123.134.95.199 is from China

trying to hack ports 3128 and 8080

trying to hacking many of my ports to my computer.

Blocking it at my router.

all day long 123.134.95.199 scans our network. ALL DAY LONG. Same as all of the posts before me.

Just more of the same from 123.134.95.199

Isn't your dog dinner getting cold?? Or is it cat?

Polish is a bit more complicated because it uses both prepositions and cases to do this job. ,

ditto as the above....out of all the IPs on my firewall logs, this is the worst offender. Port scanning on 8080, 8000, 7212, 8800, 8118, 9090, 8085.

Out of all the IPs on my firewall logs, this is the worst offender. Port scanning on 8080, 8000, 7212, 8800, 8118, 9090, 8085.

every day, 5-8 times a day.TCP ports: 8085, 9090, 8080, 8800, 8000, 3128

Security alert type : Port Scan
Protocol type : TCP
IP source address : 123.134.95.199
Time at last attempt : Wed Oct 21 07:02:49 2009(UTC)
Number of ports that were scanned: 8
Highest port : 9090
Lowest port : 3128
8080 8000 8800 8118 9090 3128 7212 8085

Random port scanning minimum of 6 times per day...

why do you do this? leave my pc to me and yours to you.

Keep seeing this IP showing up in my logs attempting to make connections on Port 12200. Appears to be port scanning.

123.134.95.199 has port scanned me at least 7 times in the last day or so.

Six times a day they do port scans, I too have blocked China 112.0.0.0-123.255.255.255

just lots of attempts to run portscan.
so far this site has been blocked by Norton but ..

09/26/2009 19:30:06.784 - Port scan dropped - 123.134.95.199, 12200, - This email was generated by: Sonicwall OS Enhanced 3.1.0.2-62 (0006-B11C-8D34), I have been getting these every 2 and a 1/4 hours since 05/09/09, Like the rest of us, its being blocked, I thought they might have got the hint by now....

Port scanning me every couple of hours outpost FP is dealing with it no problem but still annoying,
I think everyone should pay them back every computer open cmd and type this >

ping -t 123.134.95.199

And hit enter, or enter the ip thats bothering you.

Numerous portscans on a daily basis, for the last 2 or 3 weeks. Backtrace shows IANA, but these things always do.

Every morning i get this IP address 123.134.95.199 trying to get into my computer. It's being blocked by Norton but it's annoying. How can we stop this!

Port scanning all day long.

Scaning ports tcp/ip 8085, 8080, 8000, and 3128. The built in fire wall in a mortorola dsl modem is stopping/blocking it. There was a malware in the form of a trojan on this computer that was removed yesterday and that is when the port scan started. Not sure if they are related. That ip had scaned the SAME ports 6 times in a 24 hour period.

Scaning ports tcp/ip 8085, 8080, 8000, and 3128. The built in fire wall in a mortorola dsl modem is stopping/blocking it. There was a malware in the form of a trojan on this computer that was removed yesterday and that is when the port scan started. Not sure if they are related. That ip had scaned the SAME ports 6 times in a 24 hour period.

Got firewall logs going back to 3/9/09 with 123.134.95.199 scanning my ports, sometimes every 2 1/4 hrs.

Is it worth emailing their ISP?

Btw I found this, http://www.theclq.com/ags/players.php?addr=123.134.95.199:27016

Seems to be a Counter Strike server.

123.134.95.199

Port scanning constantly round the clock.

the following I.P. adress

123.134.95.199 traced it to a place

jinan china
corner of Weier Rd & Jing Yi Rd

surround businesses are Taiwan Songzhu,
Xingguana Printing and Limei Yinye

someone stop this person

Somebody is scanning your computer.
Your computer's TCP ports:
9090, 8080, 8000, and 3128 have been scanned from 123.134.95.199.

