New User? Click here to register! Feel free to read this for beginners help.

Computer Cops
image image image image image image image image
Prime Choice
· Head Lines
· Dnld of the Week!
· Find a Cure!
· Ian T's (Article 12)
· Marcia's (Op8)
· Paul's (Article 3)
· Ian T's Archive
· Marcia's Archive
· Paul's Archive
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Security Central
· Home
· Wireless
· Bookmarks
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· Recommend Us
· RegChat
· Reviews
· Search
· Sections
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
Donations
image
Search

image
Survey
Which Anti-Virus product do you use?
Computer Associates
Eset (NOD32)
F-Secure
Frisk (F-Prot)
Grisoft (AVG)
Kaspersky
Network Associates (McAfee)
Panda
Sophos
Symantec (NAV)
Trend Micro
Other



Results
Polls

Votes: 8439
Comments: 76
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

port scans

 
Post new topic   Reply to topic       Computer Cops Forum Index -> Site Toolkit
View previous topic :: View next topic  
Author Message
JanJee
Cadet
Cadet



Joined: Feb 04, 2004
Posts: 1
Location: Netherlands
PostPosted: Thu Feb 05, 2004 10:46 am    Post subject: port scans Reply with quote
what can i do against this continue port scan?

EZ Firewall Logging Client v3.7.179
Windows Me-4.90.3000- -SP
type,date,time,source,destination,transport
FWIN,2004/02/04, ,80.61.222.129:1027,80.
FWIN,2004/02/04,13:15:58 +1:00 GMT,80.61.222.129:1026,80.
FWIN,2004/02/04,13:28:50 +1:00 GMT,80.61.222.129:1027,80.
FWIN,2004/02/04,13:41:28 +1:00 GM T,80.61.222.129:1026,80.
FWIN,2004/02/04,13:59:56 +1:00 GMT,80.61.222.129:1027,80
FWIN,2004/02/04,14:10:48 +1:00 GMT,80.61.222.129:1026,80.
FWIN,2004/02/04,14:33:16 +1:00 GMT,80.61.222.129:1027,80.
FWIN,2004/02/04,14:44:00 +1:00 GMT,80.61.222.129:1026,80.
FWIN,2004/02/04,15:03:22 +1:00 GMT,80.61.222.129:1027,80.
FWIN,2004/02/04,15:17:06 +1:00 GMT,80.61.222.1212:49:52 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,12:56:24 +1:00 GMT 9:1026,
FWIN,2004/02/04,16:03:10 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,16:06:10 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,16:07:42 +1:00 GMT,80.61.222.129:1028,
FWIN,2004/02/04,16:18:10 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,16:18:24 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,16:20:52 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,17:03:10 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,17:14:04 +1:00 GMT,80.61.222.129:1028,
FWIN,2004/02/04,17:14:52 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,17:15:54 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,17:16:16 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,17:34:14 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,17:34:14 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,17:52:22 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,17:58:40 +1:00 GMT,81.202.96.167:1065,
FWIN,2004/02/04,18:02:00 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,18:02:28 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,18:04:50 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,18:07:00 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,18:34:52 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,18:40:34 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,18:56:08 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,18:57:04 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,19:02:12 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,19:07:14 +1:00 GMT,80.61.222.129:1028,
FWIN,2004/02/04,19:11:22 +1:00 GMT,81.202.120.154:1025,
FWIN,2004/02/04,12:49:52 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,12:56:24 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,13:15:58 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,13:28:50 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,13:41:28 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,13:59:56 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,14:10:48 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,14:33:16 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,14:44:00 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,15:03:22 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,15:17:06 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,16:03:10 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,16:06:10 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,16:07:42 +1:00 GMT,80.61.222.129:1028,
FWIN,2004/02/04,16:18:10 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,16:18:24 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,16:20:52 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,17:03:10 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,17:14:04 +1:00 GMT,80.61.222.129:1028,
FWIN,2004/02/04,17:14:52 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,17:15:54 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,17:16:16 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,17:34:14 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,17:34:14 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,17:52:22 +1:00 GMT,80.61.222.129:1030,
WIN,2004/02/04,17:58:40 +1:00 GMT,81.202.96.167:1065,
FWIN,2004/02/04,18:02:00 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,18:02:28 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,18:04:50 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,18:07:00 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,18:34:52 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/04,18:40:34 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/04,18:56:08 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/04,18:57:04 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/04,19:02:12 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/04,19:07:14 +1:00 GMT,80.61.222.129:1028,
FWIN,2004/02/04,19:11:22 +1:00 GMT,81.202.120.154:1025,
FWIN,2004/02/04,19:46:12 +1:00 GMT,80.61.130.194:1049,
FWIN,2004/02/05,12:15:36 +1:00 GMT,80.61.222.129:1025,
FWIN,2004/02/05,12:15:42 +1:00 GMT,80.61.222.129:1026,
FWIN,2004/02/05,12:18:06 +1:00 GMT,80.61.222.129:1030,
FWIN,2004/02/05,12:18:08 +1:00 GMT,80.61.222.129:1029,
FWIN,2004/02/05,12:18:08 +1:00 GMT,80.61.222.129:1027,
FWIN,2004/02/05,12:29:16 +1:00 GMT,81.240.0.124:2059,

