China keeps trying to hack me!ports UDP 1026 and 1027
Below is a common thing for my firwall everytime a log on a trace this UNSOLICETED ATTACK/REQUEST back to china/bejing area, i have been getting this unsoliceted request for about 3 weeks, it is only on this machine ,when I get online, I have scanned and rescanned, I have posted HJT logs and everything I could think of, yet everyone claims my machine is clean?
My concern is "why does this happen"? it almost as if there is some malware in here trying to "call home" you know?
2005/05/13 09:35:58 222.77.185.242:60840 216.203.252.150:1027 Port 1027 (UDP)
2005/05/13 09:35:58 222.77.185.242:60840 216.203.252.150:1027 Port 1027 (UDP)
2005/05/13 09:35:58 222.77.185.242:60840 216.203.252.150:1026 Port 1026 (UDP)
2005/05/13 09:39:35 61.172.249.200:32831 216.203.252.150:1026 Port 1026 (UDP)
2005/05/13 09:39:43 61.129.34.19:1195 216.203.252.150:1434 Microsoft-SQL-Monitor
2005/05/13 09:46:11 61.129.94.146:0 216.203.252.150:0 ICMP Ping
If you look this has all happening in the time it took me to post this, I am really worried?
It always traced back to the Bejing area in China...
This is not just a normal scanning of ports, (tell me so if I am wrong) I dont know that much about this so I am turning to your folks who know a lot more than me about this issue anyone tell what this means?
2005/05/13 09:19:00
64.102.120.188:23044
216.203.252.150:1026 Port 1026 (UDP)
Thanks for UDP link and info but..
It is annoying ,that is for sure,why dont we block all there traffic to my ISP? Do you think my ISp would go along with this>?
Anyway, checked out the links on the port spamming, going to try to be oblivious to all this "China Hacks" this is what I call them, China Hacks,I wish someone could,.... or knew more about this operation and internet prtocol they are doing aand what for, and yes it could be someone right here in the usa out of sandiago,ca, because occasionally it pings back to there and back to Bejing area,so maybe if anyone knew MORE?, we could find out what this is all about, maybe readers can monitors the ip address i posted , anyway,... is it a superspammer from the USA?
Or the communist' trying to crack the top secrets in my little machine?
hah!
back to the frig
thanks for the info........