Daily port scanning from this ip address 123.134.95.199

Somebody is scanning your computer.
Your computer's TCP ports:
8118, 7212, 8888, and 8088 have been scanned from 122.227.164.96..
123.134.95.199

Have had numerous reports from firewall over last 4 days of intrusion attems from this IP being blocked by friewall

Have had numerous reports from firewall over last 4 days of intrusion attems from this IP being blocked by friewall

Have had numerous reports from firewall over last 4 days of intrusion attems from this IP being blocked by friewall

Somebody is scanning your computer.
Your computer's TCP ports:
8085, 8080, 8000, and 3128 have been scanned from 123.134.95.199..

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '0.0.0.0 - 255.255.255.255'

inetnum: 0.0.0.0 - 255.255.255.255
netname: IANA-BLK
descr: The whole IPv4 address space
country: EU # Country is really world wide
org: ORG-IANA1-RIPE
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
status: ALLOCATED UNSPECIFIED
remarks: The country is really worldwide.
remarks: This address space is assigned at various other places in
remarks: the world and might therefore not be in the RIPE database.
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE # Filtered

organisation: ORG-IANA1-RIPE
org-name: Internet Assigned Numbers Authority
org-type: IANA
address: see http://www.iana.org
remarks: The IANA allocates IP addresses and AS number blocks to RIRs
remarks: see http://www.iana.org/ipaddress/ip-addresses.htm
remarks: and http://www.iana.org/assignments/as-numbers
e-mail: bitbucket@ripe.net
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

role: Internet Assigned Numbers Authority
address: see http://www.iana.org.
e-mail: bitbucket@ripe.net
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
nic-hdl: IANA1-RIPE
remarks: For more information on IANA services
remarks: go to IANA web site at http://www.iana.org.
mnt-by: RIPE-NCC-MNT
source: RIPE # Filtered
WHOIS QUERY RESULT
inetnum: 123.128.0.0 - 123.135.255.255
netname: UNICOM-SD
descr: China Unicom Shandong Province Network
descr: China Unicom
country: CN
admin-c: CH1302-AP
tech-c: xz14-ap
status: ALLOCATED PORTABLE
remarks: service provider
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP
mnt-lower: MAINT-CNCGROUP-SD
mnt-routes: MAINT-CNCGROUP-RR
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@apnic.net 20070215
changed: hm-changed@apnic.net 20070829
changed: hm-changed@apnic.net 20090508
source: APNIC

route: 123.128.0.0/13
descr: CNC Group CHINA169 Shandong Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@cnc-noc.net 20070215
source: APNIC

person: ChinaUnicom Hostmaster
nic-hdl: CH1302-AP
e-mail: abuse@chinaunicom.cn
address: No.21,Jin-Rong Street
address: Beijing,100140
address: P.R.China
phone: +86-10-66259940
fax-no: +86-10-66259764
country: CN
changed: abuse@chinaunicom.cn 20090408
mnt-by: MAINT-CNCGROUP
source: APNIC

person: XIAOFENG ZHANG
nic-hdl: XZ14-AP
e-mail: ip@pub.sd.cninfo.net
address: Jinan,Shandong P.R China
phone: +86-531-6666666
fax-no: +86-531-6666666
country: CN
changed: ip@sdinfo.net 20050330
mnt-by: MAINT-ZXF
source: APNIC

Somebody is scanning your computer.
Your computer's TCP ports:
8085, 8080, 8000, and 3128 have been scanned from 123.134.95.199..

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '0.0.0.0 - 255.255.255.255'

inetnum: 0.0.0.0 - 255.255.255.255
netname: IANA-BLK
descr: The whole IPv4 address space
country: EU # Country is really world wide
org: ORG-IANA1-RIPE
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
status: ALLOCATED UNSPECIFIED
remarks: The country is really worldwide.
remarks: This address space is assigned at various other places in
remarks: the world and might therefore not be in the RIPE database.
mnt-by: RIPE-NCC-HM-MNT
mnt-lower: RIPE-NCC-HM-MNT
mnt-routes: RIPE-NCC-RPSL-MNT
source: RIPE # Filtered

organisation: ORG-IANA1-RIPE
org-name: Internet Assigned Numbers Authority
org-type: IANA
address: see http://www.iana.org
remarks: The IANA allocates IP addresses and AS number blocks to RIRs
remarks: see http://www.iana.org/ipaddress/ip-addresses.htm
remarks: and http://www.iana.org/assignments/as-numbers
e-mail: bitbucket@ripe.net
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

role: Internet Assigned Numbers Authority
address: see http://www.iana.org.
e-mail: bitbucket@ripe.net
admin-c: IANA1-RIPE
tech-c: IANA1-RIPE
nic-hdl: IANA1-RIPE
remarks: For more information on IANA services
remarks: go to IANA web site at http://www.iana.org.
mnt-by: RIPE-NCC-MNT
source: RIPE # Filtered

