|  | | |
12 Oct 2010
|
#1 | | W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE Indian Territory |
Port Scanning I had a series of port scans this evening, which I determined were done by my cable provider. Is there any legitimate reason why this needs to be done? | My System Specs |
| System Manufacturer/Model Number DIY OS W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE CPU Phenom II 1090T w/Noctua NH-D14 /**4400+ X2 w/CM Hyper TX 3 Motherboard ASRock 890FX Deluxe 4/**A8N-SLI Memory 2 x 2GB Patriot PGS34g1600LLKA/**4x1GB Corsair VS Graphics Card EVGA GTX460 SC/**EVGA 8800GTS Sound Card Asus Xonar D2X/**Xonar D1 Monitor(s) Displays Acer X233H, Dell E152FPc /**LG M237-WD Screen Resolution 1920x1080 & 1024x768/**1980x1080 Keyboard Logitech Media USB/**Saitek Eclipse Mouse Cordless Trackman Wheel/**Ditto PSU CM RS600 w/ APC BX1000G/**Antec 500 TP w/ APC BX1000 Case HAF922/**Antec 1040IIB Cooling 3x200mm, 1x140 and 1x120mm/**5x80mm fans Hard Drives WDC 2TB, 1.5TB, 1TB, 500GB,Seagate 500GB , Maxtor 80GB /**500GB Seagate & WDC 1TB Black Internet Speed 3.3Mbps Other Info SB 560 5.1 w/ Sennheiser RS140/**Creative T20 speakers, Dvico FusionHDTV7 Gold RT, Cisco E3000, HP 5510V AIO, Linksys E3000, Belkin F5U237 hub and **F5D8055 adapter
(** = 2nd rig) |
12 Oct 2010
|
#2 | | Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer University of Kentucky |
I think (it's possible) ISPs can search for torrents. | My System Specs | | System Manufacturer/Model Number Dell and Custom OS Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer CPU System 1: i7 2600@3.4GHz, System 2: AMD FX-4100 Zambezi 3.6G Motherboard System 1:Dell 06NWYK System 2: ASUS M5A97 AM3+ Memory System 1: 8GB System 2: 8GB Graphics Card System 1: ATI FirePro V4800 System 2: Radeon HD 6850 Sound Card System 1: onboard System 2: onboard Monitor(s) Displays System1: Viewsonic HDMI 24" Screen Resolution System 1: 1920x1080 System 2: 1920x1080 Case System 1: Dell System 2: Cooler Master Hard Drives System 1: Mirrored .5B drives System 2: Seagate Barracuda ST1000DM003 1TB 7200 RPM 64MB Cache SATA 6.0Gb/s Internet Speed 10 MBPS |
12 Oct 2010
|
#3 | | W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE Indian Territory |
Maybe, but I just checked and all of the ports listed are unassigned, except 3 that are dynamic and or private, with no further description given. The only torrent that I ever use is 8901, when using TVU Player, so the others appear to be unrelated. | My System Specs | | System Manufacturer/Model Number DIY OS W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE CPU Phenom II 1090T w/Noctua NH-D14 /**4400+ X2 w/CM Hyper TX 3 Motherboard ASRock 890FX Deluxe 4/**A8N-SLI Memory 2 x 2GB Patriot PGS34g1600LLKA/**4x1GB Corsair VS Graphics Card EVGA GTX460 SC/**EVGA 8800GTS Sound Card Asus Xonar D2X/**Xonar D1 Monitor(s) Displays Acer X233H, Dell E152FPc /**LG M237-WD Screen Resolution 1920x1080 & 1024x768/**1980x1080 Keyboard Logitech Media USB/**Saitek Eclipse Mouse Cordless Trackman Wheel/**Ditto PSU CM RS600 w/ APC BX1000G/**Antec 500 TP w/ APC BX1000 Case HAF922/**Antec 1040IIB Cooling 3x200mm, 1x140 and 1x120mm/**5x80mm fans Hard Drives WDC 2TB, 1.5TB, 1TB, 500GB,Seagate 500GB , Maxtor 80GB /**500GB Seagate & WDC 1TB Black Internet Speed 3.3Mbps Other Info SB 560 5.1 w/ Sennheiser RS140/**Creative T20 speakers, Dvico FusionHDTV7 Gold RT, Cisco E3000, HP 5510V AIO, Linksys E3000, Belkin F5U237 hub and **F5D8055 adapter
(** = 2nd rig) |
12 Oct 2010
|
#4 | | Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer University of Kentucky |
Which ports were checked? | My System Specs | | System Manufacturer/Model Number Dell and Custom OS Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer CPU System 1: i7 2600@3.4GHz, System 2: AMD FX-4100 Zambezi 3.6G Motherboard System 1:Dell 06NWYK System 2: ASUS M5A97 AM3+ Memory System 1: 8GB System 2: 8GB Graphics Card System 1: ATI FirePro V4800 System 2: Radeon HD 6850 Sound Card System 1: onboard System 2: onboard Monitor(s) Displays System1: Viewsonic HDMI 24" Screen Resolution System 1: 1920x1080 System 2: 1920x1080 Case System 1: Dell System 2: Cooler Master Hard Drives System 1: Mirrored .5B drives System 2: Seagate Barracuda ST1000DM003 1TB 7200 RPM 64MB Cache SATA 6.0Gb/s Internet Speed 10 MBPS |
