port scan - GoFuckYourself.com

DaddyHalbucks · 10-22-2006, 05:42 PM

A friend of mine keeps getting warnings from Panda that the following IP is attempting to access his computer.

This has been going on for about three weeks now. Luckily the software blocks it.

Here is the IP: 204.16.208.135

Any ideas?

pr0 · 10-22-2006, 05:47 PM

OrgName: FAST COLOCATION SERVICES
OrgID: FCS-73
Address: 3791 N. Edgewater Dr
City: Wasilla
StateProv: AK
PostalCode: 99654
Country: US

NetRange: 204.16.208.0 - 204.16.211.255
CIDR: 204.16.208.0/22
NetName: FC-BLK-1
NetHandle: NET-204-16-208-0-1
Parent: NET-204-0-0-0-0
NetType: Direct Allocation
NameServer: SANDY.THEHIDEOUT.NET
NameServer: SANDY2.THEHIDEOUT.NET
Comment: For Abuse Notices please visit http://www.fastcolocation.net/abuse/
RegDate: 2005-11-07
Updated: 2006-07-31

RAbuseHandle: NAD41-ARIN
RAbuseName: NOC Abuse Department
RAbusePhone: +1-703-637-6336
RAbuseEmail: *********@fastcolocation.net

Joey Bagga Donuts · 10-22-2006, 06:21 PM

Panada AV sucks. I reccomend he removes that software and gets something else. That is IF he can remove it. I wouldn't trust anything their crap told me.

HorseShit · 10-22-2006, 06:38 PM

I wouldn't worry about it

Missie · 10-22-2006, 06:46 PM

Do a true port scan to see if any of the ports are actually opened. Use Steve Gibson's to do this:

GRC port scan

Wanna know if your firewall leaks? Do the leak test

He has some really neat stuff on his site and I used to use it quite a bit. Still visit it every so often.

Missie

woj · 10-22-2006, 06:50 PM

Quote:

Originally Posted by jdavis

I wouldn't worry about it

biftek · 10-22-2006, 06:52 PM

well if they have been doing a port scan for the last 3 weeks , i wouldn't worry about it , port scan is just knocking on the doors does nothing

Missie · 10-22-2006, 07:02 PM

But if the firewall keeps "replying" they'll keep coming back hoping that one day they'll be able to get in. A firewall that sends back any kind of answer, even if it's to say that it didn't allow the connection, is telling the other side that there is someone living at that address. What you need is a real secure firewall that will block the connection attempt and will NOT send anything back.

Do the port scan and the leak test, even if they're somewhat old, it still works.

Missie

DaddyHalbucks · 10-22-2006, 07:27 PM

Great info, thanks.

micker · 10-22-2006, 07:32 PM

get an old pc from someone, an old 200mhz will do, put 2 nics in it and load smoothwall http://smoothwall.org/ on it. absolute best thing you can do. no other product out there will secure you as well as that will.

SmokeyTheBear · 10-22-2006, 07:46 PM

heres a link to portscan yourself and others..

http://gfy.webspacemania.com/port/

Missie · 10-22-2006, 07:50 PM

webspacemania.com may cause a breach of browser security.

We blocked your browser from visiting this site.

In our tests, webspacemania.com attempted to make unauthorized changes to our test PC by exploiting a browser security vulnerability. This is a serious security threat which could lead to an infection of your PC.

Missie

SmokeyTheBear · 10-22-2006, 07:59 PM

Quote:

Originally Posted by Missie

webspacemania.com may cause a breach of browser security.

We blocked your browser from visiting this site.

In our tests, webspacemania.com attempted to make unauthorized changes to our test PC by exploiting a browser security vulnerability. This is a serious security threat which could lead to an infection of your PC.

Missie

mcafee is stupid sometimes ( im assuming thats where your message comes from )

try www.ravenriley.com

Missie · 10-22-2006, 08:06 PM

Yes, but it doesn't block ravenriley, it totally blocked the other one though??

Missie

SmokeyTheBear · 10-22-2006, 08:12 PM

Quote:

Originally Posted by Missie

Yes, but it doesn't block ravenriley, it totally blocked the other one though??

Missie

thats wierd because look at the full advisory for both sites

Raven riley
http://www.siteadvisor.com/sites/ravenriley.com

webspacemania
http://www.siteadvisor.com/sites/webspacemania.com

clean site
http://www.siteadvisor.com/sites/geocities.com

whats stupid is webspacemania.com is a host just like geocities.com , i m sure at one point or another they have both had virus's on them yet mcafee flags webspacemania.com

if mcafee had flagged geocities like that long ago it wouldnt be so big..

rodney25 · 10-23-2006, 10:07 AM

Nice one, pro.

marketsmart · 10-23-2006, 10:14 AM

nothing serious, dont sweat it...

