destination port is 1433 which use the TCP protocol....
117.21.241.10 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Wed Feb 10 22:15:59 2010 =>Found attack from 117.21.241.10. Source port is 31721 and destination port is 22 which use the TCP protocol. ...
61.176.194.37 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Wed Feb 10 19:00:49 2010 =>Found attack from 61.176.194.37. Source port is 6000 and destination port is 1433 which use the TCP protocol....
221.192.199.48 - 221.2.2.2-222.254.254.254
these ip's are Chinese botnets port scanning ports 1080,8000,8080,8090 repeatedly on most ip addresses...
99.168.108.14 - NMap Xmas scan
He/she used a NMap Xmas scan on me 3 times but it got blocked everytime...
221.195.73.86 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Tue Feb 9 22:20:46 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 8000 which use the TCP protocol.
...
222.208.183.218 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Tue Feb 9 21:17:12 2010 =>Found attack from 222.208.183.218. Source port is 12200 and destination port is 8080 which use the TCP protocol. ...
221.192.199.48 - Repeated port scanning of home router
My dad and I were talking and he said that he kept getting disconnected because this IP address was continuously scanning his router. I entered the IP address into Google and found this page. It is ...
221.192.199.48 - Repeated Scanning
As described earlier, Scans 8085 and 8090 repeatably. Flooding report logs making it harder to discover other threats....
61.240.233.218 - Chinese Government Hack Attempt: Asian MONKEYS
Firewall log:
Tue Feb 9 00:39:15 2010 =>Found attack from 61.240.233.218. Source port is 6000 and destination port is 1433 which use the TCP protocol....
209.40.195.111 - Hacking Originating from 209.40.195.111...
Firewall log:
Mon Feb 8 23:54:51 2010 =>Found attack from 209.40.195.111. Source port is 5774 and destination port is 80 which use the TCP protocol.
...
211.225.7.2 - Asian MONKEY MONKEY MONKEY MONKEY
Firewall log:
Mon Feb 8 20:33:34 2010 =>Found attack from 211.225.7.2. Source port is 6000 and destination port is 1433 which use the TCP protocol.
...
174.129.74.32 - Hacker Monkey
Firewall log:
Mon Feb 8 19:28:57 2010 =>Found attack from 174.129.74.32. Source port is 3883 and destination port is 5900 which use the TCP protocol....
217.76.32.53 - From Russia, with Love
Firewall log:
Mon Feb 8 18:06:46 2010 =>Found attack from 217.76.32.53. Source port is 6000 and destination port is 1433 which use the TCP protocol....
61.183.15.9 - MONKEY MONKEY MONKEY MONKEY
Firewall log:
Mon Feb 8 16:37:21 2010 =>Found attack from 61.183.15.9. Source port is 12200 and destination port is 7212 which use the TCP protocol. Mon Feb 8 16:37:21 2010 =>Found attack from 61.18...
61.164.79.150 - Asian MONKEYS
What do you get when you cross an human with a simean? An ASIAN MONKEY!
Firewall log:
Mon Feb 8 02:36:29 2010 =>Found attack from 61.164.79.150. Source port is 6000 and destination port is 2967 ...
125.65.112.161 - Shit Eating Asian MONKEYS
Firewall log:
Mon Feb 8 02:10:39 2010 =>Found attack from 125.65.112.161. Source port is 12200 and destination port is 7212 which use the TCP protocol. Mon Feb 8 02:10:39 2010 =>Found attack from 12...
221.214.140.228 - Port Scanning Asian MONKEY
Firewall log:
Mon Feb 8 00:58:18 2010 =>Found attack from 221.214.140.228. Source port is 6000 and destination port is 2967 which use the TCP protocol. ...
85.17.90.214 - Port Scanner
Firewall log:
Sun Feb 7 22:13:28 2010 =>Found attack from 85.17.90.214. Source port is 17349 and destination port is 5901 which use the TCP protocol....
202.111.175.190 - Another Port Scanning Asian MONKEY
Firewall log:
Sun Feb 7 21:19:43 2010 =>Found attack from 202.111.175.190. Source port is 6000 and destination port is 1433 which use the TCP protocol. ...
61.183.15.9 - Another Asian Port Scanning MONKEY!
Firewall log:
Sun Feb 7 19:31:43 2010 =>Found attack from 61.183.15.9. Source port is 12200 and destination port is 8000 which use the TCP protocol....
114.32.3.125 - Another Asian Port Scanning MONKEY!
Firewall log:
Sun Feb 7 19:18:49 2010 =>Found attack from 114.32.3.125. Source port is 61179 and destination port is 22 which use the TCP protocol....
221.195.73.68 - More Asian MONKEYbusiness
Firewall log:
Sun Feb 7 17:10:01 2010 =>Found attack from 221.195.73.68. Source port is 6000 and destination port is 8000 which use the TCP protocol. Sun Feb 7 17:10:01 2010 =>Found attack from 221....
122.225.100.154 - UDP port scan attacker's ip is my default gateway ip
every day comodo firewall blocks attacker's udp port scan. The attacker's ip is the same as my default gateway ip 192.168.1.xxx. The ports are from 0 to 8 to 19 to 1249 to 62159 many ports in between....
193.233.69.54 - Russian Port Scanning Hacks
Firewall log:
Sun Feb 7 13:13:20 2010 =>Found attack from 193.233.69.54. Source port is 1324 and destination port is 1433 which use the TCP protocol....
187.67.20.134 - Spic Greasers Port Scanning third world MONKEY
ISP: COMITE GESTOR DA INTERNET NO BRASIL
Domain Name: VELOXZONE.COM.BR
Host Name: bb431486.virtua.com.br
IP Decimal: 3141735558
Firewall log:
Sun Feb 7 00:02:09 2010 =>Found attack f...
58.215.65.118 - Asian Monkeys (descendant of monkeys)
Firewall log:
Sat Feb 6 23:03:46 2010 =>Found attack from 58.215.65.118. Source port is 6000 and destination port is 1433 which use the TCP protocol. ...
207.150.242.106 - Wet Back Attack from 'rican Monkey
Firewall log:
Sat Feb 6 21:51:55 2010 =>Found attack from 207.150.242.106. Source port is 3506 and destination port is 5900 which use the TCP protocol...
222.208.183.218 - Chinese Government Sucks Asian MONKEYS
Firewall log:
Sat Feb 6 17:09:18 2010 =>Found attack from 222.208.183.218. Source port is 12200 and destination port is 8080 which use the TCP protocol....
221.195.73.86 - Asian Monkeys
Firewall log:
Sat Feb 6 13:56:01 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 8000 which use the TCP protocol....
67.202.56.222 - Port scanning Monkey
Firewall log:
Sat Feb 6 12:23:03 2010 =>Found attack from 67.202.56.222. Source port is 12200 and destination port is 16696 which use the TCP protocol....
61.139.105.163 - Regularly scanning ports
I reported this abuser at
https://forms.us-cert.gov/report/index.php...
221.195.73.86 - Asian Monkey
Firewall log:
Sat Feb 6 00:00:38 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 8000 which use the TCP protocol....
221.195.73.86 - Chink Monkey port scanner
Anyone that thinks the Chinese Government isn\'t complicit in these activities is ignorant. Remember Tiananmen Square...
Firewall log:
Fri Feb 5 22:13:38 2010 =>Found attack from 221.195.73.86. ...
222.122.156.55 - Port Scanning Asian Monkey
Firewall log:
Fri Feb 5 21:37:59 2010 =>Found attack from 222.122.156.55. Source port is 6000 and destination port is 1433 which use the TCP protocol....
93.186.118.142 - Port Scanning Monkey
Firewall log:
Fri Feb 5 18:19:46 2010 =>Found attack from 93.186.118.142. Source port is 2602 and destination port is 1986 which use the TCP protocol....
reported by kaspersky...
200.168.1.188 - Spic Hacker
Firewall log:
Fri Feb 5 00:17:06 2010 =>Found attack from 200.168.1.188. Source port is 2169 and destination port is 5900 which use the TCP protocol...
221.195.73.86 - Port Scanning Asain MONKEY.
Firewall log:
Thu Feb 4 20:56:05 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 8000 which use the TCP protocol. ...
119.145.248.42 - Port Scanning Asain MONKEY.
Firewall log:
Thu Feb 4 20:44:44 2010 =>Found attack from 119.145.248.42. Source port is 6000 and destination port is 1433 which use the TCP protocol....
60.168.248.36 - Asian MONKEY!
Firewall log:
Thu Feb 4 17:09:03 2010 =>Found attack from 91.121.26.91. Source port is 46462 and destination port is 3128 which use the TCP protocol....
118.169.201.104 - Another Asian Monkey...
Firewall log:
Thu Feb 4 16:34:30 2010 =>Found attack from 118.169.201.104. Source port is 42173 and destination port is 25 which use the TCP protocol....
222.215.230.49 - More Chinkage. Asian Monkeys!
Thu Feb 4 14:35:05 2010 =>Found attack from 222.215.230.49. Source port is 12200 and destination port is 7212 which use the TCP protocol....
61.139.105.163 - Regularly scanning ports
Most days, sometimes twice a day. Router firewall seems to stop them....
204.152.205.160 - Log attacks from 204.152.205.160
Somebody is scanning your computer.
Your computer\\\'s TCP ports:
8085, 8000, 6588, and 808 have been scanned from 204.152.205.160..
8080, 9090, 6588, and 8118 have been scanned from 204.152....
61.183.15.9 - Chink Monkeys feeble attempt
Commies suck dicks...
Wed Feb 3 22:40:04 2010 =>Found attack from 61.183.15.9. Source port is 12200 and destination port is 9090 which use the TCP protocol...
61.183.15.9 - Asian Monkeys... Port Scanning
Wed Feb 3 22:40:04 2010 =>Found attack from 61.183.15.9. Source port is 12200 and destination port is 9090 which use the TCP protocol...
221.195.73.86 - The CHINKS just keep trying...
The very definition of insanity is the repetition of an action, and expecting a different response. This CHINK is Certifiable... ASIAN mokey that refuses to learn.
Wed Feb 3 19:17:14 2010 =>Found...
123.196.117.99 - Yet ANOTHER Asian Monkey...
Wed Feb 3 18:02:53 2010 =>Found attack from 123.196.117.99. Source port is 208 and destination port is 22 which use the TCP protocol. ...
204.152.205.160 - Hacker Monkey
Wed Feb 3 17:27:13 2010 =>Found attack from 204.152.205.160. Source port is 12200 and destination port is 9415 which use the TCP protocol. Wed Feb 3 17:27:13 2010 =>Found attack from 204.152.205.160. ...
123.49.60.70 - Hack Monkey
Wed Feb 3 16:15:23 2010 =>Found attack from 123.49.60.70. Source port is 28827 and destination port is 8443 which use the TCP protocol....
211.157.108.232 - Asian Monkeys! Chink Bastards!
Have an Egg Roll on me...
Wed Feb 3 00:39:03 2010 =>Found attack from 211.157.108.232. Source port is 6000 and destination port is 3306 which use the TCP protocol....
221.195.73.86 - CHINK Attack. Monkeys!!!
Tue Feb 2 21:14:53 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 7212 which use the TCP protocol. Tue Feb 2 21:14:53 2010 =>Found attack from 221.195.73.86. Sour...
221.195.73.86 - More Chinkage. Freaking MONKEYS!!!
Tue Feb 2 19:08:08 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 7212 which use the TCP protocol...
58.18.141.167 - log entry
Source port is 6000 and destination port is 1433 which use the TCP protocol. ...
125.65.112.161 - log entry
Source port is 12200 and destination port is 7212 which use the TCP protocol.
Source port is 12200 and destination port is 8000 which use the TCP protocol. ...
122.227.164.71 - log entry
Source port is 6000 and destination port is 8000 which use the TCP protocol. ...
218.61.126.21 - log entry
Source port is 6000 and destination port is 2967 which use the TCP protocol....
41.235.141.25 - log entry
Source port is 4928 and destination port is 23 which use the TCP protocol. ...
221.195.73.86 - log entry
Source port is 12200 and destination port is 8000 which use the TCP protocol....
207.150.242.106 - Puerto Rican Monkey Business
Tue Feb 2 12:20:43 2010 =>Found attack from 207.150.242.106. Source port is 4385 and destination port is 5900 which use the TCP protocol....
Tue Feb 2 01:45:19 2010 =>Found attack from 59.187.192.107. Source port is 6000 and destination port is 8080 which use the TCP protocol....
221.195.73.86 - The Chinks are at it again!
Mon Feb 1 20:13:08 2010 =>Found attack from 221.195.73.86. Source port is 12200 and destination port is 7212 which use the TCP protocol....
116.9.95.1 - The Daily Chink Attack...
Mon Feb 1 17:46:41 2010 =>Found attack from 116.9.95.1. Source port is 63897 and destination port is 10000 which use the TCP protocol....
122.227.164.71 - More CHINKING away at my armor...
These Assholes never give up. The Chinese government must be Complicit in these activities...
Mon Feb 1 03:22:21 2010 =>Found attack from 122.227.164.71. Source port is 12200 and destination port ...
211.142.243.90 - More CHINKS trying to put a Chink in my armor
Sun Jan 31 20:44:53 2010 =>Found attack from 211.142.243.90. Source port is 6000 and destination port is 2967 which use the TCP protocol.
...
116.9.95.1 - No CHINKS in my armor.
Sun Jan 31 20:05:37 2010 =>Found attack from 116.9.95.1. Source port is 3354 and destination port is 10000 which use the TCP protocol....
202.108.77.139 - The CHINKS won't find any Chinks in my armor.
Sun Jan 31 17:32:39 2010 =>Found attack from 202.108.77.139. Source port is 49170 and destination port is 22 which use the TCP protocol....
222.136.98.98 - Port scan from this idiot
Looks like I\\\\\\\\\\\\\\\'m affected too, there\\\\\\\\\\\\\\\'s something fishy with this lamerzor.
From todays router log:
[Sun Jan 31 14:05:37 2010]:[FW] **Port Scan Detected** 222.136.98.98 ->...
61.183.15.9 - Chinking Away at my Firewall
Sun Jan 31 13:13:17 2010 =>Found attack from 61.183.15.9. Source port is 12200 and destination port is 8000 which use the TCP protocol. Sun Jan 31 13:13:17 2010 =>Found attack from 61.183.15.9. Source...
221.195.73.68 - More Hijinx from the Chinks
Sun Jan 31 04:01:47 2010 =>Found attack from 221.195.73.68. Source port is 6000 and destination port is 8000 which use the TCP protocol. Sun Jan 31 04:01:47 2010 =>Found attack from 221.195.73.68. Sou...
221.195.73.68 - More Hijinx from th Chinks
Sun Jan 31 04:01:47 2010 =>Found attack from 221.195.73.68. Source port is 6000 and destination port is 8000 which use the TCP protocol. Sun Jan 31 04:01:47 2010 =>Found attack from 221.195.73.68. Sou...
222.45.112.59 - Port scanning 8085 and 8090
Scanning also done by 221.192.199.46 and 221.192.199.48. About 500 scans/day...
60.168.248.36 - More Chinese Crap
Sun Jan 31 00:38:41 2010 =>Found attack from 60.168.248.36. Source port is 13683 and destination port is 5900 which use the TCP protocol....
201.160.117.142 - El Port Scanner
Sat Jan 30 22:03:09 2010 =>Found attack from 201.160.117.142. Source port is 1415 and destination port is 34365 which use the TCP protocol....
190.146.154.100 - Port Scanner
Sat Jan 30 17:38:20 2010 =>Found attack from 190.146.154.100. Source port is 11181 and destination port is 5900 which use the TCP protocol....
61.129.251.7 - More CRAP from China
Fri Jan 29 15:05:49 2010 =>Found attack from 61.129.251.7. Source port is 6000 and destination port is 2967 which use the TCP protocol....
222.215.230.49 - Port Scanning Hacker Jerk-off
F U C K I N G C H I N K S
Fri Jan 29 13:12:06 2010 =>Found attack from 222.215.230.49. Source port is 12200 and destination port is 7212 which use the TCP protocol....
222.215.230.49 - Port Scanning Hacker Jerk-off
Fri Jan 29 13:12:06 2010 =>Found attack from 222.215.230.49. Source port is 12200 and destination port is 7212 which use the TCP protocol....
204.13.69.227 - Port Prober
Fri Jan 29 12:27:13 2010 =>Found attack from 204.13.69.227. Source port is 6000 and destination port is 2967 which use the TCP protocol...
89.106.26.19 - SQL server attack
89.106.26.19 is constantly trying to get access to SQL Server (port 1433)....
194.168.4.100 - Regular scans since 27/12/2009
An intrusion attempt by 194.168.4.100 was blocked by firewall. I've had 11 other attacks by this user in the past month....
61.139.105.163 - Regular scans since 28/12/2009
An intrusion attempt by 61.139.105.163 was blocked by firewall. I've had 7 other attacks by this user in the past month....
61.139.105.163 - prince phillip was right
just how long does it take to put a stop to these.too much time on their hands since the one sprog per family...
205.152.144.23 - port scan blocked from this ip
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.144.23
Time at last attempt : 1/28/10 10:32:35 AM
Number ...
62.24.199.13 - Not responsible...
This is one of TalkTalk's UK DNS servers - any UDP packets you're seeing as a 'Port Scan' coming from there will be nothing of the sort and just a part of normal DNS service....
125.65.112.161 - Who ARE these 125.65.112.161 dweebs?
Not sure if port scanning is the correct category, but as others have indicated, someone or something from IP125.65.112.16, et al, has certainly been VERY busy trying ALL the doors and windows of my e...
125.65.112.161 - Who ARE these 125.65.112.161 dweebs?
Not sure if \\\"port scanning\\\" is the correct category, but as others have indicated, someone or something from IP125.65.112.16, et al, has certainly been VERY busy trying ALL the \\\"doors and win...
125.65.112.161 - Who ARE these 125.65.112.161 dweebs?
Not sure if \"port scanning\" is the correct category, but as others have indicated, someone or something from IP125.65.112.16, et al, has certainly been VERY busy trying ALL the \"doors and windows\"...
221.192.199.35 - Port scan
This site has been port scanning my computer for the several days; blocked by Sygate. ...
208.67.220.220 - Constant Port Scanning
This IP address is constantly trying to scan my company network...
208.67.222.222 - Constant Port Scanning
This IP address is constantly trying to scan my company network...
89.106.26.19 - Port Scanning/SQL server attack
This IP is trying to break the SQL server, by scanning the ports and trying to acces the SA account....
89.212.233.39 - Intrusion.Generic.TCP.Flags.Bad.Combine.attack
Intrusion.Generic.TCP.Flags.Bad.Combine.attack...
174.129.152.44 - 174.129.152.44 scanning my ports
=>Found attack from 174.129.152.44.
Source port is 24889 and destination port is 5900 which use the TCP protocol....
61.139.105.163 - Regular scans since 12 June 2009
I only have my system turned on when I wish to use the Internet. But 61.139.105.163 has port scanned my router virtually every time I have been on since 12 June 2009 03:20:21 as of 22 January 2010 22:...
61.139.105.163 - Daily port scans
This Chinese rat has been scanning my ports daily since Nov. 2009, sometimes twice daily. My firewall has been keeping him out so far....
61.139.105.163 - 61.139.105.163
61.139.105.163 this chinese sniffer scanned me 3 times today, different ports...
211.154.142.238 - Since 2 days now this IP address is scanning my SQL Server TCP ports
Since 2 days this IP is trying to access my SQL server and to break my SA account:
2010-01-22 09:09:06.93 Logon Error: 18456, Severity: 14, State: 8.
2010-01-22 09:09:06.93 Logon Login...
61.139.105.163 - Scanning my port
This guy attempted to scan my port 2 times.
first on: Thu, 2010-01-21 16:10:18
then again on: Fri, 2010-01-22 11:35:16...
61.139.105.163 - norton firewall reported this as scanning my port
all I can say is their is a record on my history that Norton blocked an attack on my port from address 61.139.105.163. can you not block this address getting in to uk...
62.68.77.131 - norton firewall reported this as scanning my port
all I can say is their is a record on my history that Norton blocked an attack on my port from address 61.139.105.163. can you not block this address getting in to uk...
61.139.105.163 - Scanned my port
my firewall detected that he tried to port scan my ports, i added him to blacklist i\\\'ll report it if it happens again, he created a connection on my computer called lo....
61.139.105.163 - Regular port scanner
This IP seems to have a bot at the end of it scanning all ports on a 6 hour cycle. Oh dear....
222.59.180.204 - My computer's TCP port have been scanned from 222.59.180.204
Ports:
8000
8088
8080
8090
3128...
222.59.180.204 - My computer's TCP ports have been scanned from 222.59.180.204
port scan log as follows:
002228: Jan 20 20:46:55.579 CET: %SEC-6-IPACCESSLOGP: list 101 denied tcp 222.59.180.204(6000) -> 83.76.247.231(8090), 1 packet
002229: Jan 20 20:46:55.579 CET: %SEC-6-IP...
61.139.105.163 - AS ABOVE
NETGEAR *Security Alert* [a1:9a:1b]
TCP Packet - Source:61.139.105.163 Destination:XX.XX.XX.XX
(my ip deleted for security reasons)
Someone stop this SOB. Does he not know China still has the death...
Douchebags scanning ports. 3 in the last 30 min....
61.139.105.163 - 61.139.105.163 is scanning my port for the last 2 days
61.139.105.163 is scanning my port for the last 2 days - Stop the bastard!...
61.139.105.128 - Attempt hack of Firewall
This adresse 61.139.105.163 did a TCP scan on our port 12200 using ports 8080,8081,8000,9124...
