We have blocked someone from your IP space for abuse. Reason: Port Scanning. Log lines are below. Time zone is UTC.

2014-09-09T19:17:51+00:00 swill 1410290244.176536 - - - - - - - - tcp Scan::Address_Scan 108.61.6.84 scanned at least 52 unique hosts on port 7212/tcp in 0m5s remote 108.61.6.84 - 7212 - swill3-8 Notice::ACTION_LOG 3600.000000 F - - - - -

I am writing to inform you so that you can take whatever action is necessary to prevent this user from doing this again. We would be happy to discuss further if you would like. Please feel free to respond to this email to follow up.

Thank you,

University Information Security Office
Indiana University

Enabled rules to detect port scanning. 

Also Read

Dorkbot Malware Infection
Sir/Ma’am, US-CERT Received a report from a trusted third party of a possible malicious...
UK SPAM Complaints phone4profit.com
Received: from [149.255.111.222] (HELO phone4profit.com)by inbound.appriver.com (CommuniGate Pro...
Kansas City SYN Flood
Your IP is sending SYNFloods Date first seen          Duration Proto           IP Addr...
California - Open Resolver DDoS
You appear to be running an open recursive resolver at IP address 199.241.145.147 that...
California - 106 Notices of Claimed Infringements
They sent 106 notices of infringmnet instead of 1 notice. Here is a compiliation of...