Failed attempts at trying to probe my udp , tcp ports 8000-9000 having a hardwall and a softwall has made this practice just an anoying irritation, checked whois and traceroute, also ran netstat to confirm no visible viri had attached itself and was sending out. email has been sent to network abuse admin with detailed log details.

123.134.95.199 , same as everyone else who has reported here. Several scans per day for the past week or so. "Annoying" would be an understatement.

I keep getting alerted to TCP ports scan from 123.134.95.199 Jinan, China.

This is happening several times a day.

May be linked to 61.139.33.114 in trying to gain remote access to home computers

TCP ports:
8085, 8080, 8000, and 3128 have been scanned from 123.134.95.199.

Somebody is scanning your computer.
Your computer\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'s TCP ports:
8085, 9090, 8080, and 8800 have been scanned from 123.134.95.199..this nuisance has been scanning my ports for last 3 days,seven times a day,get a life and/or a job comrade.

Possible port scan dropped 123.134.95.199, 12200, WAN 69.214.41.38, 3128, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 8800

Possible port scan dropped 123.134.95.199, 12200, WAN 69.214.41.38, 8118, WAN TCP scanned port list, 8085, 9090, 8080, 3128, 7212

Original message from firewall

Somebody is scanning your computer.
Your computer's TCP ports:
8085, 9090, 8080, and 8800 have been scanned from 123.134.95.199..

123.134.95.199
scans my ports about 6 times a day.

6-8 times a day, he started few days ago.


Somebody is scanning your computer.
Your computer's TCP ports:
8080, 8000, 8800, and 8118 have been scanned from 123.134.95.199..

anybody willing to call his isp? :P

http://whois.gwebtools.com/123.134.95.199

I have had repeated port scans from this ip. All I can say is, your not getting through!

123.134.95.199, 12200, WAN 70.176.59.67, 8118, WAN TCP scanned port list, 8085, 9090, 8800, 3128, 7212
123.134.95.199, 12200, WAN 70.176.59.67, 3128, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 8800
123.134.95.199, 12200, WAN 70.176.59.67, 3128, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 8800
123.134.95.199, 12200, WAN 70.176.59.67, 3128, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 8800
123.134.95.199, 12200, WAN 70.176.59.67, 8118, WAN TCP scanned port list, 9090, 8000, 8800, 3128, 7212
123.134.95.199, 12200, WAN 70.176.59.67, 8118, WAN TCP scanned port list, 9090, 8080, 8000, 3128, 7212
123.134.95.199, 12200, WAN 70.176.59.67, 7212, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 3128
123.134.95.199, 12200, WAN 70.176.59.67, 8118, WAN TCP scanned port list, 8085, 9090, 8080, 8800, 3128
123.134.95.199, 12200, WAN 70.176.59.67, 3128, WAN TCP scanned port list, 8085, 9090, 8080, 8000, 8800
123.134.95.199, 12200, WAN 70.176.59.67, 8118, WAN TCP scanned port list, 8085, 9090, 8000, 8800, 7212
123.134.95.199, 12200, WAN 70.176.59.67, 7212, WAN TCP scanned port list, 9090, 8080, 8000, 8800, 3128
123.134.95.199, 12200, WAN 70.176.59.67, 7212, WAN TCP scanned port list, 9090, 8080, 8000, 8800, 3128

every day, 5-6 times a day.TCP ports:
8085, 9090, 8080, 8800, 8000, 3128, 8118

TCP requests being sent from this IP almost every day. Source Port 12200 to 8118.

Too bad my router is dropping the requests and I have my firewall set up to blacklist the entire IP range of China and other countries! HAHAHA! :)