61.139.105.163 - My computer's TCP ports have again been scanned by a chinese ashhole from 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
808, 8118, 8888, and 8081 have been scanned from 61.139.105.163.- inetnum: 61.139.105.128 - 61.139.105.191
netname: ZIGO...
61.139.105.163 - Scanned ports -- firewall blocked
01/19/2010 08:45:43.688 Probable port scan dropped 61.139.105.163, 12200, WAN <my IP address>, 7212, WAN TCP scanned port list, 9415, 9000, 8080, 8085, 8088, 8089, 3128, 9090, 8000, 8090
01/19/2010...
196.206.4.135 - Im fed up of these hackers trying to gain entry to my system, why dont somebody do somthing about them, and this person
Tue, 2009-12-15 06:34:35 - TCP Packet - Source:61.139.105.163 Destination:92.1.**.** - [PORT SCAN]
Wed, 2009-12-16 03:03:19 - TCP Packet - Source:61.139.105.163 Destination:92.1.**.** - [PORT SCAN]...
222.179.5.106 - network attack.win.mssql.worm.helkern port 1434
70+ attempted attacks per day are reported by Kaspersky Internet Security 2010.Can not block host as ip spoofed.Network traffic increased and laptop crashing and freezing....
222.59.180.204 - My computer's TCP port have been scanned from 222.59.180.204
Somebody is scanning your computer.
Your computer's TCP ports:
8000, 8080, 808, and 8089 have been scanned from 222.59.180.204 - inetnum: 222.32.0.0 - 222.63.255.255
netname: CRTC
de...
61.139.105.163 - 61.139.105.163
18.01.2010 00:33:49 61.139.105.163 SCAN (50980, 38175, 38943, 39199, 14340, 48153)
17.01.2010 21:39:25 61.139.105.163 SCAN (50980, 10275, 38175, 38943, 39199, 33315, 14340)
14.01.2010 22:35:52 61.13...
24.93.41.127 - Port Scanning
I have been getting a constant port scan from this address for a few hours now......
61.139.105.163 - Chinese rat accumulating bad karma
I\\\'ve been blocking Chinese addresses with a program (successfully, I thought) until I got a knock-knock from this twit. It originates from port 12200 and the attempt on my computer was on TCP port ...
61.139.105.163 - 61.139.105.163 Scan Attempts -- Keeps Trying
The IP 81.139.105.163 repeatedly is identified as attempting port scans of my PC. The location is noted as Zigong, China. I "Googled" them ;-)...
61.139.105.163 - Port scanning every few days
Just like the rest of complaints, my PC has been port scanned many times over the last month or so. The latest attached was on 15th Jan 2010...
172.20.26.130 - 172.20.26.130 - Repeated port scanning
I use shared IP at university, and I get notifications through Norton firewall that port scanning attempts are repeatedly coming from this IP address. I cannot trace the IP, and if I do a WHOIS check ...
61.139.105.163 - Im going to Smack this Stupid Chinese Retard
He Has been scanning my computer already for a month. Gay port Scanning Attack. Im going to Send him All My Viruses because this has to stop. Im not sure if it is a Zombie computer but this a Violatio...
62.68.70.78 - constant NMap Null scan
same as the other 2, the cockmongler keeps nmapping me, the last ten attempts were on 13678......
61.139.105.163 - Further Scans
I am so temped to agree with the last fellow poster and flood this idiot but that reduces us to the same level as him.
Today I have had 13 attemps on common ports and and attempt to have a go at my...
208.43.168.103 - Multiple attempts at my system
Attempts everyday to scan my ports. Stopped by Norton softward....
119.62.128.115 - Checking for possible SSH vulnerabilities
TCP Packet - Source:119.62.128.115,58216 Destination:90.136.144.60,22...
58.215.75.62 - Checking for Vulnerabilities
TCP Packet - Source:58.215.75.62,13594 Destination:90.136.144.60,10000...
121.145.120.165 - Port scanning
TCP Packet - Source:121.145.120.165,6000 Destination:90.136.144.60,4899
Scans hosts for possible security vulnerabilities...
210.73.193.146 - Port scanning
TCP Packet - Source:210.73.193.146,6000 Destination:90.136.144.60,2967
Scans hosts for possible security vulnerabilities...
218.240.32.166 - Port scanning
TCP Packet - Source:218.240.32.166,6000 Destination:83.189.41.239,2967
Scans hosts for possible security vulnerabilities...
60.173.10.154 - Regular port scanning
TCP Packet - Source:60.173.10.154,6000 Destination:83.189.41.239,2967
Scans hosts for possible security vulnerabilities...
60.173.11.8 - Regular port scanning
TCP Packet - Source:60.173.11.8,6000 Destination:90.128.118.74,1080
TCP Packet - Source:60.173.11.8,6000 Destination:90.128.118.74,1025...
95.26.154.87 - TCP from 95.26.154.87 to local port 51362
1/14/2010 11:01:13 PM Detected: Intrusion.Generic.TCP.Flags.Bad.Combine.attack Absent TCP from 95.26.154.87 to local port 51362
...
78.129.166.178 - multiple attempts to infiltrate my comp
has made many attempts to scan / infiltrate my comp . my virus protection is blocking address so far...
61.139.105.163 - My Suggestion
Let us all scan this computer; if enough of us go at it, we may jam the IP, and hopefully the administrator of the university will get the perpetrator/s kicked out of college.
Nmap is free to downl...
Somebody is scanning your computer.
Your computer's TCP ports:
14, 24, 18, and 62 have been scanned from 221.143.46.98 - person: Inyup Sung
address: Hanaro Telecom Co.
address: ...
174.142.75.230 - Engaged in port scanning of random IP victims
My WinSSHD server reported attempted connections from this IP on 25 different ports (and still counting). I have my server set to reject unknown IPs, so I cannot say what login/pass combination they ...
61.139.105.163 - China governmentsponsered criminals is again scanning my computer's TCP ports from 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
80, 6588, 8000, and 808 have been scanned from 61.139.105.163 - netname: ZIGONG-SCINFO-GOV descr: Zigong Sciences Informations Acad...
Every day for the last 6 to 8 months my firewall warned me about scans/attacks from this IP address.
Attacks mostly consist of SUB SEVEN attacks (at least this is what the firewall is warning me abou...
222.45.112.59 - Scans multiple times daily
Scanning over 300 times a day and so far managed by the firewall...
61.139.105.163 - 61.139.105.163 Port Scan
Firewall blocked 1x port scan from this address about an hour ago. Created firewall rule to block any communication with this particular IP address. Hope it helps. ...
61.183.15.9 - 61.183.15.9 - - [12/Jan/2010:16:55:21 +0000]
61.183.15.9 - - [12/Jan/2010:16:55:21 +0000] \"GET http://www.wantsfly.com/prx2.php HTTP/1.0\" 401 482 \"-\" \"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\"...
61.158.162.9 - Too often to mention
61.158.162.9 port scans my firewalls several times a day. This activity has been going on for months....
69.162.105.20 - Continuous port scanning
Scanning ports multiple times during the day. This is the second IP address from Limestone networks that has done this in the last couple weeks. ...
UDP Packet - Source:62.24.199.13 Destination:192.168.0.3 - [PORT SCAN]
UDP Packet - Source:62.24.199.13 Destination:192.168.0.3 - [PORT SCAN]
I RECEIVE THEESE EMAILS UP TO 30 TIMES A DAY...
61.139.105.163 - 61.139.105.163 port scanning my machine
looking through my firewall logs and this ip address 61.139.105.163 has been portscanning me...
61.139.105.163 - Port scan
This IP is active again and scanning at least once a day. This IP was active last year, then it stopped. Activity started again early December 09 and has been a daily occurrence since then. Have no...
61.183.15.9 - Daily scanning
Probes my open port twice a day. Originating from source ports 12200 and 3577....
61.139.105.163 - 61.139.105.163 Port Scanning
This IP is scanning my ports also. Firewall is blocking it but still annoying.....
61.139.105.163 - Same problem here
This ip has been blocked by my hardware firewall, but he persists on scanning my ports multiple times per day, at both my home AND office sites. And it\\\\\\\'s been going on for over a month now.
...
221.192.199.35 - port scan
Active Response which started at 01/09/2010 08:50:12 is disengaged. The traffic from IP address 221.192.199.35 was blocked for 600 seconds....
61.139.105.163 - 61.139.105.163 port scanning
Started getting port scans from this IP in May and June '09 a few times then stooped. Now since 30 Dec '09 daily port scans from this IP. Firewall blocks it, but still irritating....
60.173.11.8 - Produces a constant regular port scanning
Search "60.173.11.8" (35 hits in 1 files)
C:\Program Files\Agnitum\Outpost Firewall Pro\log\protect.log (35 hits)
Line 1720: 2010/01/08 16:47:35 detected scan packet: 1025; packet recv TCP 60.1...
24.89.0.22 - intrusion attempt blocked
trying to do port scanning on to my computer but didn't work.
...
221.192.199.35 - Remote Access
Security alert type : Port Scan
Protocol type : TCP
IP source address : 221.192.199.35
Time at last attempt : 1/6/10 02:34:03 PM
Number o...
=>Found attack from 61.139.105.163.
Source port is 12200 and destination port is 9415 which use the TCP protocol.
Thu Jan 7 05:47:58 2010
=>Found attack from 61.139.105.163.
Source port is 122...
62.68.77.131 - 61.139.105.163
Norton continues to block portscans from this IP address, starting again Jan 1, 2010. 2 -3 times a day while I'm online....
74.63.225.44 - Limestone Networks Is The NSA
Multiple IPS, 74.63.192.66, 74.63.225.44, 74.63.225.45, 69.162.105.20. The nameserver 66.207.175.172 for .gov is AS3008 COLOGUYS is ALSO Limestone Networks (LSTN) See:
http://www.robtex.com/dns/gov.h...
74.63.225.45 - Limestone Networks Is The NSA
Multiple IPS, 74.63.192.66, 74.63.225.44, 74.63.225.45, 69.162.105.20. The nameserver 66.207.175.172 for .gov is AS3008 COLOGUYS is ALSO Limestone Networks (LSTN) See:
http://www.robtex.com/dns/gov.h...
208.43.95.175 - Port scans detected from address 208.43.95.175
Port scans from address 208.43.95.175 are hitting my firewall every a5 second causing internet access to crawl...
61.139.105.163 - 61.139.105.163 - portscanning
This IP address is portscanning one of my IP's. I have seen him quite often before, but thought it is time that I report.
TCP Packet - Source:61.139.105.163 Destination:192.168.0.98 - [PORT SCAN]...
61.139.105.163 - Port Scanning
Port Scanning conducted by this IP on my computer at 2124 (9:24 pm) on 10 Jan 2010. Blocked by firewall....
61.139.105.163 - constant port scans against most well known ports
It's in Chnia, good luck getting anyone to care. I've set my firewall to drop all traffic from the IP and moved on....
61.139.105.163 - Letter To The ISP
I have now emailed the following to the users IP. If anyone can find any more IP\'s for the admin of this block then email them to. Its time idiots like these are stoped from clogging up the net with ...
60.173.11.8 - Régular port scanning
hundred scans on 1025 port with X11 protocol on several hours...
61.139.105.163 - if you want to get him back
download LOIC and flood him with DDOS attacks. LOIC oe longcatflooder with clog up his traffic so much he will have to get a new ip and since he has been at this so long with the same one maybe he can...
61.139.105.163 - This idiot is scanning my ports almost daily!
Does anyone know what can be done? Obviously this idiot has quite a history of being a nuisance and nothing is being done. Who has the answer?...
61.139.105.163 - Another month of scanning from this idiot
I know having a NAT router protects you against this kind of atack, I have no concerns about him gaining access as I have blacklisted his ip at my core router.
What is anoying me is that I am allwa...
61.139.105.163 - Port Scan
This individual is scanning for open service ports, if you have a NAT router there is nothing to worry about....
61.139.105.163 - More of the same
Port scanned by 61.139.105.163 at ports 10275, 36895, 38175, 38943, 39199, 14348, 33315....
62.68.70.78 - Constant NMap Null Scan from 62.68.70.78
Constant NMap Null Scan from 62.68.70.78
TCP Port 65060
Attempt every 10 mins on 01/01/2010
...
218.83.161.224 - 218.83.161.224 Spying Chinese Hackers
ports 8080, 3128, 1080, 8000 und 9090 where scanned by Chinese Spies, there should be a firewall around china or it should be removed from the internet...
74.63.225.45 - this jerk is scanning lower range ports from 1034 to 4800
This one is currently on Limestonenetworks.com. ... I've contacted them to get it to stop but apparently they aren't serious about stopping it. My next hurdle will be the legal system....
61.139.105.163 - Someone flush this turd
I wish someone would stop this turd from port scanning every night. Take his PC away and tell him if he can\'t play nice with others then he cannot have a computer....
Somebody is scanning your computer.
Your computer's TCP ports:
6588, 8000, 8090, and 7212 have been scanned from 61.139.105.163- netname: ZIGONG-SCINFO-GOV descr: Zigong Sciences Informations Ac...
Somebody is scanning your computer.
Your computer\'s TCP ports:
7212, 8118, 8888, and 8081 have been scanned from 61.139.105.163-netname: ZIGONG-SCINFO-GOV descr: Zigong Sciences Informations Ac...
61.139.105.163 - Port scanning
The guy is scanning my ports every so often. About a 10 minute burst of activity on different ports and then stops....
221.195.82.103 - Repeated Port scans and DOS attempts
This asshole is repeatedly trying to port scan my system as well as attacking individual ports...
221.195.82.103 - Port scan report by my router for this IP address
Port scan report at 12:27 GMT, on December 28th 2009....
61.139.105.163 - Scanning ports every 6 to 10 hours
Have seen scans from this IP for the last few days...
96.17.224.69 - Port scan from 96.17.224.69:80
Blocked incoming TCP packet from 96.17.224.69:80 to 76.113.xx.xxx:xxxx with unexpected sequence 2172753916 (expected 2441099009 to 2441230080)...
66.35.46.194 - Ports 33436 and 33437
66.35.46.194 and 66.35.46.195 tries to connect on ports 33436 and 33437. It started months ago and it still continues....
66.35.46.195 - Ports 33436 and 33437
66.35.46.194 and 66.35.46.195 tries to connect on ports 33436 and 33437. It started months ago and it still continues....
222.186.25.9 - port scanning
He regularly scan my network on ports 1025, 1080, 8000 and 8080. His source port is always 6000....
61.139.105.163 - 61.139.105.163 Multiple Port Scans
Multiple TCP port scans through Dec 2009. Blocked by Netgear router....
196.46.246.21 - Port scanning originating from 196.46.246.21
This bugger is port scanning my firewall.
All TCP connection attempts. Wish you'll fry in h*ll dude!...
61.139.105.163 - China governmentsponsered criminals is again scanning my computer's TCP ports from 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
8090, 8000, 7212, and 8888 have been scanned from 61.139.105.163
-- inetnum: 61.139.105.128 - 61.139.105.191 netname: ZIGONG-SCINF...
61.139.105.163 - China governmentsponsered criminals is again scanning my computer's TCP ports from 61.139.105.163
Somebody is scanning your computer.
Your computer\'s TCP ports:
1025, 8888, 8088, and 8081 have been scanned from 61.139.105.163. - inetnum: 61.139.105.128 - 61.139.105.191
netname: Z...
66.0.10.82 - Repeated Port Scanning
This ip address was caught port scanning on my pc repeatedly by my bitDefender. It has been traced to ATlanta....
61.160.216.63 - Trying port 80
Incoming TCP request from port 4114
Dec 23 15:25:25: xxxxxxxxxxxxxxx SRC=61.160.216.63 DST=192.168.xxx.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=103 ID=10147 DF PROTO=TCP SPT=4114 DPT=80 SEQ=1338335443 ACK...
208.43.95.175 - Persistent Portscan Attempts
I have been attacked 4 times in two days from this address: 208.43.95.175-static.reverse.softlayer.com.
I am on a Mac and Norton Seems to be blocking all attacks.
Can you do anything about this ...
208.43.95.175 - Persistent Portscan Attempts
I have been attacked 4 times in two days from this address: 208.43.95.175-static.reverse.softlayer.com.
I am on a Mac and Norton Seems to be blocking all attacks.
Can you do anything about this ...
205.152.144.23 - Port Scanning
Attacking computer: 205.152.144.23, 53
Norton 360 caught this ip trying to scan my pc, twice....
61.139.105.163 - Sacns me every day too
My Netgear router flags these scans every day. Not fit to be granted net access....
222.45.112.59 - Port Scanning
22 port scans over the course of 8 hours and 30 minutes. Scans ports 8085, 8090, 9000....
209.237.150.20 - Port Scanning
02:29:49 209.237.150.20 Host blocked for 5 min SCAN (6661, 6405, 6149, 5637, 5893, 6917, 7173)
...
61.139.105.163 - Port scanning from 61.139.105.163
This IP has been scanning my ports on a daily basis for weeks....
61.139.105.163 - port scanning
[16/Dec/2009 10:13:18] PORTSCAN firewall="" hostip="61.139.105.163" hostname="61.139.105.163" log="protocol: TCP, source: 61.139.105.163, destination: ****, ports: 808, 1080, 8000, 80, 9090, 8080, 808...
86.59.1.140 - Port Scanning
72.21.207.195 & 61.139.105.163
seems to port scan server everyday
1 is a Amazon owned IP the other is fron China
12/20/2009 12:16:43.704 - Possible port scan dropped - 72.21.207.195, 80, WAN - ...
86.59.1.140 - Port Scanning
72.21.207.195 & 61.139.105.163
seems to port scan server everyday
1 is a Amazon owned IP the other is fron China...
61.139.105.163 - full range port scan
firewall logs;
=>Found attack from 61.139.105.163.
Source port is 12200 and destination port is 9415 which use the TCP protocol.
Sat Dec 19 02:56:44 2009
=>Found attack from 61.139.105.163.
S...
61.139.105.163 - China governmentsponsered criminals is again scanning my computer's TCP ports from 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
8080, 9000, 8085, and 6588 have been scanned from 61.139.105.163. -
netname: ZIGONG-SCINFO-GOV
descr: Zigong Science...
61.139.105.163 - Full range port scan from 61.139.105.163
As others have reported I have had full range tcp and udp scans from this ip for over month. Have blocked the whole range on my core router but this ip keeps scaning every night. It was proming my htt...
61.139.105.163 - Full range port scan from 61.139.105.163
As others have reported I have had full range tcp and udp scans from this ip for over month. Have blocked the whole range on my core router but this ip keeps scaning every night. It was proming my htt...
61.139.105.163 - Portscan Message
I have been getting this message at least 2x daily \\\"Vulnerability BLOCKED\\\" When: Dec 17, 5:24:36 AM, From: 61.139.105.163, Attack Name: Portscan....
61.139.105.163 - Portscan Message
I have been getting this message at least 2x daily \"Vulnerability BLOCKED\" When: Dec 17, 5:24:36 AM, From: 61.139.105.163, Attack Name: Portscan....
61.139.105.163 - Trojan server
This expletive is using game matchmaker services for live IP numbers for his trojan server. Three times in last 24 hours my game server has been scanned on ports 1025, 8081, 8888, 7212, 808, 1080, 658...
61.139.105.163 - what an asshole!!!
scans my ports since days!!!
blocked by firewall.
here is the report:
Somebody is scanning your computer.
Your computer's TCP ports:
808, 8118, 8888, and 8081 have been scanned from 61.139.10...
61.139.105.163 - China is scanning my computers TCP ports from 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
6588, 8090, 2301, and 8888 have been scanned from 61.139.105.163.
- netname: ZIGONG-SCINFO-GOV
descr: Zigong Scie...
61.139.105.163 - 61.139.105.163 is scanning my TCP/IP ports several times each day.
Since Dec. 04, 2009 this IP address has been scanning various TCP/IP ports on my computer several times a day. So far, I think my Firewall has kept them out. Has anyone called the academe to ask the...
Somebody is scanning your computer.
Your computer's TCP ports:
6588, 8090, 2301, and 8118 have been scanned from 61.139.105.163 - netname: ZIGONG-SCINFO-GOV
descr: Zigong Scien...
61.139.105.163 - 61.139.105.163 DOS scan detected every 24 hours
Dectected stopped and reported by Netgear router before it reaches LAN.
(UK West Mids.)...
222.45.112.59 - Port scanning and CSlistener
Intrusion detections 10-20 per hour, all day long. Scans TCP port 8085, port 8090, and CSlistener (port 9000) all day long....
61.139.105.163 - 61.139.105.163(12200) is scanning Port 8000
Can anyone stop that idiot scanning people's computers? 61.139.105.163 is based in China. It's easy to get its details. I intend to contact the address given by IP search. Fortunately, NORTON is block...
61.139.105.163 - My computer's TCP ports have been scanned from 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
2301, 808, 8888, and 8081 have been scanned from 61.139.105.163
netname: ZIGONG-SCINFO-GOV
descr: Zigo...
121.246.32.164 - scans my port while I'm using VUZE
Well I've been having people run the nmap null scan on my computer. It's annoying! So I'm reporting every IP that does it from now on. I don't know what happens when someone gets complaints, but I hop...
61.139.105.163 - Scanning on a daily basis
I'm constantly being scanned. Its a windows 2003 machine with remote desktop enabled. Suggest someone tries to crack the administrator password and put a stop to this!...
61.139.105.163 - Port scanning past 2 days from 61.139.105.163
Port scanned the past 2 days from this IP 61.139.105.163. Was trying to access ports: 8888, 7212, 1025, 8081....
61.147.107.56 - DoS HGOD SynKiller Flooding
How do you freakin get rid of DoS HGOD SynKiller Flooding. I clean re-installed Windows XP 3 times, changed ip, use only legitimate programs, the damn attacks always come back. It\\\'s like something ...
