Virus / Security Risk
The following IPs have been port scanning SMB (TCP/445) (this is windows file share port) and may well be infected by malware or viruses. Can the owners please check software they may have installed recently and run a scan for viruses.
They've been logged on @Dizzle 's firewall trying to log into 445 (which is SMB or Windows file share port). It's a known symptom of the WannaCry virus or similar. Some wuggers (from PTAWUG) have also noted the attacks on their anti-virus:
List of scanning IPs
I've added null routes for all the above. Those IPs won't be able to access CTWUG network.
Please clean up your PC. Scan for viruses etc. Cotnact me or @Dizzle after they confirmed that their PC has been cleaned up.
We suspect it might be some software these people have installed.
Thanks @Dizzle for tracking down the issue. Thanks for PTAWUGgers reporting it to us also.