12 Oct 2010
|
#5 | | W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE Indian Territory |
If you click on the screenshot in my OP, you will see most of them listed in the Attack Type column. | My System Specs | | System Manufacturer/Model Number DIY OS W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE CPU Phenom II 1090T w/Noctua NH-D14 /**4400+ X2 w/CM Hyper TX 3 Motherboard ASRock 890FX Deluxe 4/**A8N-SLI Memory 2 x 2GB Patriot PGS34g1600LLKA/**4x1GB Corsair VS Graphics Card EVGA GTX460 SC/**EVGA 8800GTS Sound Card Asus Xonar D2X/**Xonar D1 Monitor(s) Displays Acer X233H, Dell E152FPc /**LG M237-WD Screen Resolution 1920x1080 & 1024x768/**1980x1080 Keyboard Logitech Media USB/**Saitek Eclipse Mouse Cordless Trackman Wheel/**Ditto PSU CM RS600 w/ APC BX1000G/**Antec 500 TP w/ APC BX1000 Case HAF922/**Antec 1040IIB Cooling 3x200mm, 1x140 and 1x120mm/**5x80mm fans Hard Drives WDC 2TB, 1.5TB, 1TB, 500GB,Seagate 500GB , Maxtor 80GB /**500GB Seagate & WDC 1TB Black Internet Speed 3.3Mbps Other Info SB 560 5.1 w/ Sennheiser RS140/**Creative T20 speakers, Dvico FusionHDTV7 Gold RT, Cisco E3000, HP 5510V AIO, Linksys E3000, Belkin F5U237 hub and **F5D8055 adapter
(** = 2nd rig) |
12 Oct 2010
|
#6 | | Windows 7 Ultimate x86 Massachusetts |
it's almost impossible to read if you don't have a zoom function
44530, 47090, 47346, 47602
48882, 49650, 49906, 49394
12481, 12737, 12993, 13246
Your ISP is Cox? NetRange70.167.150.0 - 70.167.151.255
Those Portscans aren't run by Cox themselves but by someone who has his account with Cox just like you.
Just because they are assigned that 70.167.150.0 - 70.167.151.255 block doesn't mean they use it themselves
The second Block 94.0.0.0 - 94.255.255.255 is from GB and is assigned to VirginMedia.net
Apparently a UK-ISP
I don't recognize any of those ports. so I assume, somebody plays with a script and doesn't really know what they're doing 
-DG
Last edited by SledgeDG; 12 Oct 2010 at 09:26 PM..
| My System Specs | | System Manufacturer/Model Number HP m8000n OS Windows 7 Ultimate x86 CPU DualCore AMD Athlon 64 X2, 2600 MHz 5200+ Motherboard Asus M2N68-LA (Narra) Memory Samsung 2GB DDR2 Graphics Card Onboard NVIDIA GeForce 6150SE nForce 430 Sound Card Onboard nVIDIA nForce 6100-430 (MCP61P) Monitor(s) Displays Westinghouse 19" LED Screen Resolution 1280x1024 Keyboard Logitech Classic KB 200 Mouse Standard HP opticle USB mouse PSU Stock (HP) Case Stock (HP) Cooling Stock Hard Drives SATA II Seagate Barracuda 500GB
USB II WD Elements 500GB
USB II WD My Book 1TB
USB II WD My Book 2TB |
12 Oct 2010
|
#7 | | Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer University of Kentucky |
I agree. The ports are unassigned. http://www.iana.org/assignments/port-numbers
Don't know what they could be looking for. | My System Specs | | System Manufacturer/Model Number Dell and Custom OS Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer CPU System 1: i7 2600@3.4GHz, System 2: AMD FX-4100 Zambezi 3.6G Motherboard System 1:Dell 06NWYK System 2: ASUS M5A97 AM3+ Memory System 1: 8GB System 2: 8GB Graphics Card System 1: ATI FirePro V4800 System 2: Radeon HD 6850 Sound Card System 1: onboard System 2: onboard Monitor(s) Displays System1: Viewsonic HDMI 24" Screen Resolution System 1: 1920x1080 System 2: 1920x1080 Case System 1: Dell System 2: Cooler Master Hard Drives System 1: Mirrored .5B drives System 2: Seagate Barracuda ST1000DM003 1TB 7200 RPM 64MB Cache SATA 6.0Gb/s Internet Speed 10 MBPS |
12 Oct 2010
|
#8 | | W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE Indian Territory |

Quote: Originally Posted by SledgeDG it's almost impossible to read if you don't have a zoom function
44530, 47090, 47346, 47602
48882, 49650, 49906, 49394
12481, 12737, 12993, 13246
Your ISP is Cox? NetRange70.167.150.0 - 70.167.151.255
Those Portscans aren't run by Cox but by someone who has his account with Cox just like you.