61.139.105.163 - Daily attacks reports from my firewall
This IP is aggressively scanning my ports every day (ports 7212,8000,8080). I wrote to the ISP there but lol, didn't expect them to take mesures, they're like in China -.- ...
61.191.191.94 - Regular port scanning
Regular port scanning from this address -- analyzing port 2967...
222.45.112.59 - Regular port scanning
Regular port scanning from this address -- analyzing ports 8085, 8090...
61.139.105.163 - I get scanned on a daily basis
This IP has been scanning many random port numbers on my network. As far as i can tell he gets blocked. Hs anyone tried to contact the ISP for this China IP?
(61.139.105.163)...
Ip address logged by router as above, but blocked. Denial of Service attack.
Netgear router logged event....
61.139.105.163 - My computer's TCP ports have been scanned from 61.139.105.163.
Somebody is scanning your computer.
Your computer's TCP ports:
8090, 2301, 808, and 8888 have been scanned from 61.139.105.163. -
descr: Zigong Sciences Informations Academe
des...
65.87.63.142 - My computer's TCP ports have been scanned from 65.87.63.142.
Somebody is scanning your computer.
Your computer's TCP ports:
8888, 8088, 8080, and 80 have been scanned from 65.87.63.142.
OrgTechName: Offermann, Eric
OrgTechPhone: +1-618-939-9218
Or...
62.68.77.131 - Port Scan
My Netgear router has reported a port scan from ip address 61.139.105.163
...
74.63.225.44 - Port Scans
This IP address has been port scanning our firewall on tcp/http at regular intervals over the last week....
67.228.76.117 - Port Scans
This IP address has been port scanning our firewall on tcp/http at regular intervals over the last week....
208.43.229.76 - Port Scans
This IP address has been port scanning our firewall on tcp/http at regular intervals over the last week....
208.43.90.193 - Port Scanning
This IP address has been port scanning our firewall on tcp/http at regular intervals over the last week....
208.43.90.195 - Consistant Port Scan
This IP address has been port scanning our firewall on tcp/http at regular intervals over the last week....
65.19.129.26 - Port scanning
With limited understanding of whats happening all i can see is a port scan and some other activeity.
TCP Packet - Source:65.19.129.26 Destination:192.168.2.4 - [PORT SCAN]...
87.242.76.175 - Port scanning
This IP has been port scaning our firewall daily for the last week or so on tcp/http ports, 10 ports at a time on regular intervals....
174.37.172.240 - Port scanning
This IP has been port scaning our firewall for the last week on tcp/http ports 10 ports at a time on regular intervals....
208.43.247.75 - Port scanning
This IP has been port scaning our firewall for the last week on tcp/http ports 10 ports at a time on regular intervals....
61.139.105.163 - port scanning
% [whois.apnic.net[Who Is Domain][trace][Reverse DNS Search] node-2]
% Whois data copyright terms http://www.apnic.net[Who Is Domain][trace][Reverse DNS Search]/db/dbcopyright.html
inetnum: 61.139...
61.139.105.163 - port scan from 61.139.105.163
TCP scanned port list, 8085, 8088, 8089, 3128, 6588...
95.25.54.46 - ftp hacking possibly
I keep getting alerts from Norton that it has blocked this ip since it keeps trying to nmap null scan. Someone stop this idiot please!...
61.139.105.163. - Somebody is portscanning my computer's TCP ports from 61.139.105.163. (chinese criminal)
Somebody is scanning your computer.
Your computer\'s TCP ports:
8118, 8888, 7212, and 8081 have been scanned from 61.139.105.163.
http://isc.sans.org/ipinfo.html?ip=061.139.105.163
person: ...
61.139.105.163. - Somebody is portscanning my computer's TCP ports from 61.139.105.1(chinese criminal)63.
Somebody is scanning your computer.
Your computer's TCP ports:
9415, 8080, 9000, and 8089 have been scanned from 61.139.105.163.
...
122.227.164.96 - Progressive Port Scan
This guy is using s port scanner to scann ALL my ports. I have one open port which let him know I'm here and since then he has not left me alone. I have him permenantly banned but he keeps trying :-)...
122.227.164.96 - port scan
I think this chinese bastard Chinese bastard is scanning my port more than once.
This bastard detail as fellow:
IP address : 122.227.164.96
IP country code: CN
IP address country: China
I...
Your computer's TCP ports:
8089, 8090, 8000, and 8118 have been scanned from 122.227.164.96.
03-12-2009 21:27:45 Port Scan...
208.43.229.76 - port scanning
all port scan
11/30/2009 21:01
11/30/2009 10:31
11/29/2009 23:39
11/29/2009 18:12
11/29/2009 12:54
11/29/2009 08:10
11/29/2009 01:39
11/28/2009 20:53
all times EST...
122.227.164.96 - Port Scanning
30/11/2009 6:47:23 AM EST Firewall Security Log Message: Somebody is scanning your computer.
Your computer's TCP ports:
808, 7212, 8118, and 1025 have been scanned from 122.227.164.96...
208.43.229.76 - Port Scans out the whazu from 208.43.229.76
Port Scans out the whazu from 208.43.229.76...
71.70.233.119 - Port Scanning
19 port scans over the course of 3 hours and 28 minutes. Continued to scan until I terminated my internet connection. Source DNS is cpe.71.70.233.119.nc.res.rr.com according to ZoneAlarm....
69.64.49.13 - Somebody is scanning my computer
I get this message:
\\\"Somebody is scanning your computer.
Your computer\\\'s TCP ports:
80, 8080, 3127, and 1080 have been scanned from 69.64.49.13..\\\"
OrgName: Hosting Solutions In...
69.64.49.13 - Somebody is scanning my computer
I get this message:
\"Somebody is scanning your computer.
Your computer\'s TCP ports:
80, 8080, 3127, and 1080 have been scanned from 69.64.49.13..\"
OrgName: Hosting Solutions Internat...
222.161.2.46 - Port Scanning
Firewall Security Log Message:
Somebody is scanning your computer.
Your computer's TCP ports:
3128, 8089, 80, and 6588 have been scanned from 122.227.164.96...
122.227.164.96 - omg
Jemand scannt Ihren Computer.
Ihre TCP ports:
3128, 8089, 6588, 808 und 7212 wurden von 122.227.164.96 gescannt. kann man ihn nicht aufhalten ???...
122.227.164.96 - Port Scanning
27/11/2009 7:02:06 AM EST
Firewall Security Log Message:
Somebody is scanning your computer.
Your computer's TCP ports:
80, 6588, 808, and 8118 have been scanned from 122.227.164.96...
124.31.204.10 - escanned my ports
11/1/2009 5:47 Detected Port Scanning attack 124.31.204.10:4814
...
74.220.215.56 - 74.220.215.56 Orem Salt lake city USA
port scanning from this IP no succes till now he is very dumb thinking he will get in my Pc.....those crazy guys are everywhere in that country...
122.227.164.96 - 122.227.164.96 - scanning my ports
ports 6588, 808, 7212, 8118 and 8888 have been scanned today and yesterday please stop him, likle you already did with the other chinese ;)...
174.129.67.150 - port scanning to attack my computer
activity of174.129.67.150 port scanning by
tcp port12200
intrusion attempt , it was blocked, application path system...
222.161.2.46 - coincidence
must be.
http://www.globalsecurity.org/military/world/china/changchun.htm...
62.68.77.131 - Port scans from Estonians
Norton blocked a moderate threat to my computer while I had Azureus open. The IP was linked back to Estonians trying to do a Nmap Null Scan. (Still clueless as to what this is) but it came from the IP...
79.109.212.223 - Port Scanning
Scanned port 55077 15 times over the course of 4 hours and 40 minutes. 79.109.212.223.dyn.user.ono.com...
86.127.184.132 - 86.127.184.132 Timisoara-Romania
Acest idiot din Timisoara se chinuie de 2 zile sa-mi intre in computer ...imi scaneaza porturile poate gaseste vre-o usa deschisa....boule ce esti ....!!!...
209.62.45.43 - Port scan trying to find way through router
Multiple port scans occurring. 5 tries on each port. Starts at 40000 and works up....
85.30.252.174 - TCP scanned port list, 8080, 3128, 1080, 3127, 11022
TCP scanned port list, 8080, 3128, 1080, 3127, 11022...
122.227.164.96 - 195.68.153.138
[13-20/Nov/2009 03:58-4:30] PORTSCAN \"122.227.164.96\" hostname=\"122.227.164.96\" \"protocol: TCP, source: 122.227.164.96, destination: 195.68.153.138, 195.68.153.139, ..., ports: 808, 9000, 3128, 8...
222.186.25.9 - multi port scanning
Regular port scanning for several weeks
X11 protocol on port 1025
...
222.161.2.46 - TCP scanned port list, 9000, 808, 9415, 8090, 1080
1/19/2009 17:58:31.320
Alert Intrusion Prevention
Possible port scan detected
source: 122.227.164.96, 12200, X1 dest: 206.253.53.110, 8888, X1
TCP scanned port list, 9000, 808, 9415, 8090, 108...
222.161.2.46 - TCP scanned port list, 8085, 6588, 808, 8090, 8888
11/18/2009 18:06:40.112
Alert Intrusion Prevention
Possible port scan detected
Source: 122.227.164.96, 12200, X1 Dest: 206.253.53.110, 8086, X1
TCP scanned port list, 8085, 6588, 808, 8090, 88...
216.119.178.195 - Port Scanner Rat
Love to unplug this loser! Constantly scanning my ports like a big ole hussy!...
222.68.199.238 - Incoming TCP Requests
222.68.199.238 is being constantly blocked
by Malwarebytes! It keeps attempting to access my computer....
125.65.112.161 - Incoming TCP Requests
Thank GOD for Malwarebytes it keeps blocking this ip address 125.65.112.161
I had to restore/install windows several days ago. This IP dropped \"Antivirus Plus\"
into my computer!! That program is a...
151.213.203.171 - Can anyone shut these assholes down?
all day long 123.134.95.199 scans our network. ALL DAY LONG. Same as all of the posts before me....
123.134.95.199 - Can anyone shut these assholes down?
all day long 123.134.95.199 scans our network. ALL DAY LONG. Same as all of the posts before me....
123.19.234.13 - Scannig port on my computer
This ip address is scanning my port about 30 times a day...
203.171.226.107 - Tired of This Crap
Repeated daily ports scans from this ip, port ranges 1024-1897...
64.182.66.160 - TCP Packet - Source:64.182.66.160 Destination:my IP
NETGEAR *Security Alert* [c2:55:2d]
December 16, 2009 11:01am (5am ET)
TCP Packet - Source:64.182.66.160 Destination:81.251.95.92 - [PORT SCAN]...
64.182.66.160 - TCP Packet - Source:64.182.66.160 Destination:my IP
NETGEAR *Security Alert* [c2:55:2d]
December 16, 2009 11:01am (5am ET)
TCP Packet - Source:64.182.66.160 Destination:81.251.95.92 - [PORT SCAN]...
77.68.38.49 - Port scan from 77.68.38.49
Message from my netgear router
\"TCP Packet - Source:77.68.38.49 Destination:81.179.3.135 - [PORT SCAN]\" at 12:21 (GMT) on November 11th 2009....
77.68.38.49 - Port scan from 77.68.38.49
Message from my netgear router
"TCP Packet - Source:77.68.38.49 Destination:81.179.3.135 - [PORT SCAN]" at 12:21 (GMT) on November 11th 2009....
122.227.164.96 - My TCP ports are scanned by 122.227.164.96
My fire wall reports that 122.227.164.96 is scanning my ports. What is going on and how do I stop this? Is there a danger?...
218.6.15.146 - 28 port scans in one day.
From Bejing China. 218.6.15.146 user is scanning for open ports associted with
General communication Symantec System Center, servers, clients TCP 2967. New Botnet impacts Symantec Client Port 2967 o...
122.227.164.96 - Port scanning once a day
Last attack on ports : 808, 9000, 1080, 3128, 8080, 8085, 8089, 8090, 6588, 9415, ...\" username=\"not logged yet\"...
87.58.5.114 - Daily port scans on our router
This ip adress shows up every day in our logfiles, trying to access a wide range of ports. Sometimes it's as few as 10-20 attempts, other days it's more like 50-100.
I can't see why they do it, other...
81.91.227.14 - 123.134.95.199
kill this IP as it keeps scanning me constantly and knocking me off my gaming!...
74.63.225.44 - Regular Port scans
Multiple scan attempts from port 12200 to destination port 8000, 8085, 9788...
61.160.216.63 - Trying to hack my computer
My firewall also caught him. Being in China he will be hard to stop. Maybe he will scan a REAL hacker who will somehow mess up his computer!...
122.227.164.96 - Port Scanning 8080, 8088, 8089, 8085 and 3128
Somebody is scanning your computer.
Your computer's TCP ports:
8080, 8088, 8089, 8085 and 3128 have been scanned from 122.227.164.96.
I love my firewall....
66.0.10.82 - Post scan
Message from router:-
TCP Packet - Source:66.0.10.82 Destination:81.179.3.135 - [PORT SCAN]...
72.47.192.78 - Attempted NMas XMas Scan
Attempted scan of my computer, identified and blocked by my firewall....
123.176.13.1 - NMap Null Scanning
NMap Null Scanning from 123.176.13.1 detected few times by Norton...
66.0.10.82 - UK today
received the following warning from my router: TCP Packet - Source:66.0.10.82 Destination:81.157.220.xxx - [PORT SCAN]...
222.215.230.49 - every 12 hours for several days.. port 8800, 8080, 8000, 80, 2967
annoying as flys...
122.227.164.96 - port scanning at least 2 a day
122.227.164.96 SCANNING PORTS (10275, 38175, 36895, 38943, 14348, 20480)...
122.227.164.96 - 122.227.164.96 misbehaving
For 15 days now scanning one of my SonicWalls
Here are the ports for the last 5 days:
Possible port scan detected - 122.227.164.96, 12200,
TCP scanned port list, 8089, 8000, 6588, 1080, 808
TCP...
72.129.63.116 - Dos Attack
[DoS Attack: RST Scan] from source: 116.71.35.79, port 14561, Friday, November 06,2009 00:11:47
This was done 10 times by the ip listed....
84.19.105.95 - Dos Attack
[DoS Attack: RST Scan] from source: 116.71.35.79, port 14561, Friday, November 06,2009 00:11:47
This was done 10 times by the ip listed....
201.74.144.237 - Dos Attack
[DoS Attack: RST Scan] from source: 116.71.35.79, port 14561, Friday, November 06,2009 00:11:47
This was done 10 times by the ip listed....
116.71.35.79 - Dos Attack
[DoS Attack: RST Scan] from source: 116.71.35.79, port 14561, Friday, November 06,2009 00:11:47
This was done 10 times by the ip listed....
116.71.35.79 - Dos Attack
[DoS Attack: RST Scan] from source: 116.71.35.79, port 14561, Friday, November 06,2009 00:11:47
This was done 10 times by the ip listed....
222.161.2.46 - Port scan blocked from 122.227.164.96 on my home mac
Three days now I have been scanned from this IP all blocked. I reversed it and came up with a list of their open ports. Port Scanning host: 122.227.164.96
Open TCP Port: 1 tcpmux
Ope...
66.0.10.82 - 66.0.10.82 performing a port scan
My netgear router also reported a port scan from 66.0.10.82. Destination 80.229...
Whoever it is has remote desktop running....
66.0.10.82 - 66.0.10.82 is source of port scan
Auto message from my Netgear router:
Thu, 2009-11-05 19:03:47 - TCP Packet - Source:66.0.10.82 Destination:80.229.8.197 - [PORT SCAN]...
66.0.10.82 - Multiple port scans and DOS attacks
During the night this IP executed several port scans and DOS attempts, rejected by router firewall...
211.121.21.72 - dcom-scm
I dont know what dcom-scm means but at least i can see this with firestarter / on kubuntu....
74.63.225.44 - Port Scanning
Nine port scans today, and six yesterday, all of them port 12200. Source DNS is 44-225-63-74.reverse.lstn.net according to ZoneAlarm....
122.227.164.96 - Port Scanning
37 port scans over the course of 1 hour and 29 minutes. Four of them rated high by ZoneAlarm....
218.23.37.51 - intrustion.win.mmsql.worm.helken
intrustion.win.mmsql.worm.helken udp on port 1434->this guy scanning my port...
78.154.211.226 - NMap Null Scan
This IP address has made several attempts at scanning my PC. Usually 5-7 attempts within 1-2 minutes....
204.244.238.125 - 11/2/2009 4:10:38 AM UDP from 204.244.238.125 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern
11/2/2009 4:10:38 AM UDP from 204.244.238.125 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern...
122.227.164.96 - Cant this be stopped?
Somebody is scanning your computer.
Your computer's TCP ports:
808, 8118, 8888, and 9415 have been scanned from 122.227.164.96.....
77.245.144.228 - Port scan
This guy has scanned my ports several times... look like he/her is looking for something......
61.160.212.25 - multiple scan for for several days
scan port http, Socks
and 1025, 3127 port with X11 protocol...
216.26.191.25 - LFD: 216.26.191.25 blocked for port scanning
Repeated port scanning like the following over multiple days, weeks, and months. LFD bans the IP several times a day.
Oct 26 02:17:57 kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:13:72:29...
74.63.225.44 - 44.225.63.74.reverse.lstn.net(74.63.225.44)
Log says 44.225.63.74.reverse.lstn.net(74.63.225.44) source port is 12200 to destination port: 1080....
74.63.225.44 - 44.225.63.74.reverse.lstn.net(74.63.225.44)
Log says 44.225.63.74.reverse.lstn.net(74.63.225.44) is scanning port 12200 tcp flag: S. ...
122.227.164.96 - Attacks for the last two days -- scanning ports
Found attack from 122.227.164.96 in port 8088 => Wed Oct 28 19:35:08 2009
Found attack from 122.227.164.96 in port 3128 => Wed Oct 28 19:35:08 2009
Found attack from 122.227.164.96 in port 80 =>...
125.65.112.161 - 82.166.42.244 and others From china scanning
This is what I keep getting all IP address are in china. Happens all day every day to my computer on my dmz even if it is not running.
LAN access from remote] from 193.218.160.75:51931 to 192.168.0...
122.227.164.96 - Geek port scan
Your computer\'s TCP ports:
8085, 8088, 8089, 6588 and 808 have been scanned from 122.227.164.96.
Very clever, isn\'t it ! O_o...
218.6.15.138 - Scanning for open port 135
IP was seen scanning numerous machines facing the internet with open port 135...
221.192.199.41 - 221.192.199.41
Tue, 2009-10-27 13:13:41 - TCP packet - Source: 221.192.199.41 - Destination: 68.59.**.** - [Access Policy not found, dropping packet Src 12200 Dst 8085 from WAN]
Come on china you can do batter th...
122.227.164.96 - 122.227.164.96
IP address [?]: 122.227.164.96 Copy [Whois] [Reverse IP]
IP country code: CN
IP address country: ip address flag China
IP address state: Zhejiang
IP address city: Ningbo
IP address lati...
77.245.144.147 - almost every day it runs portscans
the following is reported by my firewall:
No. Time Source IP Destination IP Note
1|10/25/2009 01:30:27 |77.245.144.147:1658 |82.171.233.34:63234 |ATTACK...
124.207.85.200 - Ip address is attempting multiple port scans for intrusion
124.207.85.200 is attempting multiple port scans on my external firewall resulting in email logs
No.015 Sun, 2009-10-25 08:45:37 - TCP Packet - Source:124.207.85.200 Destination:210.1.210.38 - [F...
122.227.164.96 - Port Scanning
Des hackers Chinois scannent mon ordinateur plusieurs fois par jours. Mon logiciel: "MALWAREBYTES" les stoppent automatiquement et ils m'en avertissent à chaque fois. Avec l'adresse IP donnée par ce...
121.14.229.199 - Thu Oct 22 20:07:03 2009 =>Found attack from 121.14.229.199. Source port is 6000 and destination port is 8000 which use the TCP protocol.
Hack coming from CHINA!!!!...
61.160.216.174 - Making Random Connection Attempts
Machine made a lot of attempts to connect to me on Ports 7212 and 8000 yesterday....
125.65.112.161 - Constant Port Scanning
Random port scans coming in from this IP on a regular basis....
123.134.95.199 - Constant Port Scanning
Out of all the IPs on my firewall logs, this is the worst offender. Port scanning on 8080, 8000, 7212, 8800, 8118, 9090, 8085....
123.134.95.199 - Constant trying to scan
every day, 5-8 times a day.TCP ports: 8085, 9090, 8080, 8800, 8000, 3128...
77.245.144.147 - Attempt to access ports randomly
Somebody is scanning my computer.
My computer\'s TCP ports:
1977, 13549, 3344, 2586 and 556 have been scanned from 77.245.144.147....
122.227.164.96 - port scanning
the intrusion was detected and blocked; portscan TCP port12200.. Application path system..Risk level is medium . destination was my computer( wont put exact name)This IP# has been quiet for a bit and ...
77.245.144.228 - port have been scanned from IZMIR-TURKEY
31699, 3069, 35, and 6850 have been scanned from 77.245.144.228...
123.134.95.199 - Random Port Scanning by same Chinese IP
Security alert type : Port Scan
Protocol type : TCP
IP source address : 123.134.95.199
Time at last attempt : Wed Oct 21 07:02:49 2009(UTC...
222.161.2.46 - Port scanning while using a verizon modem...
Tries to get into my linux system whenever I am using my USB 3G modem (Rather than my lan connection]....
71.108.82.165 - Nmap Xmas Scan on port 58348
Nmap Xmas Scan on port 58348, picked up by Norton and blocked....
