Checked my Firewall Logs Tonight
February 19th, 2008Since I’ve been home from work today, my network has been scanned by computers from as near as Fremont, CA, and as far away as China, Japan, Portugal, India, Argentina, and Australia.
- 64.81.248.177 (52185: Torrent scan from Fremont, CA) #7
- 125.65.112.216 (135: Netbios SMB service scan from Sichuan Province, China) #2
- 210.233.73.197 (10000: Veritas Backup scan from Tokyo, Japan) #2
- 59.63.25.161 (1434: SQL scan from Jiangxi Province, China) #2
- 219.153.22.23 (135: Netbios SMB service scan from Chongqing Province, China) #2
- 218.15.217.140 (1433: SQL scan from China)
- 218.26.191.171 (1434: SQL scan from Shaanxi Province, China)
- 81.248.193.27 (135: Netbios SMB service scan from France)
- 216.239.127.101 (33442: Scan from CNET)
- 85.240.245.157 (137: Netbios SMB service scan from Portugal)
- 216.184.108.6 (139: Netbios SMB service scan from somewhere in South America)
- 203.94.243.191 (1434: SQL scan from New Delhi, India)
- 200.123.171.225 (1434: SQL scan from Buenos Aires, Argentina)
- 61.88.126.66 (22: SSH scan from Australia)
Since none of those ports are open, there is no vulnerability with those scans, but it’s kind of annoying. If they start going after the WoW, Empire Earth, or the security system ports, I might have to shut access to them downand I don’t want to. Úšhølëš.