cn sourced port scans

FYI only: I am seeing a LOT of port scans coming from China addresses lately, specifically snipped-for-privacy@mail.jl.cn and 218.27.126.165 : snipped-for-privacy@cnc-noc.net snipped-for-privacy@mail.jl.cn , etc. type places.

For me at least, this is new; haven't seen .CN do much in that way but there are a lot of them now.

Tom

Reply to
Pop
Loading thread data ...

Hi,

NO, you're not the only who've got scanned lately. And there's no reason to waste your time by sending each ISP an abusemail because nothing seems to happen anyway.

Maybe you should gather next following URL's to obtain info;

  1. formatting link
  2. formatting link

If you do proxies, you should be careful you don't use Chinese ones.

Most likely you've seen something like this;

12-08-2005 13:49:09 BLOCKED "CHINANET Jiangxi province network" 12-08-2005 14:34:17 BLOCKED "KUNSHAN SHENGDA NETBAR Suzhou City" 12-08-2005 15:17:04 BLOCKED "Shanghai Longdistance" 12-08-2005 16:37:49 BLOCKED "China Hangzhou Telecommunication IDC" 12-08-2005 17:11:59 BLOCKED "China Yueqing Telecom Bureau NULL" 12-08-2005 17:28:08 BLOCKED "CNCGROUP Hebei Province Network China" 12-08-2005 23:59:50 BLOCKED "China Quzhou Longyou Huahao" 12-09-2005 00:12:39 BLOCKED "CHINANET Guangdong province network" 12-09-2005 00:28:32 BLOCKED "CNC Group HuNan province network" 12-09-2005 00:29:29 BLOCKED "China United Telecommunications" 12-09-2005 00:40:53 BLOCKED "China United Telecommunications" 12-09-2005 00:47:48 BLOCKED "CHINANET jiangxi province network" 12-09-2005 00:56:45 BLOCKED "China Beijing Teletron Telecom" 12-09-2005 01:02:17 BLOCKED "China CNCGROUP Tianjin province" 12-09-2005 01:13:01 BLOCKED "China United Telecommunications" 12-09-2005 01:17:01 BLOCKED "China Beijing Teletron Telecom" 12-09-2005 01:36:40 BLOCKED "ZHENJIANG XUEFENG NETBAR Zhenjiang" 12-09-2005 01:39:24 BLOCKED "China CHINANET jiangxi province" 12-09-2005 01:46:04 BLOCKED "China United Telecommunications" 12-09-2005 01:46:31 BLOCKED "CHINANET Guangdong province network" 12-09-2005 02:13:43 BLOCKED "China China United Telecommunications" 12-09-2005 02:31:06 BLOCKED "China Beijing Telecom Development Co." 12-09-2005 02:52:04 BLOCKED "China CHINANET jiangxi province" 12-09-2005 02:52:56 BLOCKED "MAOMING JUXIAN NETBAR China" 12-09-2005 02:58:14 BLOCKED "JINSHAN BUILDING2 China" 12-09-2005 03:05:15 BLOCKED "China CHINANET-HN Jishou node network" 12-09-2005 03:18:01 BLOCKED "CNCGROUP Heilongjiang Province" 12-09-2005 03:30:14 BLOCKED "CHINANET jiangxi province network" 12-09-2005 04:06:26 BLOCKED "China Chinanet network in Wuhan city" 12-09-2005 04:20:18 BLOCKED "China Beijing Teletron Telecom" 12-09-2005 04:39:17 BLOCKED "DF tobacco corp Yancheng City Jiangsu" 12-09-2005 20:44:18 BLOCKED "China CHINANET Hunan province network" 12-09-2005 20:51:21 BLOCKED "China Fire Fox Internet" 12-09-2005 20:53:52 BLOCKED "China Telecom A12,Xin-Jie-Kou-Wai" 12-09-2005 21:09:29 BLOCKED "Cable OnLine Network ZHABEI1POPNet" 12-09-2005 21:21:26 BLOCKED "CHINANET Hubei province network Data" 12-09-2005 21:25:08 BLOCKED "China CHINANET-ZJ Zhoushan node" 12-10-2005 04:53:43 BLOCKED "The JingMen Tobacco Company, in" 12-10-2005 05:15:59 BLOCKED "CHINANET jiangsu province network" 12-10-2005 05:22:39 BLOCKED "China CHINANET jiangxi province" 12-10-2005 21:10:46 BLOCKED "CHINANET Fujian province network Data" 12-10-2005 21:22:09 BLOCKED "CHINANET Chongqing Province Network" 12-10-2005 21:38:12 BLOCKED "China CHINANET jiangxi province" 12-10-2005 21:59:18 BLOCKED "China CHINANET jiangxi province" 12-10-2005 22:07:05 BLOCKED "CHINANET Anhui province network Data"

No response necessary.

/* 0x10BE7EDD(pgp.mit.edu) */

Pop wrote:

Reply to
scientistbaboon

PolyTech Forum website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.