81.91.227.14 - Continuous port scans
Non-stop port scan attempts from 123.134.95.199. Someone is misbehaving here.....
122.227.164.96 - Port Scanning and Possible E-Mail Breach!!!
I have been getting reports of port attacks daily from this IP address and I believe they have hacked into my e-mail account as well. Every time I sign on it signs me off saying it has been signed on ...
74.63.225.44 - Constant port probes
For several days in a row, frequent port scans from 74.63.225.44:12200 to ports 1080, 3128, 8000 and more....
122.227.164.96 - Jemand scannt Ihren Computer. Ihre TCP ports: 8118, 8888, 8088, 808 und 1025 wurden von 122.227.164.96 gescannt.
......
93.38.142.107 - Port scanning - hacker
[DoS Attack: RST Scan] from source: 93.38.142.107, port 2560, Wednesday, October 14,2009 14:44:23...
69.63.187.16 - Port scanning - hacker
[DoS Attack: ACK Scan] from source: 69.63.187.16, port 80, Tuesday, October 13,2009 19:16:18
[DoS Attack: ACK Scan] from source: 69.63.187.16, port 80, Tuesday, October 13,2009 19:15:14...
213.199.149.139 - Port scanning - hacker
[DoS Attack: ACK Scan] from source: 213.199.149.139, port 80, Tuesday, October 13,2009 19:14:33
[DoS Attack: ACK Scan] from source: 213.199.149.139, port 80, Tuesday, October 13,2009 19:16:50...
69.63.187.16 - Port scanning - hacker
[DoS Attack: ACK Scan] from source: 69.63.187.16, port 80, Tuesday, October 13,2009 19:13:38...
122.227.164.96 - Scanned ports and accessed http hg repo
Scanned ports on my remote server and looked into hg repo, opened via http for reading. Dunno why…...
8.3.211.59 - ysVXEFhnnoeioPHG
Ask how long it will be before you can go back to work or start regular exercise again. ,...
123.134.95.199 - scans over and over again..
why do you do this? leave my pc to me and yours to you....
[DoS Attack: RST Scan] from source: 86.52.164.176, port 20686, Monday, October 12,2009 20:56:04...
125.65.112.161 - Attempting Random Connections
Sun Oct 11 23:22:30 2009 Blocked incoming TCP connection request from 125.65.112.161:6000 to 64.141.97.66:8000
(Also tries a variety of other ports in quick succession.)...
222.73.204.18 - Attempting Random Connection
Sun Oct 11 23:26:05 2009 Blocked incoming TCP connection request from 222.73.204.18:6000 to 64.141.97.66:1433...
123.134.95.199 - Scanning Port 12200
Keep seeing this IP showing up in my logs attempting to make connections on Port 12200. Appears to be port scanning....
74.63.225.44 - Port scans every time on the internet
High TCP port scans many times a day pls. ban this IP. port 12000...
123.134.95.199 - Random Port Scanning by the same chinese ip
123.134.95.199 has port scanned me at least 7 times in the last day or so. ...
121.14.229.199 - File Access Attempts by 121.14.229.199
Windows Home Server logs are showing repeated attempts by 121.14.229.199 to access files on my PC...
61.160.207.232 - multi scan on several days
several scan on port 1025 with X11 protocol, and socks on firewall...
60.217.229.223 - FTP 21 constant aanvragen
Ook ik kreeg Verschillende meldingen van dit IP-adres op mijn poort....
121.14.229.199 - Port Scanning
My apache access log shows attempted "GET" requestes using "ProxyFire" software....
122.227.164.96 - Port-scanning
IP 122.227.164.96 has been scanning ports:10275, 38175, 36895, 38943, 14348, 20480, 33315, 39199, 48153.. Please, block this....
87.205.217.86 - Jacob9494
Asdfghjklqwertyuiopouettffghjfgjdhshduydgydh g ghfd fcfgc gshh gvtyidc fujdbdjw dowód sisiwveos sksco jacovbzjsjdnd. D d djaocobsososjsbd d. D djskzjxjzjzHHshdhdhsodhdoshdidijsididhdjishsidhdid sisbs...
125.65.112.161 - Incoming TCP Requests
I'm experiencing the same thing with MalwareBytes 1.41 as the previous poster....
122.227.164.96 - Constant port-scanning
IP 122.227.164.96 has been scanning my ports for about three months now on a consistent basis. Today it was scanning port 808. Sometimes there won't be anything for two or three days and then the IP (...
119.1.144.37 - Detected: Intrusion
Detected: Intrusion.Win.MSSQL.worm.Helkern
UDP from 119.1.144.37 to local port 1434...
122.227.164.96 - Scanning ports again
Somebody is scanning your computer.
Your computer's TCP ports:
8000, 6588, 1080, and 8118 have been scanned from 122.227.164.96
same person a few days ago, who is this?...
174.57.133.64 - During torrent download tried to scan my ports
174.57.133.64 tried to scan my ports with Nmap Xmas Scan while I was downloading via Bit Torrent. My Norton Internet Security was able to catch and block his multiple attempts (five during a five minu...
123.134.95.199 - been getting up to 20 warnings daily of attempted port scanning
just lots of attempts to run portscan.
so far this site has been blocked by Norton but .. ...
123.134.95.199 - Port scans every 2 and 1/4 hours.
09/26/2009 19:30:06.784 - Port scan dropped - 123.134.95.199, 12200, - This email was generated by: Sonicwall OS Enhanced 3.1.0.2-62 (0006-B11C-8D34), I have been getting these every 2 and a 1/4 ho...
60.173.26.47 - regular port scanning
regular port scanning with X11 protocole too, socks et 1025 port...
60.173.26.47 - regular port scanning
regular port scanning with X11 protocole too, socks et 1025 port...
123.134.95.199 - Port scans every few hours
Port scanning me every couple of hours outpost FP is dealing with it no problem but still annoying,
I think everyone should pay them back every computer open cmd and type this >
ping -t 123.134.95...
123.134.95.199 - Daily portscans
Numerous portscans on a daily basis, for the last 2 or 3 weeks. Backtrace shows IANA, but these things always do....
85.12.57.87 - 85.12.57.87 EINDHOVEN Netherlands PART 2
this bastard is scanning my ports to access my network scanning ports opened for few days ago is trying to access and enter the network , rejected by MALWARE DEFENDER , he is using port UDP 7024 from ...
125.65.112.161 - Incoming TCP Requests blocked by Malware Bytes 1.41
every 3 hours to 5 hours, Malware Bytes blocks an incoming TCP request from 125.65.112.161, IP trace shows IP originates from China. Probably attempted Port Scanning....
123.134.95.199 - Daily port scanning am about 7am
Every morning i get this IP address 123.134.95.199 trying to get into my computer. It's being blocked by Norton but it's annoying. How can we stop this!...
74.63.225.44 - IP 74.63.225.44 is reverse 44.225.63.74
I have done some investingating on Limestone, and they appear to be running a colo site for another colo site located outside of the USA. The IP 74.63.225.44 is a reverse 44.225.63.74 and is the US De...
74.63.225.44 - IP 74.63.225.44 is reverse 44.225.63.74
I have done some investingating on Limestone, and they appear to be running a colo site for another colo site located outside of the USA. The IP 74.63.225.44 is a reverse 44.225.63.74 and is the US De...
122.227.164.96 - Port scanning increasing
IP 122.227.164.96 has been scanning my corporate firewall with increasing frequency over the last two weeks. Yet another issue with a Chinese-based IP. :(...
122.227.164.96 - Scanning computers tcp ports
Sygate personal fire wall:
" Your computer's TCP ports:
6588, 8090, 808, and 7212 have been scanned from 122.227.164.96.."...
85.17.142.64 - Misbehaving fors
Park hoogwolde no records yes blacklisted red color the host leasweb the netherland crime any day ...
125.65.112.161 - Incoming TCP Requests
I have received unsolicited TCP requests, appearing to be attempted port scanning, for days now....
62.62.250.138 - Real time fors crime
daily fals ip listing i am report you rtw to big look ip 62.250.4.138 and this 62.250.2.2 you report poeple fals statsic fors streaming radio crime (versatel nl)...
62.62.250.138 - Real time fors crime
daily fals ip listing i am report you rtw to big look ip 62.250.4.138 and this 62.250.2.2 you report poeple fals statsic fors streaming radio crime ...
62.62.250.138 - Real time
daily fals ip listing i am report you rtw to big look ip 62.250.4.138 and this 62.250.2.2 you report poeple fals statsic fors...
74.63.225.44 - Taking action now
Please make an official complaint and open an investigation with your country's provincial police. A complaint with the canadian RCMP will be made tomorrow and contact the american authorities....
66.90.103.95 - WOODSTOCK USA hacker
this ip 66.90.103.95 DNS source IMPACT .SANTREX.NET is scanning my ports trying to enter my computer no succes if some hacker saw this please hack this bastard from USA........
89.171.132.34 - 89.171.132.34 sabel-lan tekomnet.net Krasnik POLAND
this hacker is scanning my ports hitting all possible ports he thinks he could enter my PC, no success , he is a bastard asshole, should be disconnecte from internet server.......
222.45.112.59 - Port scanning every day
Also getting regular port scans from 222.45.112.59
Fire wall logs go back to 9/9/09, scans roughly every other day....
123.134.95.199 - Port scanning every day
Got firewall logs going back to 3/9/09 with 123.134.95.199 scanning my ports, sometimes every 2 1/4 hrs.
Is it worth emailing their ISP?
Btw I found this, http://www.theclq.com/ags/players.php?a...
122.227.164.96 - portscan
122.227.164.96 hat meine ports gescannt. ich mag das nicht. ist aber nicht der einzige chinese der das versucht....
91.212.220.75 - my norton detects a worm and winlogon.exe tries querying this ip
my svchost.exe got patched somehow and is trying to contact this ip after that my winlogon.exe tried the same..
then i got several bogus .exe and .tmp files like....
vrt*.tmp and b.exe c.exe.... try...
254.1.168.192 - won't stay out of my computer
since august, maybe earlier, this IP has been scanning my TCP and UDP ports and attempted at least two major hacks that i know of. ...
66.249.65.195 - No 'Appear To Be', they are port scanning!
It's a shame that at every turn of technology, you have to spend a percentage of your time covering you butt. There should be something equivalent to a brick and morter shop owner who posts in the doo...
122.227.164.96 - Attempted to access a private webserver
[16:00:55] Accepted Connection: 122.227.164.96
[16:00:55] GET http://proxyjudge1.proxyfire.net/fastenv HTTP/1.1
[16:00:55] Host: proxyjudge1.proxyfire.net
[16:00:55] User-Agent: Mozilla/4.0 (compat...
74.63.225.44 - scans my computer for 20-30 minutes.
IP 74.63.225.44 Host Name 44.225.63.74 rev.scans my computer using TCP Port 9788, TCP Port 8085 and TCP Port 8000
I have reported this to Limestone Network out of Dallas, Tx. and they are not doing a...
85.98.250.163 - trying to get into my computer
the following I.P. adress
122.227.164.96 traced it to a hotel in Ningo china
Wenchang Hotel Bldg B
address
Nenchang Jie, 2 Hao-ahongshan Xi Lu
phone number
86-574-872-68668
flr 9
postal ...
85.98.250.163 - 85.98.250.163 scanning my ports
85.98.250.163 scanning my ports.That guy always trying to hack my pc. this is 10th time from last 2 days.. plz kill this bastard...
123.134.95.199 - Somebody is scanning your computer.
Somebody is scanning your computer.
Your computer's TCP ports:
9090, 8080, 8000, and 3128 have been scanned from 123.134.95.199....
194.109.21.230 - massive port scanning
This IP address has been scanning my network scanning just about every port this week....
123.134.95.199 - Somebody is scanning your computer.
Somebody is scanning your computer.
Your computer's TCP ports:
8118, 7212, 8888, and 8088 have been scanned from 122.227.164.96..
123.134.95.199...
222.208.183.218 - Continual alarts from firewall - scanning ports
numerous reports from firewall over last few hours of intrusion attems from this IP being blocked by friewall...
123.124.164.130 - Persistent nmap scans
IPS detects extremely frequent nmap scanning from this IP....
123.134.95.199 - I have had repeated port scans from this ip and attempted flood
Failed attempts at trying to probe my udp , tcp ports 8000-9000 having a hardwall and a softwall has made this practice just an anoying irritation, checked whois and traceroute, also ran netstat to co...
123.134.95.199 - 123.134.95.199 is not my new best friend.
123.134.95.199 , same as everyone else who has reported here. Several scans per day for the past week or so. "Annoying" would be an understatement....
123.134.95.199 - 123.134.95.199 port scans several times a day
I keep getting alerted to TCP ports scan from 123.134.95.199 Jinan, China.
This is happening several times a day....
123.134.95.199 - Port scanning approximately every 3 hrs for the last week
May be linked to 61.139.33.114 in trying to gain remote access to home computers...
125.210.253.164 - FTP scan
Connection attempt to port 21 a port scan trying to find unprotected FTP
Description Packet sent from 125.210.253.164 (TCP Port 37523) to 216.xxx.xxx.xxx (FTP)
Rating High
Date / T...
Port scan recorded and blocked by firewall
Description Packet sent from 92.240.68.153 (TCP Port 48558)
Destination port: 80
Rating High
Date / Time 2009-09-07 13:29:42-7:00
...
79.190.88.34 - Attempt to send packets
Port scan attempting to find and exploit a vulnerability associated with the SSH Secure Shell
Source IP Address 79.190.88.34 The IP address of the computer that sent the packet which caused the ...
123.134.95.199 - Regular port scanning, several every day .
TCP ports:
8085, 8080, 8000, and 3128 have been scanned from 123.134.95.199....
61.175.255.47 - Attempt to send packets
Port scan by a remote computer trying to find out if running Telnet software.
Source IP Address 61.175.255.47 The IP address of the computer that sent the packet which caused the alert.
...
222.186.24.3 - Attempt to send packets
Source IP Address 222.186.24.3 The IP address of the computer that sent the packet which caused the alert.
Source Port 6000 The port used by the source computer when sending the packet....
One is getting absolutely fed up with this flagrant diregard of one's privecy and enjoyment. One would have thought that if there is repeatable attemts at getting through a persons firewall, that the ...
123.134.95.199 - Port scans
Somebody is scanning your computer.
Your computer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'s TCP ports:
8085,...
123.134.95.199 - Port Scanning
Possible port scan dropped 123.134.95.199, 12200, WAN 69.214.41.38, 3128, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 8800
Possible port scan dropped 123.134.95.199, 12200, WAN 69.214.41.38...
94.129.138.108 - NAV alert
Attempted Intrusion \\\"NMap Null Scan\\\" against your machine was detected and blocked....
222.161.2.46 - Port scan occuring frequently from this ip
Is attempting to gain entry to my system. Firewall (praise be to the designers) is thankfuly keeping them(it) out. Why on earth can the network community be spared this flagrant disregard to one's pri...
222.161.2.46 - Port scan occuring frequently from this ip
Is attempting to gain entry to my system. Firewall (praise be to the designers) is thankfuly keeping them(it) out. Why on earth can the network community be spared this flagrant disregard to one\'s pr...
222.161.2.46 - Port scan occuring frequently from this ip
Is attempting to gain entry to my system. Firewall (praise be to the designers) is thankfuly keeping them(it) out. Why on earth can the network community be spared this flagrant disregard to one's pri...
123.134.95.199 - keeps port scanning
I have had repeated port scans from this ip. All I can say is, your not getting through!
123.134.95.199, 12200, WAN 70.176.59.67, 8118, WAN TCP scanned port list, 8085, 9090, 8800, 3128, 7212
123....
61.160.216.63 - not a hacker, but someone who is looking for a proxy
Silly children, this person is a person looking for a proxy server out there that he can connect to, to be able to access sites that China is censoring.
Hacker... maybe, I believe it is someone who...
61.160.216.63 - not a hacker, but someone who is looking for a proxy
Silly children, this person is a person looking for a proxy server out there that he can connect to, to be able to access sites that China is censoring.
Hacker... maybe, I believe it is someone who...
123.134.95.199 - Repeated Incoming TCP Connection Requests
every day, 5-6 times a day.TCP ports:
8085, 9090, 8080, 8800, 8000, 3128, 8118...
123.134.95.199 - Repeated incoming TCP connection requests
TCP requests being sent from this IP almost every day. Source Port 12200 to 8118.
Too bad my router is dropping the requests and I have my firewall set up to blacklist the entire IP range of China ...
121.15.245.215 - Repeated intrusion of incoming TCP connection request
TCP requests being sent from this IP almost every day. Source Port 12200 to 3128.
Too bad my router is dropping the requests and I have my firewall set up to blacklist the entire IP range of China ...
221.192.199.36 - Blocked incoming TCP connection request
TCP requests being sent from this IP almost every day. Source Port 12200 to 8085.
Too bad my router is dropping the requests and I have my firewall set up to blacklist the entire IP range of China ...
58.243.161.51 - takin bank details
i had to have my pc cleaned out they also cople of years ago attact my bank account get it stop...
142.68.94.195 - Blocked incoming UDP packet
My router is blocking UDP connection requests from this stupid fool. Is that all you can dish out? HAHAHA!!!!!...
66.249.91.104 - Incoming ICMP packets
My router is blocking ICMP connection requests from this stupid fool. Is that all you can dish out? HAHAHA!!!!!...
61.160.216.187 - TCP connection scans
My router is blocking TCP connection requests from this stupid fool. Is that all you can dish out? HAHAHA!!!!!...
221.192.199.41 - UDP incoming packet scans
My router is blocking TCP connection requests from this stupid fool. Is that all you can dish out? HAHAHA!!!!!...
122.227.164.96 - Port scanning
Same as everyone else. Port scanning several times a day from this IP. Caught it in my router log....
217.17.231.136 - 17 ATTEMPTS IN ONE MINUTE
tCP pORT SCANNING TO ACCESS MY CPU MY ANTIVIRUS IS KEY SAFETY FEATURE... hELP ME STOP THIS GUY...
122.227.164.96 - Portscan aus China
Jemand scannt Ihren Computer.
Ihre TCP ports:
wurden von 122.227.164.96 gescannt....
74.63.225.44 - ip74.63.225.44 (44.225.63.74.REVERSE.LSTN.NET)
IS NOW SCANNING PORTS ON MY COMPUTER IN PENSACOLA, FLA. HAVE TROUBLE WITH THIS IP AT LIMESTONE NET IN THE PAST. MAYBE WE SHOULD JUST REPORT THIS TO THE FCC AS THIS HAS BEEN GOING ON FOR SOME TIME NO...
122.227.164.96 - Port Scanning
VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!...
122.227.164.96 - Port Scanning
VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!...
122.227.164.96 - Port Scanning
VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!...
122.227.164.96 - Port Scanning
VERSUCH NOCHMAL MEINEN PORT ZU SCANNEN DU JAPANISCHER HURENSOHN UND ICH VERPASSE DEINEN VERDAMMTEN STAAT EINEN ORDENTLICHEN MYDOME REMAKE...!!!...
60.241.41.186 - just received this security alert from my router
they made a port scan three time in an hour. the firewall of my netgear blocked it. This is the first time from that IP address...
Back Trace Information on Sygate Firewall Log Viewer – Security Log of
Time: 8/20/09 7:45:21 AM Security Type: Port Scan Severity: Minor Direction: Incoming
Protocol: TCP Remote Host: ...
61.147.112.50 - Portscanned vby this oik. ISP info for others.
The Zone Alarm whois gives
inetnum: 61.147.0.0 - 61.147.255.255
netname: CHINANET-JS
descr: CHINANET jiangsu province network
descr: China Telecom
descr: A12,Xin-Ji...
222.161.2.46 - Portscanner/attempting to hack
Scriptkiddie doing a portscan then trying to connect to every port avail....
222.161.2.46 - 122.227.164.96 port scan logged
These attacks have been going on for days, but only while my computer is turned on. They only last a few seconds but are becoming a real pain. Who can stop this A**HOLE? Leave me alone and get a real ...
222.161.2.46 - 122.227.164.96 port scan logged
These attacks have been going on for days, but only while my computer is turned on. They only last a few seconds but are becoming a real pain. Who can stop this A**HOLE? Leave me alone and get a real ...
69.73.206.245 - 32 times in 1hr and 15 minutes
Barbados?????? tcp Null Scan Attempts Blocked by my antiviral software.... I woke up to this bs.... 32 AttemptS IN 1 HOUR 15 MINUTES........firewall is sick somebody spam him or give em a virus or som...
10.93.35.103 - Getting port scans that took down my network.
This IP has been port scanning my network and then issued a DDOS that took my router out of commission....
118.92.100.85 - crossing Borders
9 times in 14 secs this above ip address attempted to access my SYSTEM processes.... 9 times in 14 seconds come on... r u fo real... It stated Null scan attempted.. in one of my port... My antivirus s...
1.1.168.192 - 1.1.168.192 Port scanning every few minutes
1.1.168.192 keeps scanning my TCP and UDP ports every few minutes....
125.65.165.139 - trying to run prx.php script
Idoit is trying to connect and run prx.php script and is also associated to IP 61.160.216.63 . IF you check him out will find that he has his RDP port if you would like to play with him...
61.160.216.63 - More Chinese port scanning. uses several different IPs
More Chinese port scanning. uses several different IPs...
222.161.2.46 - Port scan by 122.227.164.96 reported
My security system is reporting port scans to my home computer which last around ten seconds each occurrence. I am notified while performing various tasks, my work, which causes me to stop work and in...
222.161.2.46 - Port scan by 122.227.164.96 reported
My security system is reporting port scans to my home computer which last around ten seconds each occurrence. I am notified while performing various tasks, my work, which causes me to stop work and in...
122.227.164.96 - Sombody Pink this Dickhead to Death !
