Re: ABCNews backscan attack

From: damocles (_at_@..)
Date: 08/01/04 

Date: Sun, 01 Aug 2004 17:16:48 -0400

newstome@comcast.net wrote:
>
> In comp.security.misc damocles <""@@..> wrote:
> > Since when is a portscan "normal traffic" ?
> > Hardly "normal" since it only happens when I go to abcnews.go.com.
> > Why is ABCnews scanning my ports ?
>
> For what it's worth, I don't consider portscanning from anyone "normal
> traffic" in the sense that it's acceptable (maybe "normal" in the
> sense that it happens all the time and there's not much you can do
> about it).
>
> On the other hand, I visited abcnews.go.com out of curiosity, about 10
> minutes ago, and haven't been portscanned... so either you just saw
> a coincidence in traffic, or maybe they're just out to get you. ;-)

No, this has been happening consistently over a number of weeks.
At first I just thought it was just some other user of my ISP
which is usually the source of portscans on my system.

But I consistently get scanned after going to abcnews.go.com.
Here I'll do it right now....
I just got scanned and here's the IP of the source of the portscan:

Name: wasdc002ics.equip.icdsatt.net
Address: 12.120.9.22

Whatever it is it's strange because no other site I go to does this.

>
> > "°Mike°" wrote:
> >>
> >> Take off your paranoia cap, disable the warnings, and
> >> let your firewall do it's job -- it's only normal traffic
> >> from ATT.
> >>
> >> On Sun, 01 Aug 2004 14:23:50 -0400, in
> >> <10gqd832ptf50c5@corp.supernews.com>
> >> damocles <""@@..> scrawled:
> >>
> >> >Is anyone else being port scanned from equipt.icdsatt.net
> >> >after going to http://abcnews.go.com/index.html ?
> >> >
> >> >Name: nycny001ics.equip.icdsatt.net
> >> >Address: 12.120.1.21
> >> >
> >> >Name: cmbma005ics.equip.icdsatt.net
> >> >Address: 12.120.41.25
> >>
> >> --
> >> Basic computer maintenance
> >> http://uk.geocities.com/personel44/maintenance.html
>
> --
>
> That's News To Me!
> newstome@comcast.net

Relevant Pages

  • Re: ABCNews backscan attack
    ... > Why is ABCnews scanning my ports? ... For what it's worth, I don't consider portscanning from anyone "normal ...
    (comp.security.misc)
  • Re: ABCNews backscan attack
    ... > Why is ABCnews scanning my ports? ... For what it's worth, I don't consider portscanning from anyone "normal ...
    (comp.security.firewalls)
  • Re: ABCNews backscan attack
    ... > For what it's worth, I don't consider portscanning from anyone "normal ... Whatever it is it's strange because no other site I go to does this. ... > That's News To Me! ...
    (comp.security.misc)
  • Re: ABCNews backscan attack
    ... >> Why is ABCnews scanning my ports? ... > For what it's worth, I don't consider portscanning from anyone "normal ...
    (comp.security.misc)
  • Re: ABCNews backscan attack
    ... Roman Werpachowski wrote: ... > What's wrong with portscanning? ... windows to see if they're unlocked? ... That's News To Me! ...
    (comp.security.misc)
Quantcast