Port scans off one IP for months

[McKenzie]

IP 61.152.158.126 which apnic says is from an ISP based in Shanghai has been showing up in my firewall logs for months. Someone is running a port scanner through that IP, possibly as a proxy or part of a proxy chain - I doubt if it's the real IP of whoever is running the scanner. Check your own logs and I wouldn't be surprised if the IP in question shows up regularly if your ISP is in Europe.

Nothing to worry about people; just interested to know if the scanner is probing European or UK netblocks only or if this is a wider port scan given the length of time it's been going on.

[Crazy Guggenheim]

1. I just went to Whois and it says it's coming from Austrailia.

Anyways ............