This marks the fourth attempt this month this Chinese Computer attempted to infiltrate my Security Systems. I am not the Pentagon But will begin Targeting of Orbital Ballistic Warhead to your locatio...
122.227.164.96 - Same guy trying to get in since July 16th
Dumbass trying to get in from ports 9090, 8085, 9000, 3128, 8000, 2301, 7212, 8118, 8888, 6051, 808, 1025, 8081, 6588, 11825, 1080....
69.162.78.26 - SCANNING ALL MY PORTS
First of all hi and nice site!
I`ve been developing a Moparscape server(with java)at Moparscape.org(just by downloading templates and noob editing with jdk). But i keep getting a connection from 69.1...
125.35.66.10 - This ip address has been blocked by my firewall.
Nmap scanning from this ip was blocked by my firewall. ...
61.160.216.187 - Port scanning
Tried scanning my router on several ports looking to see who was home. From other complaints it looks like this group isn't going to be stopped any time soon. Glad I don't run windows in my shop. :)...
61.9.214.65 - attempts scans several times a day
"Somebody is scanning your computer.
Your computer's TCP ports:
8080, 443, 1080, and 3128 have been scanned from 61.9.214.65.."
happens repeatedly. ...
122.227.164.96 - attempts scans several times a day
\"Somebody is scanning your computer.
Your computer\\\'s TCP ports:
8088, 808, 11825, and 6588 have been scanned from 122.227.164.96..\"
happens repeatedly. i have no problems so dont believe...
58.18.170.134 - 00:03:49 TCP from 58.18.170.134:6000 to xxx.xxx.xxx.xxx:3389
looks like trying to remote into site...
122.227.164.96 - Port scan attempt
08/08/2009 22:59:41.304 - Probable Port Scan - Source:122.227.164.96, 12200, WAN - Destination:86.4.134.54, 8081, LAN - ...
123.127.170.65 - nmap port scan attempts
nmap port scan attempt, occurred March 13, 2009, 12:59AM. Several other nmap scans within a few hours, all originating from what seems to be Chinese IP addresses....
122.227.164.96 - Outpost - Attack detection
Port scanned 122.227.164.96 TCP(2301) TCP(8000) TCP(3128) TCP(8080) TCP(9000) TCP(8085)...
122.227.164.96 - Outpost - Attack detection
Port scanned 122.227.164.96 TCP(2301) TCP(8000) TCP(3128) TCP(8080) TCP(9000) TCP(8085)...
62.68.77.131 - Outpost - Attack detection
Port scanned 122.227.164.96 TCP(2301) TCP(8000) TCP(3128) TCP(8080) TCP(9000) TCP(8085) ...
122.227.164.96 - DU MA MAI!!!!!!!!!
Details: Attempted Intrusion \"Portscan\" against your machine was detected and blocked.
Intruder: 122.227.164.96(12200).
Risk Level: Medium.
Protocol: TCP.
Please dont be a douche and try this ...
122.227.164.96 - DOU MA MAI!!!!!!!!!
Details: Attempted Intrusion "Portscan" against your machine was detected and blocked.
Intruder: 122.227.164.96(12200).
Risk Level: Medium.
Protocol: TCP.
Please dont be a douche and try this ag...
122.227.164.96 - Every day @ 7:07 pm EDT
Port scanning detected from 122.227.164.96 reported by network and dropped. ...
74.63.225.44 - This IP was ingaged in port scanner our perimeter
A port scan from this address has been engaging port scanning our environment and 8 active scans recorded in the last 24 hours...
122.227.164.96 - Chinese jerk
Norton is catching this guy trying to portscan my pc. IP address 122.227.164.96 is in Ningbo, China....
122.227.164.96 - Multiple daily attempts occurring over the last 30 days.
A minimum of 6 attacks per day, usually twice that. The scans start on random ports, but progress sequentially once initiated. I'm going to my ISP and see if they can block him at their level instead ...
60.173.10.205 - Chinese Doing What They Do Best
From 60.173.10.205 - 46 packets to tcp(1024,1025,1026,1027,1028,1030,1031,1034,1036,1039,1044,1049,1060,1063,1079,1088,1095,1100,1104,1109,1111,1125,1128,1131,1138,1140,1150,1155,1164,1166,1167,1168,1...
62.150.91 - 9 attempt in one minute
9 times in one minute the above ip attempted to access my p. My antivirus says null scan but i believe it to be something more how do i get it to stop....... I really need some support. any one is wel...
122.227.164.96 - Immer wieder Portscan
Latest:
"TCP Packet - Source:122.227.164.96,12200 Destination:85.177.158.208,8081 - [PORT SCAN]"
Mich nervt das und es macht mich nervös.
Hate it....
122.227.164.96 - Another twit port scanning.
This moron has tried several times over a few months to port scan. Each has been blocked. Just another twit...
74.63.225.44 - Norton detected a post scan from this address
A port scan from this address originated and was shut down on 7/31/09 at 10:42:24 am EST. No effect as NAV blocked the port scan....
221.192.199.36 - kernel: Intrusion detected from 221.192.199.36. Source port is 12200, and destination port is 8085 which use the TCP protocol
kernel: Intrusion detected from 221.192.199.36. Source port is 12200, and destination port is 8085 which use the TCP protocol.
The same thing every few minutes...
221.192.199.36 - kernel: Intrusion detected from 221.192.199.36. Source port is 12200, and destination port is 8085 which use the TCP protocol
kernel: Intrusion detected from 221.192.199.36. Source port is 12200, and destination port is 8085 which use the TCP protocol.
The same thing every few minutes...
61.147.112.50 - Sent Multiple Port scan attempts at port 8080 from port 6000
Sent Multiple Port scan attempts at port 8080 from port 6000...
122.227.164.96 - Intrusion attempt by 122.227.164.96
Blocked! Several times this instruder attack my computer. Somebody, please stop him! Thanks...
74.63.225.44 - crazy port scanning
this ip address 74.63.225.44 from limestonenetwork is port scanning : 1080,3128,5575,6588,7212,8000,8085,8090,9000,9090,9788 86 times from 6/26 to now it looks like a crazy port tester ...
122.227.164.96 - I have 4 IP# port scanning attacks...everyday 4 months...
First when Firewall says, \\\"Port Scanning Attack\\\", does that mean they got in?
These are the constant attackers:
122,227,164,96 (it\\\'s the newest)
61.160.216.63
61.139.105.163
67.29.139.23...
122.227.164.96 - I have 4 IP# port scanning attacks...everyday 4 months...
First when Firewall says, "Port Scanning Attack", does that mean they got in?
These are the constant attackers:
122,227,164,96 (it's the newest)
61.160.216.63
61.139.105.163
67.29.139.234
...
212.5.221.205 - Scanning ftp access with different usernames and passwords....
scanning ftp access with different usernames and passwords.......
200.69.24.13 - Very hard port scanning for 3 days
The start was on 17.07.2009 till 20.07.2009 y. He\'s scanning ftp access with different usernames and passwords....
200.69.24.13 - Very hard port scanning for 3 days
The start was on 17.07.2009 till 20.07.2009 y. He's scanning ftp access with different usernames and passwords....
211.95.79.6 - 222.161.2.46 port 222.161.2.46
Trying to scan the port and others to get in my network. Th port was blocked.
The intruder had ip 222.161.2.46 and 84.197.228.100. They all come from China....
211.95.79.6 - How to prevent this?
Actually, this was the IP that Norton detected: 122.227.164.96(12200)....
211.95.79.6 - How to prevent this?
I think it was port scanning. What the heck are these people doing and what can we do to prevent. I was thinking to change my subscription from norton to another type of anti-virus software cause seem...
122.227.164.96 - 122.227.164.96:12200 source
Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN]
Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.1...
122.227.164.96 - 122.227.164.96:12200 source
Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN]
Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.1...
122.227.164.96 - 122.227.164.96:12200 source
Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN]
Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.1...
122.227.164.96 - 122.227.164.96:12200 source
Sun, 2009-07-19 15:02:58 - TCP Packet - Source:122.227.164.96,12200 Destination: 76.15.xxx.xxx,8081 - [PORT SCAN]
Follows after a hiatus of 27 days, a month long barrage of port scans from 61.139.1...
210.83.50.248 - I think its port scanning
I checked my adsl modem log and there are so many port kernel:intrusion thingies. This is one of them. Any idea how to stop this port scanning?...
74.63.225.44 - Limestone Networks IP 74.63.225.44 port scanning our server.
From 74.63.225.44 - 48 packets to tcp(1080,3128,6588,7212,8000,8085,8090,9090,9788)...
217.207.25.37 - Port scan from 217.207.25.37
User performed a port scan on my router\'s internet port 19/07/09 @ 18.39
Log output from router
TCP Packet - Source:217.207.25.37 Destination: XX.XX.XX.XX - [PORT SCAN]...
217.207.25.37 - This IP has scan all ports of our router.
TCP Packet - Source:217.207.25.37 Destination:xx.xxx.xx.xx - [PORT SCAN] Mon, 2009-07-20 07:18:53...
122.227.164.96 - Port Scan Attacks to phish and hijack
7/19/2009
Details: Attempted Intrusion "Portscan" against your machine was detected and blocked.
Intruder: 122.227.164.96(12200).
Risk Level: Medium.
Protocol: TCP.
Attacked IP: xx(xx.xxx.xxx.xx)...
122.227.164.96 - TC, port scan 12200
122.227.164.96 Risk Level: Medium At least 11 ports were probed. Attacks have been repeated for several days...
77.68.52.239 - 77.68.52.239 scanned Ports
Today at 9:38am 77.68.52.239 scanned ports:
5904, 5905, 5901, 5900 und 5902...
122.227.164.96 - 122.227.164.96 Port Scan Alert
Details: Intrusion: Portscan
Attacker: 122.227.164.96
Risk Level: Medium
At least 11 ports were probed.
Attacks were repeated.
Some one in China is misbehaving....
122.227.164.96 - 1-2 die woche wird gescannt
Jemand scannt Ihren Computer.
Ihre TCP ports:
8118, 8888, 8088, 808 und 1025 wurden von 122.227.164.96 gescannt....
69.109.223.233 - Port Scanning
Security alert type : Port Scan
Protocol type : TCP
IP source address : 61.160.216.63
Time at last attempt : 7/7/09 09:34:31 PM
Number of...
125.24.207.45 - Constant Bombardment
This IP along with about 14 others that I have currently counted are all taking turns constantly trying to access the same port on my system. Port 42276. My router is blocking them all but they are ...
221.192.199.41 - Update
I reported 2 weeks ago on this IP. I was getting about 15 scans per day occurring for about 6 weeks. Yesterday, I did a fresh install of Windows XP and since then I haven't been scanned once. There mu...
217.207.25.37 - Port Scanning
This address has been scanning for open ports on my router overnight - watchfromabox.com... yeah ok!...
61.147.112.50 - DOS attack on port 1080
Sent multiple request to services on our network on port 1080....
217.195.204.82 - Port Scanning
Port scanning from turkish istambul 2009.07.06. 17:53:00 217.195.204.82:1063 TCP...
74.63.225.44 - High TCP port scans
Consistent \"stealth\" scans of the following high tcp ports (1080, 3128, 5575, 6588, 7212, 8000, 8085, 9000, 9090) across multiple ip ranges in the last 2 months...
59.80.95.35 - port scaning with intrusion, atacked my ip address
KIS 2009 report -> 07.07.09 20:05:39 Detected: Intrusion.Win.MSSQL.worm.Helkern UDP from 59.80.95.35 to local port 1434
...
Same issue here. 4 TCP ports (the same as afforementioned) being scanned at least once an hour. Don't know what they want, but I have a dynamic IP. I've blocked all outgoing traffic I don't know, and ...
217.195.204.82 - 217.195.204.82 Pasabahce Turkey
port scanning from turkish Istambul region, TCP 1084 port attack, somebody should stop this sleezyhacker, asshole....
61.160.216.63 - attempting access on tcp ports 8008, 1080, 8800
this IP for the last week has been attempting access from at least 10 of my external IP\'s using mostly the 3 ports listed above.
I created a rule to deny access completely from this IP...
221.192.199.41 - port scan attacks from Hebei china
this ip 221.192.199.41 from china constanly scans my ports,who are they and what are they looking for.they scan randomly but it's about every 30 minutes.I am using bitdefender, the firewall keeps popp...
221.192.199.41 - Port Scan Attacks From China
I am using ESET Smart Security 4... I went to my log files and and noticed
7/2/2009 3:46:03 PM Detected Port Scanning attack 221.192.199.41:12200
This is only one of many instances... I have since ...
221.192.199.41 - firewall getting port scan attacks from 221.192.199.41
Relentless port scan attacks from this IP address. Wish i could just burn his fekkin chinky ass down...
221.192.199.41 - firewall getting port scan attacks from 221.192.199.41
Relentless port scan attacks from this IP address. Wish i could just burn his fekkin chinky ass down...
221.192.199.41 - firewall getting port scan attacks from 221.192.199.41
Relentless port scan attacks from this IP address. Wish i could just burn his fekkin chinky ass down...
222.82.249.235 - intrusion.win.mssql.worm.hellkern 35
ip address :222.82.249.235.
this ip address is contstantly trying to hack my system and it crashes my computer can you please look into this thanks
its causing me many problems
and it crashes ...
60.172.229.11 - Received attack from 60.172.229.11
Found attack from 60.172.229.11. TCP source port is 6000 and destination port is 2967 which use the TCP protocol....
61.139.105.163 - 219.153.66.61 port scan
Somebody is scanning your computer.
Your computer's TCP ports:
8000, 8080, 8088, and 9090 have been scanned from 219.153.66.61...
221.192.199.41 - Relentless Port Scanner
Scans for TCP ports 8090, 9000, 9090, and 8000. Started about 4 weeks ago and scans around 15-20 times per day....
221.192.199.41 - Port Scan from China
june 26 07:05:15 kernel: PORT SCANNER ATTACK detected from 221.192.199.41. Source port is 12200, and destination port is 8000 which use the TCP protocol.
4 attacks today alone ...
222.208.183.218 - port sentry locking down against scanning attack
Jun 23 10:57:01 www2 portsentry[3195]: attackalert: Connect from host: 222.208.183.218/222.208.183.218 to TCP port: 635 Jun 23 10:57:01 www2 portsentry[3195]: attackalert: Host 222.208.183.218 has bee...
209.222.129.172 - Tis guy uses several computers for port scans
Somebody is scanning your computer.
Your computer\\\\\\\\\\\\\\\'s UDP ports:
33443, 33444, 33445, 33446 and 33447 have been scanned from 209.222.129.172....
209.222.129.171 - Tis guy uses several computers for port scans
Somebody is scanning your computer.
Your computer\\\\\\\'s UDP ports:
33443, 33444, 33445, 33446 and 33447 have been scanned from 209.222.129.171....
209.222.129.170 - Tis guy uses several computers for port scans
Somebody is scanning your computer.
Your computer\\\'s UDP ports:
33443, 33444, 33445, 33446 and 33447 have been scanned from 209.222.129.169....
209.222.129.169 - Tis guy uses several computers for port scans
Somebody is scanning your computer.
Your computer's UDP ports:
33443, 33444, 33445, 33446 and 33447 have been scanned from 209.222.129.169....
61.139.105.163 - Port Scan from ChiComLand.
My computer has been scanned several times from Red China per subsequent Google searches. Anyone come up with an idea to figure out if they have placed a Trojan, etc. on the system?
Here\'s the fir...
61.139.105.163 - port scan everyday
stop this idiot chinese kid....
3-5 times aday he trys to scan my port...
62.68.77.131 - port scans from this chinese too
Somebody is scanning your computer.
Your computer\'s TCP ports:
80, 9090, 8080, 8000 and 9000 have been scanned from 61.139.105.163....
61.139.105.163 - Same IP in China
Since 06/02/09 over 100 port scans from 61.139.105.163, my opinion is that a complaint to to the admin will do nothing, I noticed that port 1981 was open and found that http://61.139.105.163:1981/ sho...
61.139.105.163 - 61.139.105.163
This guy keeps scanning my ports some times 2-3 times a day....this has been going on for some time....wish I had enough computer smarts to take this person out - would send them a file to make their ...
61.139.105.163 - Port scan on 2009-06-21 at 06:55:41
Usually daily update of yet another port scan by this moron....
202.99.11.99 - Intrusion.Win.MSSQL.worm.Helkern
20/06/09 12:05:16 AM UDP from 202.99.11.99 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern
...
211.99.122.18 - Intrusion.Win.MSSQL.worm.Helkern
20/06/09 2:17:51 AM UDP from 211.99.122.18 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern
...
60.161.78.144 - Intrusion.Win.MSSQL.worm.Helkern
20/06/09 7:44:27 PM UDP from 60.161.78.144 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern...
61.139.105.163 - Scanning
Sys: Mandriva Linux 2009.1
Port scanning from 61.139.105.136. He is scanning me daily! :( ...
61.139.105.163 - tossers
Im sick of these computer-geek-losers trying to steal information from other peoples personal computers. They all need to be penalised financialy for their disreputable actions somehow....
61.139.105.163 - Another port scan on 2009-06-19 at 17:00:40
Another port scan. This is getting tiresome....
89.34.153.157 - intrusion.win.mssql
this adresse ip scan the ports of my computer and try to do intrusion in my computer. Deteceted by kaspersky internet security...
61.139.105.163 - Still with the daily scans...
61.139.105.163 -- scans me everyday now, at roughly the same time. This is not funny. What can be done??...
Multiple attempts to login to FTP Server. IP address is definitely unauthorized...
61.139.105.163 - port scanning from 61.139.105.163
I had port scannings from 61.139.105.163
Today and yesterday, these pepole suck, they should be "removed"!...
61.139.105.163 - Another scan on 2009-06-18 at 00:16:39
Yet another scan. Think I'll report this everyday until something is done about it....
61.139.105.163 - daily port scans
this server scans me multiple times a day. lol what a skiddie! you should only need on good scan to see if my ports are open or not....
61.139.105.163 - Daily port scans and probing open ports
Netgear DG834Gt router log o/p directed to syslog server. This IP address appears on a daily basis on my logs. Is this a school for future hackers? Was it Peter Sellers who said the Chinese are 'fi...
61.139.105.163 - Another scan on 2009-06-17 at 07:15:11 GMT
Again this IP address has scanned my ports at the above mentioned time. I am expecting another scan by the end of the day, as it seems to happen 2-3 times a day every day. China needs to get a handle ...
61.139.105.163 - Repeated port scans
This person in China has scanned my ports at least 5-6 times in the past month. Not a lot, but more port scans than I have ever had in my entire life on the internet, in total! What's the deal??? ...
61.139.105.163 - Frequent port scans
This IP address has been scanning my ports multiple times a day, for weeks.
Either it's a bot computer, or some moron. I'm guessing the second one....
61.160.216.63 - TCP Scanning
I\\\'ve noticed this host doing loads of TCP syn scan\\\'s and annoyingly it\\\'s not closing it\\\'s sockets properly, so it ends up DoS\\\'ing some hosts on our network. RDP is definitely open on th...
61.160.216.63 - Misbehaving definatly and...
Is a total idoit, he left the RDP port open on his computer so you can RDP into his pc (Im a hacker who just likes to take down other hackers to make the Internet better lol). Stupid windows user. Lis...
61.139.105.163 - constant scans from this IP 61.139.105.163
This IP makes several attempts, sometimes 3-4 times a day to scan my ports. This has been going on for over a month now - WHAT ARE THEY UP TO - Enough is enough - how do we stop this Person......
61.139.105.163 - At 09:48:18 AM EDT US; my Panda IS software blocked a port scan by this IP 61.139.105.163. This port scan occurs frequently. How do we block this guy?
The complaint is continual frequent port scans by 61.139.105.163 blocked by my Panda IS software. How do we stop this guy? He is from a Chinese academy according to IPillion search results.
when wr...
61.139.105.163 - Scanning +
This host has eventually managed to intrude to a protected web server but we don't need him anyhow.
It's all too usual an activity from .cn hosts I'm sorry to say.
...
61.139.105.163 - My ports are being scanned by this address 2-3x a day
Obviously this person needs to be stopped. ...
85.190.0.3 - 2^attempt today
TCP Packet - Source:85.190.0.3 Destination: My IP- [PORT SCAN] My router have intercepted this......
222.215.230.49 - Chink port scanners
THIS IS THE INTRUDERS INFORMATION.
WHOIS Records for 222.215.230.49
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 222.208.0.0 - 222...
119.161.130.75 - This IP has trying to get access my ports several times
THIS IS THE INTRUDERS INFORMATION.
WHOIS Records for 119.161.130.75
% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
inetnum: 119.161.128.0 - 1...
79.129.24.226 - This IP has trying to get access my ports several times
THIS IS THE INTRUDERS INFORMATION.
WHOIS Records for 79.129.24.226
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Con...
217.126.94.235 - This IP has trying to get access my ports several times
THIS IS THE INTRUDERS INFORMATION.
WHOIS Records for 217.126.94.235
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Con...
61.139.105.163 - 61.139.105.163 Port scan for weeks now. How can you get rid of it?
61.139.105.163 IP is constantly running port scans. Is there a way to blk it before the attempt is made?...
208.83.223.34 - This IP is trying to acces my computer several times.
Here is the information to the intruder.
Ipillion.com
Find Location
IP address or domain/hostname
Find WHOIS
IP address or domain/hostname
Search IPillion
enter keywords:
You're now in Sacra...
61.139.105.163 - Scanned my port
inetnum: 61.139.105.128 - 61.139.105.191
netname: ZIGONG-SCINFO-GOV
descr: Zigong Sciences Informations Academe
descr: ZiGong,Sichuan
descr: PR China
country: CN
admin-c: XS16-AP
...
