IPs From China in Security http://www.dslreports.com/forum/r13199802 en Thu, 03 Dec 2009 02:11:13 EDT Thu, 03 Dec 2009 02:11:13 EDT Re: IPs From China http://www.dslreports.com/forum/remark,13201087 exocet_cm : I was fed up with Asian port scans and ended up blocking IPs from 222.0.0.0 - 222.255.255.255 (I think is the majority of allocated Asian IPs)...

I dunno if it is the OPTIMAL thing to do, but it works.
--
Jesus Rocks!
Future New Orleans Baptist student :)
Missionary work in Brasil is awesome!!!]]> http://www.dslreports.com/forum/remark,13201087 Mon, 18 Apr 2005 16:08:03 EDT Re: IPs From China http://www.dslreports.com/forum/remark,13200649 NetFixer : Scans on the ephemeral ports beginning with 1025 are almost as common as scans of port 445. Unless you are really getting hammered (hundreds of scans per minute), it is just normal internet background noise and nothing to worry about since your firewall is blocking it.

My network typically receives hundreds of such scans daily, and thousands of port 445 scans. Many thanks to Bill Gates et al for exposing DCOM and SMB protocols to the world by default and making them such tempting targets for the evil dooers.
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander. ]]> http://www.dslreports.com/forum/remark,13200649 Mon, 18 Apr 2005 15:07:52 EDT Re: IPs From China http://www.dslreports.com/forum/remark,13200370 c4delta : HITS REMOTE LOCAL
13 61.172.244.159.34034 MYBOX.1026
14 61.172.244.159.32769 MYBOX.1026
24 61.172.244.159.32830 MYBOX.1026]]> http://www.dslreports.com/forum/remark,13200370 Mon, 18 Apr 2005 14:31:26 EDT Re: IPs From China http://www.dslreports.com/forum/remark,13200058 max2k1 : Post a sample of source IPs and the destination & source port numbers ... maybe that'll get some matches !]]> http://www.dslreports.com/forum/remark,13200058 Mon, 18 Apr 2005 13:49:21 EDT IPs From China http://www.dslreports.com/forum/remark,13199802 c4delta : I have been recieving a large number of attacks from China in the last few days--I see IP addresses from China in my firewall logs.

Is anybody else seeing something similar?]]> http://www.dslreports.com/forum/remark,13199802 Mon, 18 Apr 2005 13:17:51 EDT