Just because they are assigned that 70.167.150.0 - 70.167.151.255 block doesn't mean they use it themselves  Hmm, I ran Sam Spade on the IPs and they only pointed to Cox. If it were another account holder, wouldn't it point to him, rather than just Cox? | My System Specs | | System Manufacturer/Model Number DIY OS W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE CPU Phenom II 1090T w/Noctua NH-D14 /**4400+ X2 w/CM Hyper TX 3 Motherboard ASRock 890FX Deluxe 4/**A8N-SLI Memory 2 x 2GB Patriot PGS34g1600LLKA/**4x1GB Corsair VS Graphics Card EVGA GTX460 SC/**EVGA 8800GTS Sound Card Asus Xonar D2X/**Xonar D1 Monitor(s) Displays Acer X233H, Dell E152FPc /**LG M237-WD Screen Resolution 1920x1080 & 1024x768/**1980x1080 Keyboard Logitech Media USB/**Saitek Eclipse Mouse Cordless Trackman Wheel/**Ditto PSU CM RS600 w/ APC BX1000G/**Antec 500 TP w/ APC BX1000 Case HAF922/**Antec 1040IIB Cooling 3x200mm, 1x140 and 1x120mm/**5x80mm fans Hard Drives WDC 2TB, 1.5TB, 1TB, 500GB,Seagate 500GB , Maxtor 80GB /**500GB Seagate & WDC 1TB Black Internet Speed 3.3Mbps Other Info SB 560 5.1 w/ Sennheiser RS140/**Creative T20 speakers, Dvico FusionHDTV7 Gold RT, Cisco E3000, HP 5510V AIO, Linksys E3000, Belkin F5U237 hub and **F5D8055 adapter
(** = 2nd rig) |
12 Oct 2010
|
#9 | | Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer University of Kentucky |

Quote: Originally Posted by seekermeister 
Quote: Originally Posted by SledgeDG it's almost impossible to read if you don't have a zoom function
44530, 47090, 47346, 47602
48882, 49650, 49906, 49394
12481, 12737, 12993, 13246
Your ISP is Cox? NetRange70.167.150.0 - 70.167.151.255
Those Portscans aren't run by Cox but by someone who has his account with Cox just like you.
Just because they are assigned that 70.167.150.0 - 70.167.151.255 block doesn't mean they use it themselves  Hmm, I ran Sam Spade on the IPs and they only pointed to Cox. If it were another account holder, wouldn't it point to him, rather than just Cox? What if you ran Sam Spade on your IP. What would it show? It would not show a user name. | My System Specs | | System Manufacturer/Model Number Dell and Custom OS Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer CPU System 1: i7 2600@3.4GHz, System 2: AMD FX-4100 Zambezi 3.6G Motherboard System 1:Dell 06NWYK System 2: ASUS M5A97 AM3+ Memory System 1: 8GB System 2: 8GB Graphics Card System 1: ATI FirePro V4800 System 2: Radeon HD 6850 Sound Card System 1: onboard System 2: onboard Monitor(s) Displays System1: Viewsonic HDMI 24" Screen Resolution System 1: 1920x1080 System 2: 1920x1080 Case System 1: Dell System 2: Cooler Master Hard Drives System 1: Mirrored .5B drives System 2: Seagate Barracuda ST1000DM003 1TB 7200 RPM 64MB Cache SATA 6.0Gb/s Internet Speed 10 MBPS |
12 Oct 2010
|
#10 | | Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer University of Kentucky |
Try this with your ip address: WHOIS Lookup for Domain & IP Address Research | Whois Source
and the found ip.
Is it similar? | My System Specs | | System Manufacturer/Model Number Dell and Custom OS Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer CPU System 1: i7 2600@3.4GHz, System 2: AMD FX-4100 Zambezi 3.6G Motherboard System 1:Dell 06NWYK System 2: ASUS M5A97 AM3+ Memory System 1: 8GB System 2: 8GB Graphics Card System 1: ATI FirePro V4800 System 2: Radeon HD 6850 Sound Card System 1: onboard System 2: onboard Monitor(s) Displays System1: Viewsonic HDMI 24" Screen Resolution System 1: 1920x1080 System 2: 1920x1080 Case System 1: Dell System 2: Cooler Master Hard Drives System 1: Mirrored .5B drives System 2: Seagate Barracuda ST1000DM003 1TB 7200 RPM 64MB Cache SATA 6.0Gb/s Internet Speed 10 MBPS All times are GMT -5. The time now is 05:33 PM. | |