85.190.0.3 - TCP Packet
TCP Packet - Source:85.190.0.3 Destination: My IP- [PORT SCAN]
My router have intercepted this......
86.121.9.250 - Trying to hack my computers!
This IP has been trying to hack my computers for hours now....
213.148.226.160 - Fin scan alerts on the firewall every few minutes.
The ip address is aggressively attempting to intrude via Fin scan.
DSN name: d594e2a0.dsl.concepts.nl
Protocol: tcp
The ip address has been logged on over 60 attempts in a couple hours....
61.139.105.163 - Trying to hack my computers
This idiot or idiots...keep trying to hack my computers but are blocked by my router firewall...hahahaha...idiot!...
205.152.37.23 - Port scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.37.23
Time at last attempt : 6/6/09 04:35:25 AM
Number of...
61.139.105.163 - no you cant play with my squishy you commie gov hacks
port scans from china tech academy, must be gov funded....
78.100.232.164 - tried to telnet in to my server
tried to telnet into my theos server and made it to the login screen ...
61.147.112.50 - port scan
multi port scan a day.
Definitively in black list on the firewall appliance......
61.139.105.163 - 61.139.105.163 portscans
You should try the details of long and lat in google earth, it takes you to a forest, lol ...
61.139.105.163 - 61.139.105.163 portscans
I have had this IP 61.139.105.163 hit my firewall daily, firewall deals with it ok, on GEO of the IP, it rings a DOD (Department Of Defence, state side)IP along with my result. (Are they tracking traf...
61.139.105.163 - tcp syn scan: 61.139.105.163 scanned at least 20 ports
tcp syn scan: 61.139.105.163 scanned at least 20 ports...
61.139.105.163 - tcp syn scan: 61.139.105.163 scanned at least 20 ports
tcp syn scan: 61.139.105.163 scanned at least 20 ports...
61.139.105.163 - Yet again, my ports scanned by 61.139.105.163
61.139.105.163 is now scanning my ports daily, detected and blocked by firewall. How can this asshole be stopped?...
61.139.105.163 - 61.139.105.163 portscan for more than 2 months
Somebody is scanning your computer.
Your computer's TCP ports:
7212, 6051, 8888, and 8081 have been scanned from 61.139.105.163..
Somebody is scanning your computer.
Your computer's TCP por...
62.68.77.131 - port scans from this guy too
Somebody is scanning your computer.
Your computer's TCP ports:
9090, 9000, 8090, 80 and 8080 have been scanned from 61.139.105.163...
61.139.105.163 - Port scan attack
This ip address was detected and blocked from a port scan attack at 2 pm
central time u.s. by my firewall.
looks like a very unpopular bastard from the list of complaints.
...
61.139.105.163 - Port Scans Every Stinking Day
I hope this commie hacking bastard is hit by a bus! This has been going on for weeks now and the ports scanned are different each time. ...
61.139.105.163 - 61.139.105.163 has scanned my ports AGAIN
For the 3rd day in a row, this IP has scanned my ports. 3 times last night. Blocked by firewall. I see tehr are many other complaints - does this site take action on abusers?...
61.139.105.163 - Quit scanning my ports
This guy keeps scanning my ports all day and all night for awhile now. It is being blocked but I want it stopped. If I do something to disable the IP address I get in trouble but this guy gets to keep...
157.238.197.138 - This IP has been scanning me for about a month...
I get all-port scans from this IP many times a day and it's been happening for about a month. The IP scans about as frequently as 61.139.105.163 does......
61.139.105.163 - China guy's Vulnerability matrix...
202.97.51.61
202.97.53.33
202.97.34.58
202.97.24.197
202.97.24.202
?
61.139.105.163
As you see the second to last PC on the traceroute is very likely a firewall.
Scan of 61.139.105.163 (M...
61.139.105.163 - China guy's do onto others as....
Interesting ports on 61.139.105.163:
Not shown: 991 closed ports
PORT STATE SERVICE
25/tcp filtered smtp
42/tcp filtered nameserver
135/tcp filtered msrpc
139/tcp filtered netbios-s...
61.139.105.163 - China guy's still on the march.
What can I say about 61.139.105.163 that has not been said already. Port scan and IP block by firewall, this guy has no cares for IDS systems and never renews a new IP address....
61.139.105.163 - 61.139.105.163 is scanning my ports again
For the second day in a row, this idiot has scanned my ports 11825, 3124. Detected and blocked by firewall...
61.139.105.163 - PORT SCANNING AND BROKE INTO MY ROUTER DAILY SINCE MAY 23RD!!
THIS ASS** PORT SCANS MY ROUTER DAILY AND HAS MANAGED TO SEND A COUPLE EMAILS/TCP RECENTLY. SOMEONE REALLY NEEDS TO DO SOMETHING TO STOP THIS. ALSO SEEMS TO ACT WITH 61.137.90.253 WHO HAS ACCESSED ANO...
61.139.105.163 - DAILY PORT SCANNING!
HELP! Stop This FOOL from scanning my port daily, started on May 23rd, 2009 and going on since!...
61.139.105.163 - 61.139.105.163 Port scanning daily
How do we stop this slant eyed fool port scanning daily? It's getting tiring now....
61.139.105.163 - Daily
I get a warning daily from this IP address, 61.139.105.163
I am like everyone else here, it is being blocked but it sure is bothersome....
202.156.165.56 - keep on trying to Nmap me
i am keep on getting warnings about Nmap Null scan form this ip...
61.139.105.163 - 61.139.105.163
Tracing 61.139.105.163. please wait
61.139.105.163 IP address location & more:
IP address [?]: 61.139.105.163 Copy [Whois] [Reverse IP]
IP country code: CN
IP address country: ip address fl...
61.139.105.163 - 61.139.105.163
Somebody is scanning your computer.
Your computer's TCP ports:
6051, 8888, 11825, and 808 have been scanned from 61.139.105.163.and now i scann him retourn,more we can not make!!!...
61.139.105.163 - 61.139.105.163
http://www.softpedia.com/get/Network-Tools/Network-IP-Scanner/Local-Port-Scanner.shtml...
61.139.105.163 - 61.139.105.163
Your computer\\\'s TCP ports:
7212, 6051, 8888, and 808 have been scanned from 61.139.105.163.....
61.139.105.163 - Somebody is scanning your computer.
Somebody is scanning your computer.
Your computer\\\'s TCP ports:
7212, 6051, 8888, and 808 have been scanned from 61.139.105.163.....
61.139.105.163 - Chinese government hacker?
Could this be one of many Chinese government approved hackers attempting to attack the US through Internet terrorism? he scanned me several times, over and over again. Each time my firewall held up an...
66.223.110.226 - hack attempt
66.223.11.226 tried to hack my computer thru port scanning.. tcp,port12200. blocked attempt from my virus protector...
221.192.199.36 - Slams my router for hours on end sometimes.
Can spend hours scanning my ports crippling my internet by slamming my router. Usually 12200. No rhyme or reason seemingly to it. Very annoying, hopefully someone does something about it....
61.139.105.163 - This IP scan my ports
This IP scan my ports about 2 times a day but blocked by my FW appliance. The firewall detected a "scan port".
port 1025, 3127, socks, http, 9000
...
61.139.105.163 - From this adress my port was scanned the last 5 days sometimes
Von: xxx@web.de [mailto:xxx@web.de]
Gesendet: Montag, 18. Mai 2009 03:43
An: xxx@web.de
Betreff: NETGEAR *Security Alert* [BC:D3:B5]...
61.139.105.163 - Port scanning
Is scanning remote access ports: 9090, 9000, 2301, 8080, 3128, 9090, 9000, 2301, 8080, 3128, 8090, 8000, 8118, 1080, 1025...
62.68.77.131 - Many port scans from 61.139.105.163
Here's an initial port scan of 61.139.105.163 using a tool from DNSRight.com:
61.139.105.163:21 --> Open
61.139.105.163:23 --> Closed
61.139.105.163:25 --> Closed
61.139.105.163:53 --> Closed
6...
62.68.77.131 - Many port scans from 61.139.105.163
Reported by router since 23rd April 2009.
If I was using a modem I assume this could be serious. Can these Chinese ****s be stopped or exposed?...
62.68.77.131 - Many port scans from 61.139.105.163
Reported by router since 23rd April 2009.
If I was using a modem I assume this could be serious. Can these Chinese ****s be stopped or exposed?...
61.139.105.163 - Port scanning increased
This person is scanning me about 10 times a day now. It has gradually increased over the last month......
216.252.126.224 - 05/12/2009 08:39:54.512 - Alert - Intrusion Prevention - Possible port scan detected
scanned TCP ports...
204.2.160.17 - 05/12/2009 12:15:37.288 - Alert - Intrusion Prevention - Possible port scan detected -
scanned TCP ports...
67.192.254.204 - 05/12/2009 12:15:37.288 - Alert - Intrusion Prevention - Possible port scan detected -
scanned TCP ports...
61.139.105.163 - port scan
after his atac i have found mh690??????? [ Login ]
DNSRight.com
Welcome
Welcome to DNSRight.com Here you will find all your dns and networking tools, for free. Please request a tool or ...
61.139.105.163 - 61.139.105.163
after his atac i have found mh690??????? [ Login ]
DNSRight.com
Welcome
Welcome to DNSRight.com Here you will find all your dns and networking tools, for free. Please request a tool or ...
61.139.105.163 - Has scanned my port several times in past wee
What is the deal with 61.139.105.163? Located in China? Not surprised, freak!
Is anybody working on this to stop them?...
203.193.222.109 - 203.193.222.109 is scanning on port 8080
ZoneAlarm has prevented a connection to port 8080 on your computer. This was most likely a port scan by a remote computer trying to find out if you are running a proxy server or a web server....
61.139.105.163 - Has been scanning my IP for weeks now
2009-05-01 15:57:30 - TCP Packet - Source:61.139.105.163 Destination:80.126.xxx.yyy - [Firewall Log-PORT SCAN]
2009-05-01 15:57:31 - TCP Packet - Source:61.139.105.163 Destination:80.126.xxx.yyy - [F...
221.192.199.36 - scanning, mostly port 12200
Constantly appears all times of day or night, blocked by firewall. I, too, assume it's automated, maybe tracking websites, as seems to pop up whenever I change sites. ...
61.139.105.163 - Port scanning
Being scanned basically once a day by this jerk for the past week...will he ever give up?...
61.139.105.163 - Bugger
Damn thing said I had the security code wrong, so I try 3 times, give up... and realise it's worked.
SORRY!...
61.139.105.163 - Go away Chinky.
Naughty 61.139.105.16, leave my ports alone.
I wonder if it's blind scanning or if something is giving away my online-yness... hmm....
61.139.105.163 - Naughty 61.139.105.16, leave my ports alone.
Naughty 61.139.105.16, leave my ports alone.
I wonder if it's blind scanning or if something is giving away my online-ness... hmm....
61.139.105.163 - Pfft, go away chinky.
Naughty 61.139.105.16, leave my ports alone.
I wonder if it's blind scanning or if something is giving away my online-ness... hmm....
61.139.105.163 - 61.139.105.163 muppet at it again
over 7 port scans a day I will being emailing visa@chinese-embassy.org.uk to report this act and demand action....
61.139.105.163 - 46 scans since 29th March
Firewall blocks every time, but 46 scans from this joker in 5 weeks is beyond a joke....
61.139.105.163 - I hear you knocking
but you can't come in. This a$$hole has been beating on my sonicwall for months. Reported him to Comcast but they still haven't blocked him.
I'd love to see one of those drones over the Pakistan...
71.234.254.185 - PortScan from this address
This addres has scanned my computer through multiple TCP ports today...
61.139.105.163 - Three days of scanning so far
Three reports from my router of portscan activity from this address, one per day. Report only comes in once per day....
61.139.105.163 - Scanned twice since last message...
He\'s still at it.
Can we overwhelm the email addy associated with the IP address on whois with protests or something?
This guy must be mass scanning huge address ranges. I\'ve changed IP addres...
61.139.105.163 - Portscan from 61.139.105.163
61.139.105.163 The guy scanning my port since 3 weeks...
61.139.105.163 - 61.139.105.163 is bugging me too
Sorry. Btw. it seems Zonealarm is only picking up portscans on 8080....
61.139.105.163 - 61.139.105.163 is bugging me too
This jackass is trying for weeks now to find a hole in my defense. There is one thing I don\'t understand: I\'m on a netwerk and the router (SpeedTouch) reports that it blocked a series of port scans ...
61.139.105.163 - 61.139.105.163 is bugging me too
This jackass is trying for weeks now to find a hole in my defense. There is one thing I don\'t understand: I\'m on a netwerk and the router (SpeedTouch) reports that it blocked a series of port scans ...
61.139.105.163 - 61.139.105.163 is bugging me too
This jackass is trying for weeks now to find a hole in my defense. There is one thing I don\'t understand: I\'m on a netwerk and the router (SpeedTouch) reports that it blocked a series of port scans ...
61.139.105.163 - Now the scanning has started in Denmark too :(
This attack started 4 days ago on my pc. And I'm getting scanned 2-3 times a day from this 61.139.105.163 we all know and hate by now. The ports scanned so far is: 8081, 6588, 3124, 3127, 8888, 808, 1...
61.139.105.163 - Now the scanning has started in Denmark too :(
This attack started 4 days ago on my pc. And I'm getting scanned 2-3 times a day from this 61.139.105.163 we all know and hate by now.
I/We would not have detected this without our firewalls detectin...
61.139.105.163 - Complaint sent to address owner ;)
Dear Sir or Madam,
>
> Can you please tell me why my computer is being repeatedly scanned from an IP address registered to you? The details of one set of port scans are below, along with my trace ...
205.152.132.23 - Port Scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 5/3/09 06:54:00 AM
Number o...
61.139.105.163 - 61.139.105.163 IS Port Scanning / Crashing My PC
This ip 61.139.105.163 is attacking my pc all the time, most are port scans but sometimes is some kind of ddos attack as i get the blue warning screen (crashed pc)
Someone report this ip 61.139.105...
Many Port-Scans the last two days!...
61.139.105.163 - Chinese port scanner alert
This guy has scanned me 3 times in the last 5 days. Well dodgy....
61.139.105.163 - Needing help?
Hi,
If you want to get rid of this guy, Try changing your Public IP Address. If you have a router, just go into setup menu and select \\\"Mac Address\\\" option and \\\"Clone Mac Address\\\". If th...
61.139.105.163 - Needing help?
Hi,
If you want to get rid of this guy, Try changing your Public IP Address. If you have a router, just go into setup menu and select \"Mac Address\" option and \"Clone Mac Address\". If that fails...
61.139.105.163 - 61.139.105.163
Is 61.139.105.163 misbehaving (engaging in SPAM, brute-force, DOS attack, phishing, or other fraud? Report the abuser now!he have kill my mail and i have scann him retourn!!!he have port21 open!!!!!!...
multiple port-scan...
61.139.105.163 - Multipl Port scanning from 61.139.105.163
(Fr / sorry for my poor english) - Who is that IP(61.139.105.163) who is scannig my LAN since 09-mars-2009 20h15 4 time by day evreyday...
61.139.105.163 - Port scanning from 61.139.105.163
(Fr / sorry for my poor english) - Who is that guy who try evry time to scan my lan ? 61.139.105.163...
61.160.217.15 - TCP port scanning
Received Firewall notice alert: Someone is scanning your TCP Ports 80, 8080, 8008, and 7212 from 61.160.217.15...
61.139.105.163 - Port scanning every day
61.139.105.163 keeps port scanning me. It's happening at least 4 times a day. More so in an evening....
61.139.105.163 - Consistent port scanning/intrusion attempts logged
Same ports scanned as previous posters at least once per day....
61.139.105.163 - Firewall report of scanning computer from 61.139.105.163
Scanning TCP ports 6051,8888,808, and 8081 have been scanned by 61.139.105.163 in attempt to gain access. Blocked by Sygate firewall....
61.139.105.163 - port scan
what is wrong with this person please cant anyone stop it everyday this is happening to me ...
217.195.204.82 - Port Scan and Netspy Attack
217.195.204.82 tried a port scan on port 2009 and also a Netspy Attack on port 1024 followed by ICMP probe. Don't know what they're up to....
61.139.105.163 - TCP Packet - Source:61.139.105.163 Destination: XX - [PORT SCAN]
Another port scan - second in three days. Someone's got to take him out!...
61.139.105.163 - Multiple port scans everyday
Your computer\'s TCP ports:
6051, 8888, 808, and 8081 have been scanned from 61.139.105.163..
Many more ports scanned as well. Getting really annoyed! Up to 4 scans during 2 minutes....
61.139.105.163 - port scanning
61.139.105.163 hat mich auch belästigt!nur ist jetzt mein I-mail programm hinüber,musste ein neues instalieren!habe seine ip in meine firewall eingegeben und somit hat er bei mir keine chance mehr!!...
61.139.105.163 - Multiple port scans from 61.139.105.163 in the last 72 hours.
Scanning ports up to 8 times daily...
61.139.105.163 - Multiple scans daily from 61.139.105.163 (blocked by firewall)
Multiple scans daily from 61.139.105.163
TCP Packet - Source:61.139.105.163 Destination:81.129.216.6 - [PORT SCAN] TCP Packet - Source:61.139.105.163 Destination:86.133.22.216 - [PORT SCAN]...
61.139.105.163 - Port Scanning
The Chinese authorities should get there act together and stop these criminals....
61.160.216.63 - Daily Scans From IP 61.160.216.063
Daily TCP scanning from this Chinese IP. Usually ports 8080 80 8008 8081 1080 8800 but have seen other TCP ports scanned...
61.160.216.63 - Found my Apache server and tried to execute PHP scripts
[Wed Apr 22 10:29:24 2009] [error] [client 61.160.216.63] script 'C:/Program Files/Apache Software Foundation/Apache2.2/htdocs/prx1.php' not found or unable to stat...
202.99.11.99 - 04/04/2009 04:04: Intrusion.Win.MSSQL.worm.Helkern
04/04/2009 04:04:51 UDP from 10.13.3.61 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern...
61.139.105.163 - PORTSCAN
ports: 9000, 3128, 8000, 80, 9090, 8080, 8088, 8090, 6588, 2301, ..." time="Wed Apr 22 21:48:39 2009" username="not logged yet"
At this goat it is opened RDP (3389). Similar it is a boat or a virus...
61.139.105.163 - 61.139.105.163 scanning my port
ÐеÑколько раз Ñканнировал мой комп, оÑтановлен файерволом....
61.139.105.163 - 61.139.105.163 is port scanning my firewall daily
I reported this issue to my ISP Virgin who weren't prepared to help.
Like everyone else I'm getting fed up of who every this is port scanning my firewall multiple times every day...
62.68.77.131 - Portscan from 61.139.105.163
Several Portscans since January 2009 from
61.139.105.163
Please stop this chinese idiots
many thanks...
62.68.77.131 - Portscan from 61.139.105.163
Several Portscans since January 2009 from
61.139.105.163
Please stop this chinese idiots
many thanks...
62.68.77.131 - Portscan from 61.139.105.163
Several Portscans since January 2009 from
61.139.105.163
Please stop this chinese idiots
many thanks...
IDS scan parser : tcp syn scan: 61.139.105.163 scanned at least 20 ports at xxx.xxx.xxx.126. (1 of 1) : 61.139.105.163 xxx.xxx.xxx.126 0040 TCP 12200->3124 [S.....] seq 2472422924 win 8192...
61.139.105.163 - Keeps doing port scan every day!
so annoying....
TCP Packet - Source:61.139.105.163 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]
Luckily my firewall blocks it, but hey... make em stop that!...
202.97.238.238 - Port Scanning
03:48:18 202.97.238.238 Detected attack, host not blocked SINGLE_SCAN_PORT (772)...
61.139.105.163 - Port scanning
[Firewall Log-PORT SCAN] No.020 Fri, 2009-04-17 22:25:50 - TCP Packet - Source:61.139.105.163 Destination:80.229.221.130...
74.6.8.89 - Daily Scans From IP 61.160.216.063
I am being scanned on a daily basis from this IP. Usually TCP ports 80, 8080, etc. I have traced it back to a backbone in Bejiing....
61.139.105.163 - Port scan from this IP blocked 4x in past 24hrs
My (hardware) firewall has reported this IP address for port scanning 4 times in past 24 hours....
61.139.105.163 - 61.139.105.163 Port scans at least 20 times a day!
I have Zone Alarm and its been blocking this as_ Hole every day at least 20 times a day. here is a list of the ports that were last scanned,8988,8000,27212,2967,888,8081,808,6051,1025,2301,80,3128,80...
58.48.33.24 - attempting hacking
58.48.33.24 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern
this ip/person is port scanning my network trying to gain access for hacking......
97.96.12.218 - attempting hacking
97.96.12.218 to local port 1434 Absent Detected: Intrusion.Win.MSSQL.worm.Helkern
this ip/person is port scanning my network trying to gain access for hacking...
...
87.237.105.123 - attempting hacking
this ip/person is port scanning my network trying to gain access for hacking...
61.139.105.163 - attempting hacking
this ip/person is port scanning my network trying to gain access for hacking...
61.160.217.15 - attempting hacking
this ip/person is port scanning my network trying to gain access for hacking...
222.187.220.162 - attempting hacking
this ip/person is port scanning my network trying to gain access for hacking...
61.160.216.63 - attempting hacking
this ip/person is port scanning my network trying to gain access for hacking...
61.139.105.163 - TCP flood From 61.139.105.163
Full extract here, with my IP Hash\'ed out!
Firewall log:
Fri 2009-04-10 20:04:47 TCP flood From 61.139.105.163 port:12200 To 81.109.###.## port:808 droped
This guy could be a pain!...