Does anyone have a solution

This keeps going on and on

Thanks
Back to top
View users profile Send private message
Paul
Admin
Admin



Joined: Feb 22, 2002
Posts: 4508
Location: USA
PostPosted: Thu Feb 05, 2004 3:06 pm    Post subject: Reply with quote
Keep it blocked that is one thing. A 'host' lookup of the IP shows:

129.222.61.80.in-addr.arpa domain name pointer ip503dde81.speed.planet.nl.


Dig reveals:

# dig 80.61.222.129 any

; <<>> DiG 9.2.0 <<>> 80.61.222.129 any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7525
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;80.61.222.129. IN ANY

;; AUTHORITY SECTION:
. 10616 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2004020500 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 66.227.57.1#53(66.227.57.1)
;; WHEN: Thu Feb 5 15:03:31 2004
;; MSG SIZE rcvd: 106

Running:

# whois -h whois.ripe.net 80.61.222.129
[whois.ripe.net]
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum: 80.61.0.0 - 80.61.255.255
netname: NL-PMG-ADSL
descr: ADSL6
country: NL
admin-c: PT978-RIPE
tech-c: PT978-RIPE
status: ASSIGNED PA
mnt-by: AS8737-MNT
changed: 20030721
source: RIPE

route: 80.60.0.0/15
descr: PIADDR
origin: AS8737
mnt-by: AS8737-MNT
changed: 20010618
source: RIPE

role: Planet Technologies
address: Stationsstraat 115 (visit address)
address: P.O. box 1042
address: 3800 BA Amersfoort
address: The Netherlands
phone: +31 33 45 40 550
e-mail:
nic-hdl: PT978-RIPE
admin-c: MRAA-RIPE
tech-c: NKOL-RIPE
remarks: Please mail security issues to:
remarks: Please mail abuse issues to:
notify:
mnt-by: AS8737-MNT
changed: 20030402
source: RIPE

This shows the same at SamSpade.

SamSpade:

http://samspade.org/t/lookat?a=80.61.222.129


I'd say contact the email listed with proof.
_________________
http://computercops.biz/
Back to top
View users profile Send private message Send email Visit posters website
phoenix22
Site Admin
Site Admin
Premium Member
Premium Member


Joined: Mar 08, 2002
Posts: 3900
Location: "Div. Stand By"
PostPosted: Mon Feb 09, 2004 9:49 am    Post subject: Reply with quote
... here is the dig result for '80.61.222.129 ' [dig -x '80.61.222.129 ']

Invalid IP address 80.61.222.129


as of today
_________________
"De Oppresso Liber" (We Liberate the Oppressed) Holy Shinola Bat Babe! "Phoenix Flight"....for Buddy...who lived it!
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> Site Toolkit All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8 © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops
Home · Topics · Submit News · Top 10
This entire site, Cops Themes, and Computer Cops are © 2002 - 2004 Computer Cops, LLC. All rights reserved.
You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0.
Acceptable Use Policy. Use signifies your agreement.
Engine Copyright © 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member.
Paul Laudanski, Member of Computer Cops, LLC
Server Load: 550 pages served in previous 5 minutes. Page Generation: 0.803 seconds.