10-22-2006, 05:42 PM	#1
DaddyHalbucks A freakin' legend! Industry Role: Join Date: Feb 2004 Location: Las Vegas, Nevada USA Posts: 18,975	port scan A friend of mine keeps getting warnings from Panda that the following IP is attempting to access his computer. This has been going on for about three weeks now. Luckily the software blocks it. Here is the IP: 204.16.208.135 Any ideas? __________________ Boner Money

10-22-2006, 05:47 PM	#2
pr0 rockin tha trailerpark Industry Role: Join Date: May 2001 Location: ~Coastal~ Posts: 23,088	OrgName: FAST COLOCATION SERVICES OrgID: FCS-73 Address: 3791 N. Edgewater Dr City: Wasilla StateProv: AK PostalCode: 99654 Country: US NetRange: 204.16.208.0 - 204.16.211.255 CIDR: 204.16.208.0/22 NetName: FC-BLK-1 NetHandle: NET-204-16-208-0-1 Parent: NET-204-0-0-0-0 NetType: Direct Allocation NameServer: SANDY.THEHIDEOUT.NET NameServer: SANDY2.THEHIDEOUT.NET Comment: For Abuse Notices please visit http://www.fastcolocation.net/abuse/ RegDate: 2005-11-07 Updated: 2006-07-31 RAbuseHandle: NAD41-ARIN RAbuseName: NOC Abuse Department RAbusePhone: +1-703-637-6336 RAbuseEmail: *********@fastcolocation.net __________________ __________ Loadedca$h - get sum! - Revengebucks - mmm rebills! - webair (gotz sErVrz)

10-22-2006, 06:21 PM	#3
Joey Bagga Donuts Registered User Join Date: Oct 2006 Posts: 81	Panada AV sucks. I reccomend he removes that software and gets something else. That is IF he can remove it. I wouldn't trust anything their crap told me. __________________ SIG TOO BIG!

10-22-2006, 06:46 PM	#5
Missie Confirmed User Join Date: Oct 2006 Posts: 372	Do a true port scan to see if any of the ports are actually opened. Use Steve Gibson's to do this: GRC port scan Wanna know if your firewall leaks? Do the leak test He has some really neat stuff on his site and I used to use it quite a bit. Still visit it every so often. Missie __________________ Looking for a clean sponsor that won't steal from you?check them out here!

10-22-2006, 07:02 PM	#8
Missie Confirmed User Join Date: Oct 2006 Posts: 372	But if the firewall keeps "replying" they'll keep coming back hoping that one day they'll be able to get in. A firewall that sends back any kind of answer, even if it's to say that it didn't allow the connection, is telling the other side that there is someone living at that address. What you need is a real secure firewall that will block the connection attempt and will NOT send anything back. Do the port scan and the leak test, even if they're somewhat old, it still works. Missie __________________ Looking for a clean sponsor that won't steal from you?check them out here!

10-22-2006, 06:38 PM	#4
HorseShit Too lazy to set a custom title Join Date: Dec 2004 Posts: 17,513	I wouldn't worry about it

10-22-2006, 06:52 PM	#7
biftek So Fucking Banned Join Date: Jan 2005 Location: Victoria, Australia Posts: 1,030	well if they have been doing a port scan for the last 3 weeks , i wouldn't worry about it , port scan is just knocking on the doors does nothing

10-22-2006, 07:27 PM	#9
DaddyHalbucks A freakin' legend! Industry Role: Join Date: Feb 2004 Location: Las Vegas, Nevada USA Posts: 18,975	Great info, thanks. __________________ Boner Money

10-22-2006, 07:32 PM	#10
micker Confirmed User Join Date: Nov 2005 Location: Metro Detroit Posts: 748	get an old pc from someone, an old 200mhz will do, put 2 nics in it and load smoothwall http://smoothwall.org/ on it. absolute best thing you can do. no other product out there will secure you as well as that will.

10-22-2006, 07:46 PM	#11
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	heres a link to portscan yourself and others.. http://gfy.webspacemania.com/port/ __________________ hatisblack at yahoo.com

10-22-2006, 07:50 PM	#12
Missie Confirmed User Join Date: Oct 2006 Posts: 372	webspacemania.com may cause a breach of browser security. We blocked your browser from visiting this site. In our tests, webspacemania.com attempted to make unauthorized changes to our test PC by exploiting a browser security vulnerability. This is a serious security threat which could lead to an infection of your PC. Missie __________________ Looking for a clean sponsor that won't steal from you?check them out here!

10-22-2006, 08:06 PM	#14
Missie Confirmed User Join Date: Oct 2006 Posts: 372	Yes, but it doesn't block ravenriley, it totally blocked the other one though?? Missie __________________ Looking for a clean sponsor that won't steal from you?check them out here!

10-23-2006, 10:07 AM	#16
rodney25 Confirmed User Join Date: Jun 2005 Posts: 7,090	Nice one, pro. __________________ AFFORDABLE Hosting -- Extreme Dependability -- FULL Service ICQ ME for DAMN GOOD HOSTING DEALS: 5380773

10-23-2006, 10:14 AM	#17
marketsmart HOMICIDAL TROLL KILLER Industry Role: Join Date: Dec 2004 Location: Sunnybrook Institution for the Criminally Insane Posts: 20,419	nothing serious, dont sweat it...