61.139.105.163 - TCP syn scan several times a day
Scans started last weekend and so far last entry in my logs has been Thursday April 9th 23:48 (local time)...
61.139.105.163 - Port scan attack stopped by NAT in router (did not know what to do with the connect request)
This person in China has scanned a few ports. However as the router did not know where to send the packets on the NAT (Network Address Translator) so it dropped the packets. The scan failed to reach m...
61.139.105.163 - Port scan attack stopped by NAT in router (did not know what to do with the connect request)
This person in China has scanned a few ports. However as the router did not know where to send the packets on the NAT (Network Address Translator) so it dropped the packets. The scan failed to reach m...
61.139.105.163 - "IDS scan parser : tcp syn scan: 61.139.105.163 scanned at least 20 ports at 87.194.154.59"
A machine at this IP (61.139.105.163) has scanned ports at my IP (i have a static IP) once every couple of days. My firewall records and blocks this attempt. Is there anything further I can do?...
80.192.169.240 - Repeated Port Scanning
This has been going on for days now-Repeated and constant port attacks every few seconds. Thousands of attempts!...
205.152.37.23 - Port Scanning From Funchal, Madeira
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.37.23
Time at last attempt : 4/5/09 02:45:44 PM
Number of...
61.139.105.163 - Port scan today at 00.53 and 18.16 gmt
Sun, 2009-04-05 18:16:33 - TCP Packet - Source:61.139.105.163 Destination:81.86.248.147 - [PORT SCAN]
Sun, 2009-04-05 00:53:52 - TCP Packet - Source:61.139.105.163 Destination:81.86.248.147 - [PORT...
Somebody is scanning your computer.
Your computer's UDP ports:
33435, 33436, 33437, and 33439 have been scanned from 63.245.208.11.....
61.139.105.163 - port scans from 61.139.105.163
TCP Packet - Source:61.139.105.163 Destination:81.20.222.17 - [PORT SCAN]
How can we stop it ?...
84.90.9.137 - Scanned my port.
An intrusion attempt by 84.90.9.137 was blocked by Norton on 4/3/2009 at 4:42 AM Eastern time. Threat level was described to be medium. Traffic description was TCP, 57619....
72.22.132.72 - Scanned my port.
An intrusion attempt by 72.22.132.72, 12118 was blocked by Norton on 4/3/2009 at 4:40 PM Eastern time. Threat level was described to be medium. Traffic description was TCP, 12118....
88.192.115.197 - Scanned my port.
An intrusion attempt by 88.192.115.197, 12118 was blocked by Norton on 4/4/2009 at 2:01:22 AM Eastern time. Threat level was described to be medium. Traffic description was TCP, 12118....
201.167.18.101 - Scanned my port.
An intrusion attempt by 201.167.18.101, 52511 was blocked by Norton on 4/4/2009 at 10:22:31 PM Eastern time. Threat level was described to be medium. Traffic description was TCP, 52511....
61.139.105.163 - The IP address keeps scanning my ports and my firewall shows DoS attacks also from this IP
I have traced the IP back to China.
I have sent an email with details of the IP address to the Chinese Embassy in London demanding an explanation and for the person to be stopped.
Why don\'t...
61.139.105.163 - port scans since two weeks, several times a day
2009-04-04 19:10:41 Port-Scans by 61.139.105.163 TCP ports:
8118, 8089, 1025, 6051 und 808
...
222.215.230.49 - 222.215.230.49 is running port 3-port scans on me twice daily for past 2 days, so far.
222.215.230.49 is running port 3-port scans on me twice daily for past 2 days, so far. Ports 3128, 8000, 7212, so far. Not sure what they\'re up to....
61.139.105.163 - Daily Port scans - 61.139.105.163
Netgear notifies 2 -3 instances a day now for last 5 days.
Pain in the A****...
205.152.132.23 - constant port scanner
Number of security log entries : 1
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt ...
61.139.105.163 - Portscanning me on multiple WAN IP's
This IP has been port scanning me anywhere from 3-70 times a day between my 4 different WAN IP\'s....
61.139.105.163 - Port scan from 61.139.105.163
Vrey annoying. Can't this sort of thing be prevented?...
61.139.105.163 - Stop this idiot!
Can somebody or something stop this idiot?
61.139.105.163 scan my network every day... I have a secure firewall, but i hate the idiot!!!...
61.139.105.163 - 61.139.105.163 trying to hack into my router?!!
Port scans on my router, so I scanned him back (in China). Seems to be running Win 2003 server which is a bit odd. Anyway, he has RDP running, anyone want to try and guess his password? :O)
Interes...
64.115.117.130 - port listen (1025)
Been getting this off and on for the past few days. Firewall stops it. It shows up in COMODO popup warning as a \\\"System\\\" file?...
61.139.105.163 - Daily Port scans - 61.139.105.163
Just started getting this port scan daily. Also started to get phishing emails for UK banks. Related? This lot need to be stopped!...
61.139.105.163 - 14 Scans in 3 Days. Average 3-4 a day. started about 3/12/09
61.139.105.163 Is very very very annoying, My network is secure, but it\'s a pain to be doing something and have the You\'re being scanned and a window pops up. The ports it scan for so far are, 3128,...
82.173.74.122 - try a nmap scan 4 tiimes in 2 seconds
i dont even know what a nmap xmas scan is.... alll i know is my norton stopped this guy 4 times and i wont allow a fifth if i can help it,
P.s. Hackers probly get off readding what we right abou...
61.139.105.163 - Daily Port scans
Kept getting emails from my router teling me of port scans from this IP address 61.139.105.163 googled it and found this site...
61.139.105.163 - 61.139.105.163: Daily port scans
This could be an infected machine, as it is running Windows 2003. I simply performed an NMAP scan against him, but I am wondering if anyone has performed any other scans to see if there are any known...
61.139.105.163 - 61.139.105.163
Been scanning me the last few days too. I see I\'m not the only one....
61.139.105.163 - 61.139.105.163: Port scanning
This IP is constantly port scanning, My ISP will do nothing about it (Tiscali) have blocked it through my firewall on all inbound (TCP) with IP range 61.139.105.112 - 191, hope this helps...
61.139.105.163 - Daily Port Scaning By 61.139.105.163
Our router has sent us reports daily for the past few days, saying that we are receiving port scans from 61.139.105.163
Does anyone know how to stop it? We are really worried about this!...
61.139.105.163 - Port Scanning
Scanning started about 4-5 days ago, stopped by Firewall. Stop this idiot....
61.139.105.163 - Port scan
My router reports this guy scanning 8081 once a day for the past 5 days. I am trying to figure out how to block him. I have a Netgear router....
4.79.142.206 - shieldsup.grc.com
nslookup shows the domain above being registered to this IP. Shields up is an online tool to detect security flaws in your connection (open ports, etc.) To those that think this is a hacker, someone i...
4.79.142.206 - shieldsup.grc.com
nslookup shows the domain above being registered to this IP. Shields up is an online tool to detect security flaws in your connection (open ports, etc.) To those that think this is a hacker, someone i...
61.139.105.163 - Multiple port scans for past 3 days
Router reports port scan from address 61.139.105.163. Activity shows multiple scans for the past 3 days. Previous scans from this address logged....
61.139.105.163 - Port Scanning
since 26 of March, typical message from my routeur :
NETGEAR *Security Alert* [FD:BF:7D]
TCP Packet - Source:61.139.105.163 Destination:83.113.187.162 - [PORT SCAN]
TCP Packet - Source:192.1...
61.135.243.252 - 61.135.243.252 is portscanning
61.135.243.252 is using Nmap tcp port scan to break into my network....
210.19.140.130 - 210.19.140.130 is portscanning
210.19.140.130 is using Nmap tcp port scan to break into my network....
61.139.105.163 - Port Scanning by 61.139.105.163
Has tried multiple port scans on my router over a couple of days. Believed stopped by router firewall....
62.68.77.131 - Port scan from 61.139.105.163
TCP Packet - Source:61.139.105.163 Destination:xxx.xxx.xxx.xxx - [PORT SCAN]
Glad it's not just me. I've had several scans appear in my router logs this morning
...
61.139.105.163 - Multiple Port Scan's
Has tried multiple port scans to my corp laptop since I have been checked in at a hotel. Denied by our firewall....
80.79.17.83 - Multiple Port Scan's
Has tried multiple port scans to my corp laptop since I have been checked in at a hotel. Denied by our firewall....
61.139.105.163 - Port scanning
61.139.105.163 just scanned my port-but was stopped by the firewall.
...
61.139.105.163 - 61.139.105.163 = Zigong Sciences Informations Academe?
frequent port scanning here too.
gotta check now if intrusion succeeded, cause obviously these guys are pro\'s. www.ip-adress.com reports that its:
Zigong Sciences Informations Academe.
cheers :/...
Can anything be done to stop him or it?...
61.139.105.163 - 61.139.105.163 is scanning ports on my firewall twice or more a day for past 2-3 weeks. What can be done?
What can be done to stop 61.139.105.163 from attempting fraudulent activity?...
61.139.105.163 - Have the same
Hey there,
I checked the logs on my firewall and recognized the the port scans start on 2009/03/09 .. and still scanning the same ports (9090, 8080, 3128, 7212, 1080, 8118, 3124, 6588, 8000).
My...
61.139.105.163 - scanning again
(first excuse my bad english)
I do not really know how my Linux Mandriva 2009.0 works, but here is what happened today:
Just after I turned my computer on, the firewall warned me of someone trying t...
61.139.105.163 - port scanning
several times i have caught this ip address 63.139.105.163 scanning my pc fortunately linux firewall has stopped him something should be done about this muppet or maybe do a denial of service on him a...
61.139.105.163 - 61.139.105.163 Port Scan
I too am sick to death of this IP port scanning me multiple times daily....
4.79.142.206 - port scanning one hour , and firewall intrusion....
this IP: 4.79.142.206 - WICHITA KANSAS ASSHOLE , was scanning my ports over and over again , tried to get into my computer, no luck asskisser , go to BURKINA FASO , to practice hacking........
61.139.105.163 - this ip has been scanning my ports
...and was stopped by my computer.
Date: 2009-03-22 (15:32 to 15:34)...
61.139.105.163 - portscan attacks too frequent to mention
61.139.105.163
these portscan attacks have been prevented by software on my computer...
61.139.105.163 - This IP has scanned my ports 6 times in 4 days....
Can't anyone stop this person from what he is doing? Surely something can be done?...
61.139.105.163 - the ip has scaned my ports
5 attacks in 3 days
i have been on this address for months
just started on the 18th
...
61.139.105.163 - Well it's not just me I guess
I\'m gettting around 3-15 perday scans from this IP too. Wonder if it\'s a botnet JUmp point...
61.139.105.163 - Probable Port Scan - Source:61.139.105.163
2-3 ports, multiple times daily... China sucks...
61.139.105.163 - Port Scann
3 Time every day Portscann.
\"Your computer\'s TCP ports:
8118, 808, 8888, and 1025 have been scanned from 61.139.105.163..\"
Stop this idiot...
24.118.69.237 - Death Threats / Port scanning
Dblocc4207: Do you want to die?
Omg_itssvenn: No I want you to piss off and leave our chat-room alone.
Dblocc4207: Fuck you, i\'ll do what I want when i want.
omg_it\'ssvenn: sure thing champ
____...
61.139.105.163 - Router firewall detected this IP scanning my ports
For the second time in 24 hours, this IP carried out a port scan on my system. ...
205.152.132.23 - port scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 3/19/09 04:47:52 AM
Number ...
61.139.105.163 - THis IP carried out one port scan
Router Firewall detected port scan at 19:42 hrs by 61.139.105.163 last night...
61.153.215.194 - port scanning
port scan in the early hours of the morning. looks like the firewall blocked it ok....
61.139.105.163 - Received daily portscans from 61.139.105.163
I maintain several Firewalls with an intrusion detection mechanism. Daily I receive from all these firewalls alert messages (portscans) from this IP-Adres...
61.139.105.163 - Port Scan! >:(
Firewall component of router sending immediate alert log for scanning my ports! >:( Someone must block this IP address for good, he doesn\'t deserve internet access!...
61.139.105.163 - Stop this idiot 61.139.105.163
Can somebody or something stop this idiot from scanning other peoples computer: 61.139.105.163
03/17/2009 11:35:55.416 - Possible port scan dropped - Source:61.139.105.163, 12200, WAN - Destination...
61.139.105.163 - Stop this idiot 61.139.105.163
Can somebody or something stop this idiot from scanning other peoples computer: 61.139.105.163
03/17/2009 11:35:55.416 - Possible port scan dropped - Source:61.139.105.163, 12200, WAN - Destination...
61.139.105.163 - Stop this idiot 61.139.105.163
Can somebody or something stop this idiot from scanning other peoples computer: 61.139.105.163
03/17/2009 11:35:55.416 - Possible port scan dropped - Source:61.139.105.163, 12200, WAN - Destination...
61.139.105.163 - scanning ports
Scanning my ports as well. My Linux firewall has blocked him as well....
218.98.106.53 - This is scanning my computer on a daily basis
Intrusion.Win.MSSQL.worm.Helkern! Attacker\\\'s IP address: 218.98.106.53. Protocol/service: UDP on local port 1434.......
218.98.106.53 - This is scanning my computer on a daily basis
Intrusion.Win.MSSQL.worm.Helkern! Attacker\'s IP address: 221.233.242.4. Protocol/service: UDP on local port 1434.......
61.139.105.163 - 61.139.105.163 is scanning my port
This ... guy is scanning my port twice daily, ...
62.68.89.178 - NMap Null Scan sent to me 10 times today
tried to scan port 10x but was stopped by norton protection...
61.139.105.163 - 61.139.105.163 is Port scanning me...
This guy is trying to Port scan me several daily....
221.195.73.68 - Port Scanning from China
[INFO] Sat Mar 14 10:03:57 2009 Blocked incoming TCP connection request from 221.195.73.68:6000 to xxxxxxxxx
[INFO] Sat Mar 14 10:03:57 2009 Blocked incoming TCP connection request from 221.195.73....
61.139.105.163 - Asshole scanning my port!!!!!
Asshole scanning my port!!!!!
time: 16.00 hours
Situation: The IP adress was blocked by my firewall...
221.192.199.36 - scanning 7212 and 9090
This address keeps attempting a TCP connection to port 7212 and 9090. Connection requests come every 10 minutes or so. Requests are rejected by my router. My ISP is Time Warner cable....
129.41.224.50 - Port Scanning
Number of security log entries : 1
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt ...
205.152.132.23 - PORT SCANNING FOR MONTHS
Number of security log entries : 1
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt ...
94.191.220.40 - Proxy scanner
Scan Anonymous/Transparent/High-Anon HTTP proxy scanner wiht Dfind scanner...
61.139.54.94 - UDP from 61.139.54.94 to local port 1434
2/26/2009 1:19:46 AM
Detected: Intrusion.Win.MSSQL.worm.Helkern Absent
UDP from 61.139.54.94 to local port 1434
2/26/2009 3:19:29 AM
Detected: Intrusion.Win.MSSQL.worm.Helkern Absent
UD...
24.105.130.210 - Port scan
THis IP carried out a port scan, then attempted to access via ports 5905 - 5919...
68.87.71.226 - Portscanning: Attempting to connect to UDP ports.
Portscanning: Attempting to connect to UDP ports....
221.195.73.68 - 221.195.73.68
this IP has been scanning my ports everyday for a long time now. Blocked all the time....
205.152.132.23 - port scanning
Number of security log entries : 1
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt ...
10.0.0.24 - Port Scanning 10.0.0.24
Three or four times today, I've gotten "vulnerability blocked" messages from Norton Antivirus. They were all port scans and all from this address. It's someone in California. Nothing happened becau...
209.85.147.188 - Trying to scan my ports eh?
This ip attempted a portscan very frequently for aabout 15 minites this morning...
64.233.169.188 - Trying to scan my ports eh?
This ip attempted a portscan every other minute for about ten minutes this morning...
68.198.110.117 - Detected intrusion.WinMSSQL.Helkern Worn
1/31/2009 8:42:10 PM Network packet UDP from 59.81.64.229 to local port 1434 Unknown application Detected: Intrusion.Win.MSSQL.worm.Helkern...
222.208.183.147 - Attacking my router
Every two hours or so they hit my router from this IP address on port 12000 and going to my IP at ports 7212,8800,8000,3128....
221.195.73.68 - Attacking my router
Every two hours or so they hit my router from this IP address on port 6000 and going to my IP at ports 8800,7212,8000,3128. Router stops traffic. I see a variety of different IP's in China in my logs...
66.35.46.194 - port scanning
Jan/27/2009 00:46:22 Drop UDP packet from WAN 66.35.46.194:10113 173.3.57.142:33437 Rule: Default deny
Jan/27/2009 00:46:17 Drop UDP packet from WAN 66.35.46.194:10113 173.3.57.142:33437 Rule: De...
96.17.10.33 - port scanning from
Jan/27/2009 00:03:22 Drop TCP packet from WAN 96.7.51.172:443 173.3.57.142:61693 Rule: Default deny
Jan/26/2009 23:59:06 Drop TCP packet from WAN 96.17.10.17:80 173.3.57.142:61671 Rule: Default d...
221.194.46.172 - ip address continues to connect to port 12200
ip address continues to connect to port 12200...
192.168.1.254 - Attempts at multiple port scans daily
The IP address 192.168.1.254 has attempted numerous port scans daily for the past 6 weeks. These attempts were captured by my computer's security center. ...
206.222.198.12 - Multiple port scans
Multiple port scans plus DOS to ports 5904 - 5908 detected by firewall...
124.157.222.244 - Port scan attack
First attack on 22:42:01 and second attack on 22:43:36 (date: 8/1/09)
Both attacks lasted less than 1 millisecond. Scanned TCP ports 23818, 23807, 14321, 10055, 14129, 14356, 10055, and 23818. Uses ...
218.85.65.17 - Port scan through firewall
This is one of many IPs that have been running port scans on computers at my work's network (through the firewall). 218.10.111.106 is the normal culprit, but I'm not in the least bit surprised by gett...
218.10.111.106 - Port scan through firewall
also getting port scanned from this IP, symantec reports once every 2-5min now. The only way I can explain this IP getting through 2 firewalls is an exploit of IM software. Otherwise this user\'s comp...
129.33.82.49 - ISA Server detected an all port scan attack from Internet Protocol (IP) address 129.33.82.49.
ISA Server detected an all port scan attack from Internet Protocol (IP) address 129.33.82.49.
isalert@.. ISA Server name: xxx ISA Server detected a possible Internet .. Jan 06 - 3:54am
isal...
220.233.240.155 - Continuous report from this IP for Nmap Null Scan
My Norton gives me continuous report the following IP try to attack by system: 220.233.240.155
Norton calls it "Nmap Null Scan"
Traffic description: TCP, 50000
Whatever it is, I don't appreciate ...
205.150.5.63 - Norton Flagged for NMAP xmas Scan
From NIS 09
\\\"Network Traffic from 205.150.5.63 matches a signature of a known attack\\\"...
41.249.4.186 - Single port scan
This IP carried out a port scan, and also attempted to access ports 5904 to 5920. Rejected by router firewall...
87.210.165.93 - NMAP X-MAS SCAN ON MY COMPUTER
This person continues to scan my computer using NMAP X-MAS SCAN. i get over 15 threats a day for Nortan. Please stop him!...
200.35.148.100 - port scanning
Somebody is scanning your computer.
Your computer's TCP ports:
5902, 5903, 5905, and 5904 have been scanned from 200.35.148.100.....
222.208.183.147 - more chineese port scanning
Somebody is scanning your computer.
Your computer\'s TCP ports:
8000, 7212, 8800, and 1028 have been scanned from 222.208.183.147.....
213.143.229.25 - scanning my telnet server and for open ports.
scanning my telnet server and for open ports....
64.94.150.170 - Location is port scanning our servers
Time: Sun Dec 21 03:14:04 2008 -0600
IP: 64.94.150.170 (US/United States/-)
Hits: 11
Blocked: Perm.
Sample of block hits:
Dec 21 03:12:38 unit1 kernel: Firewall: *UDP_IN Blocked* IN=...
62.58.50.81 - Hacking/
Port scanning dude using tcp. I'm used to most all of this sort of thing coming from China... kinda' feel rather international now. Not that I approve....
129.41.224.50 - hacker trying to get in
Security alert type : Port Scan
Protocol type : UDP
IP source address : 129.41.224.50
Time at last attempt : 12/14/08 07:05:11 AM
Number ...
222.208.183.147 - 222.208.183.147 chinese port scanning
Security alert type : Port Scan
Protocol type : TCP
IP source address : 222.208.183.147
Time at last attempt : 12/14/08 07:13:03 AM
Numbe...
72.22.130.168 - Attempted Intrusion
Attempted Intrusion \"NMap Null Scan\" against your machine was detected and blocked.
Intruder: 72.22.130.168(52322).
Risk Level: Medium.
Protocol: TCP.
Attacked Port: 3664.
This has been going...
205.152.132.23 - constant port scanner
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 12/12/08 05:45:31 AM
Number...
218.10.111.106 - multiple TCP port scans
Usually TCP ports 9090,8090,7212 and 988. Getting quite annoying. Multiple scans occur first thing after booting up for the day and come about 30 minutes apart. Then a couple every few hours after ...
205.152.132.23 - Scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 12/9/08 05:28:22 AM
Number ...
222.208.183.147 - Scanning From China
Security alert type : Port Scan
Protocol type : TCP
IP source address : 222.208.183.147
Time at last attempt : 12/7/08 05:21:18 AM
Number...
139.76.115.129 - Scanned 137 Ports
Security alert type : Port Scan
Protocol type : TCP
IP source address : 139.76.115.129
Time at last attempt : 12/7/08 04:43:22 AM
Number ...
