[Dshield] Incessant connection attempt from Chinese IP

Laurent Saplairoles lsaplai at megassistance.com
Fri Aug 19 16:40:42 GMT 2005


Hi all

Since yesterday night (17 Aug) 21h35, my firewall has stopped close to 500 connection 
attempts from 61.152.96.219.
They are all coming from 'high ports': 32991 to 60845 and directed to ports 1026 to 
1029

According to the Dshield site 
http://www.dshield.org/ipinfo.php?ip=61.152.96.219&Submit=Submit this is not the 1st 
time!

Does anyone know what is operating on that host? Is is malware or an individual 
scanning and trying to make thru my defenses?

Thanks in advance for your insight.
-- 
Laurent



More information about the list mailing list