218.10.111.106 - Switching Ip Address - Warning
Hacker Switches Ip Address
- Warning
This Ip Adress Is A Spam,
Hacker 60.222.224.137
The China User Uses This Same Ip Adress 218.10.111.106
THERE NAME IS:
Liu Zhiyong...
60.222.224.137 - Switching Ip Address - Warning
Hacker Switches Ip Address
- Warning
This Ip Adress Is A Spam,
Hacker 60.222.224.137
The China User Uses This Same Ip Adress 218.10.111.106
THERE NAME IS:
Liu Zhiyong
...
4.79.142.206 - 4.79.142.206 www.grc.com (shields up) fault
The 4.79.142.206 comes from www.grc.com (shields up) I have been testing my firewall. ...
129.41.224.51 - PORT SCANNING
Security alert type : Port Scan
Protocol type : UDP
IP source address : 129.41.224.51
Time at last attempt : 12/2/08 05:41:10 AM
Number o...
205.152.37.23 - Port scanning Blocked
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.37.23
Time at last attempt : 12/1/08 04:45:01 AM
Number o...
217.128.150.227 - Scanning ports 5904 - 5909
Has scanned ports 5904 to 5909 twice within a 2 second period, detected by router firewall and rejected...
am getting very annoyed with whom ever is doing this will be reporting this to my internet holder and will go further if i have to this WILL STOP......
218.10.111.106 - Multiple Port Scans from 218.10.111.106 & 222.187.220.169
Somebody is scanning your computer.
Your computer\'s TCP ports:
9090, 8090, 7212, and 988 have been scanned from 218.10.111.106..
Somebody is scanning your computer.
Your computer\'s TCP po...
213.199.162.203 - Ports scanning
scaning ports 10 times; every time 4 port scanned, so he had checked almost 40 ports (few ports was scanned 2 times)...
82.165.45.165 - Not much knowledge of this, just a log from firewall.
like the subject says.
One attempt only. Well one \'Blocked\' attempt.......
218.10.111.106 - constant port scans
218.10.111.106 has scanned my ports all day today, once every 30 to 60 minutes. Keeps scanning ports 9090, 8090, 7212, and 988. All scans originate from port 12200. My firewall blocks them, but it\'s ...
205.152.37.23 - Port Scanning Blocked By Firewall
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.37.23
Time at last attempt : 11/26/08 07:40:49 AM
Number ...
205.152.132.23 - Constant Port Scanning From This IP
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 11/26/08 05:38:06 AM
Number...
205.152.132.23 - Security alert type : Port Scan
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 11/24/08 04:44:21 PM
Number...
205.152.132.23 - SCANNING 60 PORTS
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.132.23
Time at last attempt : 11/19/08 07:58:25 PM
Number...
210.7.95.198 - Scan of ports 5901 to 5910
Twice, a scan of ports 5901 to 5910 detected by firewall...
205.152.37.23 - Port scanning 27 ports
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.37.23
Time at last attempt : 11/15/08 06:36:39 PM
Number ...
91.187.121.249 - user is port scanning my server!
Time: Sun Nov 16 18:44:49 2008 +0000
IP: 91.187.121.249 (CZ/Czech Republic/-)
Hits: 11
Blocked: temporarily for 3600 seconds
Sample of block hits:
Nov 16 18:44:10 server1 kernel: Fir...
203.123.205.107 - Scanning my ports repeatedly
This is the message my firewall gives me:
Somebody is scanning your computer.
Your computer's TCP ports:
9090, 8090, 7212, and 988 have been scanned from 218.10.111.106.....
64.94.150.158 - Filtering encrypted data
64.94.150.158, 64.94.150.134, & 64.94.150.170 was filtering encrypted data on one of my credit card websites 11/15/2008 around 2:30pm CST...
218.10.111.106 - 64.94.150.158
64.94.150.158, 64.94.150.134, & 64.94.150.170 was filtering encrypted data on one of my credit card websites 11/15/2008 around 2:30pm CST...
218.10.111.106 - 218.10.111.106 Port scans
This IP has been doing multiple port scans on my IP over various ports. (Usually my local ports 9788, 1080, and 7212)...
He/She never appears to get any further than tripping a log report on my Belkin router and my F-Secure internet security is not reporting it at all so i assume i am surviving his attacks....
125.65.165.132 - 125.65.165.132-Trying to scan every 6 hours for 24 hrs
Somebody is scanning your computer.
Your computer's TCP ports:
7212, 3028, 8000, and 8800 have been scanned from 125.65.165.132..
Blocked by firewall...
213.191.162.203 - tried unsuccesfully to probe and hack stealthed ports
Firewall alert. No consistant prot scanning other then random....
218.10.111.106 - Choked my old PC
After repeated port scans the day before yesterday, I turned my PC off for the night. The next day, when I rebooted my PC, it was all messed up and acting like it had a virus. I think there is a spe...
89.188.16.22 - 88.80.7.82 was scanning my ports
The following was detected by my Sygate firewall:
Somebody is scanning your computer.
Your computer\'s TCP ports:
3127, 8080, 8000, and 3128 have been scanned from 88.80.7.82.....
88.80.7.82 - scannin my ports this ip 88.80.7.82 please help me
scannin my ports this ip 88.80.7.82 please help me...
218.10.111.106 - This IP has been port scaning me for weeks now. TCP ports: 7212, 988, 9090, and 6588
I've blocked all ports to this address long ago. ...
218.10.111.106 - 218.10.111.106 Hacking into webcam software
Port scanning, locked onto port 9090 and ran dictionary attacks. Block this IP range!!...
218.75.199.50 - Port Scanning: Several Attempts
11/1/2008 7:53:56 AM Detected: Intrusion.Win.MSSQL.worm.Helkern Absent UDP from 218.75.199.50 to local port 1434
10/31/2008 8:53:50 PM Detected: Intrusion.Win.MSSQL.worm.Helkern Absent UDP from 2...
82.59.230.59 - È stato rilevato e bloccato il tentativo di intrusione
È stato rilevato e bloccato il tentativo di intrusione \\\"NMap Xmas Scan\\\" nel computer in uso.
Autore dell\\\'intrusione: 82.59.230.59(51381).
Livello di rischio: Medio....
59.60.28.243 - trying to hack port 23 (telnet)
this is yet another punk scanning for vunrable services ( yes you guessed it from china!) this time they are looking for telnet ( possibly trying to take over pc\'s?)...
221.195.73.68 - captured somone from this ip trying to hack in
221.195.73.68 tried to install mydoom trojan on computer via remote exploit ( norton blocked it and i logged it on my honey pot) boy these china guys are active!...
125.65.165.132 - captured somone from this ip trying to hack in
got loads of scans from this punk 9 and many other ip addresses (norton just blocked a hack attmpt relating to mydoom!) ips include: 125.65.165.132:
221.195.73.68 (on port 3128...
209.222.129.170 - UDP Port scan attack
209.222.129.170 at 18:19:14 hrs (BKK and Jakarta time) scanned UDP ports 33458, 33459, 33460, and 33462. The port scan attack ended at 18:19:20 and occurred twice. 209.222.129.170 has a MAC address o...
Security alert type : Port Scan
Protocol type : UDP
IP source address : 129.41.224.51
Time at last attempt : 10/27/08 07:41:33 AM
Number ...
222.18.40.150 - Beware of NMap Xmas Scan
The risk's name is 'NMap Xmas Scan' from 222.18.40.150 . It's blocked as it's scanning my computer port and ready for attacking . It probably appears as the BitTorrent or something opening ....
10.71.42.6 - Constantly the antivirus gives out, that there is an attack on purpose to scan ports. IP periodically vary.
This idiot has already bothered....
59.63.157.142 - Using Helkern Worm
10/27/2008 4:55:49 PM Detected: Intrusion.Win.MSSQL.worm.Helkern Absent UDP from 59.63.157.142 to local port 1434...
202.99.11.99 - Using Helkern Worm
intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 218.23.142.157. Protocol/service: UDP on local port 1494....
218.23.142.157 - Using Helkern Worm
intrusion.Win.MSSQL.worm.Helkern! Attacker IP address: 218.23.142.157. Protocol/service: UDP on local port 1494.
...
68.87.73.242 - Attempted invasion
Not much to tell other than security program caught this and reported to me....
218.10.111.106 - this is realy anoying
give it up already china stop scanning me was every hour or so now its every few mins...
218.10.111.106 - stop the scan china man
someday maybe we\\\'ll just be able to easily block all of china. It seems all my attacks are from there. They export port scans, crappy goods, and melamine. Nuff said....
218.10.111.106 - stop the scan china man
someday maybe we\\\'ll just be able to easily block all of china. It seems all my attacks are from there. They export port scans, crappy goods, and melamine. Nuff said....
216.234.4.5 - attempting connecttions on port 27268
These attacks started yesterday. About 400 hits per hour....
218.10.111.106 - port scan
Somebody is scanning your computer.
Your computer\'s TCP ports:
8000, 8118, 8800, and 11055 have been scanned from 218.10.111.106.....
218.10.111.106 - and here
2008-10-21 21:15:17 Port-Scan KleinerEingang TCP 218.10.111.106 01-00-20-00-01-00 85.179.14.86 00-00-01-00-00-00 ich ICH-1 Normal 3 2008-10-21 21:14:01 2008-10-21 21:14:16...
123.116.128.149 - NMAP XMAS Scan
Norton advised me that the above IP, 123.116.128.149, has targeted my computer with the NMAP XMAS Scan....
216.205.80.54 - Please take it away !
Seriously putting my internet ping high ! I cant even go onto one webpage for like 5 minutes and i have cable !...
69.87.68.162 - Dozens of attempts to attack my computer!
Over the last few days, this guy has made dozens of attempts to attack my computer!!! Getting really tired of it! WHo do they think they are?!?!?!...
205.152.150.23 - Port Scanning by 205.152.150.23
Security alert type : Port Scan
Protocol type : UDP
IP source address : 205.152.150.23
Time at last attempt : 10/15/08 03:22:19 PM
Number...
87.106.232.168 - Random scan
Haven\\\'t seen this one before. Detected by firewall during what must have been a random attack on ports....
129.41.224.50 - Port Scanning
Security alert type : Port Scan
Protocol type : UDP
IP source address : 129.41.224.50
Time at last attempt : 10/9/08 05:25:09 AM
Number o...
222.18.53.175 - Getting XMAS scans from this IP
Over the past couple days I've been getting XMAS scans from this IP or very similar ones from Cheng du university....
125.65.165.132 - Scanning ports. Firewall spotted.
Over the last week, regular daily scans from this IP. Nothing but alerts on the firewall.
Annoying. ...
The Ip Address 207.123.46.123 done a portscan....
125.65.165.132 - Scanning Ports on router
this user is trying to get access to ports 1080,2967,1433,5900 ect
**** Copy and paste from log ****
Sep 29 22:10:22 kernel: PORT SCANNER ATTACK detected from 125.65.165.132. Source port is 6000,...
125.65.165.132 - Periodic single scan of port 8080
A single attempt to access port 8080 every 6 hours or so from this IP blocked by firewall in router...
221.192.199.34 - Repeated SYN attack on port 8800
SRC=221.192.199.34 DST=x.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 DF PROTO=TCP SPT=12200 DPT=8800 WINDOW=8192 RES=0x00 SYN URGP=0...
24.64.162.92 - Several attempts at port scans from shawcable.net CPE
24.64.167.54 S01060016eced0bb7.lb.shawcable.net 0 0 1 View attack details
24.64.162.92 Not available 0 0 1 View attack details
24.64.120.44 S0106001c10acad3a.cg.shawcable.net 0 0...
125.65.165.132 - Repeated Scans- caught by Firewall. Nuisance at best !
Somebody is scanning your computer.
Your computer's TCP ports:
8000, 7212, 8800, and 8080
have been scanned from 125.65.165.132..
This over many days....
218.10.111.106 - Continious Port Range Scanning
Its almost 1 weeks that this host has been UDP port scanning ports: 55298, 57859, 54551, 58928, 54080, 58955, 52323, 61303, 53461, 57056 on the gateways and keeps scanning although we have blocked al...
218.10.111.106 - Port Scans about every 30 minutes
Keeps seetting off fire wall by port scans. Port scans each time I log onto internet and about every 30 to 60 minutes thereafter....
221.192.199.36 - 8800, 7212, 8080, 80 Every two hours for last 3 days
Seems to be quasi automatic, very specific to organization as also scanning affiliated division on different network range concurrent to our own.
No biggie - completed blocked, but persistent like ...
210.41.224.178 - 125.65.165.132 is port scanning
TCP ports: 8800, 8000, 8080, and 8810 have been scanned from 125.65.165.132.....
125.211.216.53 - This IP is attempting access to port 117 - 6000
blocked by firewall in my router.
...
125.65.165.132 - This IP is attempting access to port 117 - 6000
blocked by firewall in my router.
ASS HOLE...
125.65.165.132 - Port Scanning Attempts
My firewall has been blocking IP 125.65.165.132 for a couple of days now.
At seemingly regular intervals...
210.41.224.178 - Somebody is scanning your computer.
AVG came up with message.
How can this be stopped?...
222.180.37.14 - firewall blocked lots of incoming requests from this IP
firewall blocked lots of incoming requests from this IP...
118.161.240.251 - Hack Attemp. Port Scanning every hour
118.161.240.251
SCAN (14340, 34353, 40247, 44867, 64776, 32347)
4:28:20 PM...
172.16.115.59 - Port Scanning
Norton anitivirus brought up ip address and warning saying it blocked 172.16.115.59 from port scanning....
125.65.165.132 - scanning ports 8800,8000,7212,and 8810
this ip has scanned these ports several times and also has port 1981 open ...
125.65.165.132 - port scanning
ports 3128, 8800, 8000, 8080 and 8810 have been scanned from 125.65.165.132....
167.206.243.74 - Regular scanning done from this address
1347, 19727, 45200, and 1182 have been scanned from 167.206.243.74.....
62.49.24.127 - Peformed port scans on ports 5915 - 6000
30|09/13/2008 13:12:46 |62.49.24.127:49911 |80.176.174.53:5996 |ATTACK
ports scan TCP
31|09/13/2008 13:12:46 |62.49.24.127:49910 |80.176.174.53:5995 |AT...
62.49.24.127 - 62.49.24.127 Port scan and DOS attacks
Performed a port scan then attempted to access ports 5295 - 5936. Blocked by firewall...
66.127.5.46 - Firewall alert
My Netgear router has reported Port Scanning by 66.127.5.46.
I notice another user has complained about this within the last 24 hours....
59.34.148.86 - Constantly trying to port scan
This ip address is constantly trying to do port scanning atleast every three to five minutes. Not sure whats its trying to but my firewall has detected and blocks it. I scanned computer for viruses an...
125.65.165.132 - Port scanning for last 3 days
he also has port 3389 open on his firewall (remote desktop) and is running windows 2003 enterprise. Comes from China....
125.65.165.132 - Port scanning for last 3 days
Scanning the following ports: 8810, 8000, 7212, 8080, 80
every few hours...
125.65.165.132 - Blocked attempting to scan ports 8810, 7212& 8000
Repeatedly scanning , approx every 2hrs in the last 24hrs, blocked by firewall, agree could be looking for Mydoom infected p.c or for squid proxy, no damage done as blocked repeatedly by firewall....
90.228.228.200 - AN INTRUSION ATTEMPT
NETWORK TRAFFIC FROM THIS WAS BLOCKED BY NORTON PORT 64724
MATCHES SIGNATURE OF KNOWN ATTACK...
75.73.90.197 - Port scanning for computer intrusion. NMap Xmas Scan
Norton Internet Security reported a blocked intrusion from the above IP address. "NMap Xmas Scan". this occurred while during a bit torrent download. Intrusion was successfully blocked. I use a wirele...
87.237.226.182 - NtMap Null Scan
The IP keeps using a the NtMap Null scan which is a port scaning software. This attack happened about 5 times with in half an hour and each time it is the same IP and same message....
68.183.70.24 - syncflood attack
Found Syncflood attack from 59.63.157.211 in port 7212 => Sun Jul 20 00:00:10 2008...
200.73.20.7 - NMap Null Scan
200.73.20.7 did an NMap Null Scan on my PC ports but was luckily block by my Internet Security....
87.86.92.92 - Network Attack
Picked up by my BullGuard firewall as a network attack, scanning ports....
124.161.72.45 - NMap Xmas Scan
124.161.72.45 did a NMap Xmas Scan several times on my PC. Luckily was blocked by my internet security....
62.68.76.210 - NMap Null Scan
62.68.76.210 did a NMap Null Scan several times on my PC. Luckily was blocked by my internet security....
88.80.7.82 - several scans every day from 88.80.7.82
abuse@prq.se tells me about legal academic portscans
check wiki about prq.se...
169.254.83.178 - contact program and port scan
Attempted to contact NT Kernel&System (ntoskrnl.exe)and scanned ports 161, 137, 138, 10426
Protocol: UDP
Lasted: less than 1 millisecond
Started: 23:24:46 (BKK and Jakarta time)
Date: 200...
118.160.209.142 - port scan attack
Ports scanned: 1080, 12678, 14237, and 2301
Lasted: 0 milliseconds
Occurrences: 1
Started: 00:41:23 (BKK and Jakarta time)
Date: 10/6/08...
88.80.7.82 - Port scan attack
Ports scanned: 3128, 3127, 8080,8000
Lasted; 3 milliseconds
Occurrences: 2
Scanned at: 22:27:57 (BKK and Jakarta time)
Date: 9/June/08
Attacks every other day; more than twice...
....
00:02:38 49722/TCP from 209.191.93.150:80 to xx.xxx.xx.xx:49722 3-Invalid TCP packet received, dropping packet
...
88.80.7.82 - persistent port scans
this guy is persistent...absent for some time and then comes back again! ...
Found Syncflood attack from 189.130.216.3 in port 36457 => Tue Apr 15 21:01:30 2008 ...
Found Syncflood attack from 88.39.68.171 in port 5900 => Tue Apr 15 21:01:30 2008 ...
Found Syncflood attack from 190.73.41.165 in port 36457 => Tue Apr 15 20:56:30 2008
...
Found Syncflood attack from 75.125.194.98 in port 80 => Tue Apr 15 20:56:30 2008
...
68.168.78.44 - British National Cash out scam.
Dear Lucky Winner,
We are delighted to inform you that your EMAIL ID attached to Ticket
Number: 275189657/2305 with Serial Number 8756-NBUK05 drew the Lucky
Numbers 11 13 26 34 44 48 and Bonus ...
129.41.224.50 - Port Scan
2008/03/01 02:01:14 ** Port Scan ** Port scanning from 129.41.224.51 detected
2008/03/01 13:51:12 ** Port Scan ** Port scanning from 129.41.224.50 detected
2008/03/01 13:55:21 ** Port Scan ** Port sca...
98.193.162.125 - Port Scan
Description Packet sent from 98.193.162.125 (TCP Port 2428) to 98.193.135.183 (HTTP) was blocked
Rating High
Date / Time 2008/02/29 17:33:32-6:00 GMT
Type Firewall
Prot...
75.125.194.98 - Port Scan
Description Packet sent from 75.125.194.98 (TCP Port 46579) to 98.193.135.183 (HTTP) was blocked
Rating High
Date / Time 2008/02/29 18:08:16-6:00 GMT
Type Firewall
Prot...
222.161.2.46 - Port Scan
Description Packet sent from 222.161.2.46 (UDP Port 55901) to 98.193.135.183 UDP Port 1027) was blocked
Rating Medium
Date / Time 2008/02/29 17:52:30-6:00 GMT
Type ...
75.125.194.98 - Port Scan
Description Packet sent from 75.125.194.98 (TCP Port 33861) to 98.193.135.183 (HTTP) was blocked
Rating High
Date / Time 2008/02/27 20:39:02-6:00 GMT
Type Firewall
Prot...
FSecure sw reports this address trying to put the
trojan mydoom on my computer. this same address has attempted this
more than 20 times in the past few weeks.
...
77.75.72.26 - Electronic mail award notice
I recieved an email on 1/29/08 at 16:41:01 from a Jioi Korba from email address:George-Korba@seznam.cz regardingan electronic award mail forward notice about lottery winnings. I reported it to abuse@y...
194.125.9.137 - mail abuse
Hi, My name is Pandora VAITILINGON and i\'m from Mauritius island. Someone is using my name to create email addresses (several) under yahoo.com to send mails, mainly to vincer@medinemru.com. However, ...
123.242.230.172 - Continual vile harassment
From Paul Martinez Fri Jan 18 22:25:24 2008
X-Apparently-To: brentbase_2000@yahoo.co.uk via 217.146.176.77; Fri, 18 Jan 2008 22:25:25 0000
X-Originating-IP: [69.147.97.97]
Return-Path: <themace...
75.125.194.98 - scan
Description Packet sent from 75.125.194.98 (TCP Port 46776) to 89.77.169.45 (HTTP) was blocked
Rating High
Date / Time 2008/01/14 23:46:10 1:00 GMT
Type Firewall
Protoc...
82.165.161.15 - port scaning
someone is port scanning me from this IP.Very frequently.My firewall (sygate) blocks scaning about 7-8 times in 4-5 minutes....
top performing domains latest complaints new questions categories
Latest Questions
- Lots of attack on the router - He has enabled the wireless mode inside the box from shell and I cannot turn it off?
- Lots of attack on the router - He has enabled the wireless mode inside the box from shell and I cannot turn it off?
- Lots of attack on the router - He has enabled the wireless mode inside the box from shell and I cannot turn it off?
- Lots of attack on the router - He has enabled the wireless mode inside the box from shell and I cannot turn it off?
