ATS AD Server pings Trojan ports, page 1
Pages:
ATS Members have flagged this thread 0 times


reply posted on 30-4-2006 @ 05:42 PM by SkepticOverlord
I need to create a FAQ on these sorts of things, it comes up over and over again.

Our server is configured to attempt to connect to you via multiple ports/connections. This is the most efficient way to send you a complex web page... for example, if we open 10 connections on 10 different ports and stream you HTML and images through these parallel connections, it's much more efficient than one connection. Hyper-sensitive firewall settings can interpret this type of access as a "port scan" or intrusion attempt because you suddenly receive more than one connection from one source.


Jedi_master...
None of these are connected to ATS in any way...
202.97.238.131 port 4081 --> Hei Long Jiang province education committee
61.180.228.245 port 1030 --> Qing An Zhang Hong Wei netbar
71.232.95.92 port 15118 --> Comcast Cable Communications, Inc
222.231.24.219 port 4899 -->
madness
70.167.254.214 port 1025 --> Cox Communications Inc
It seems your IP is getting some odd activity. Send me a u2u as to who your provider as and I can look up a couple things for you.


twitchy...
Yes, I've considered you exceptionally disruptive for not accepting a common sense explanation here:
ATS Installs Dos Application??
And for some odd reason, escalated here:
NSA Web Site Puts 'Cookies' on Computers
If you're making baseless accusations about the operations of ATS, even when the reality was explained to you, it certainly comes across as an attempt at pure disruption. I'm wide open to learning different, but the surface story tells me otherwise.


In any event, we've always, and will always respond quickly to any member concerns over these types of issues on ATS. We've always understood our member's concerns for their computing privacy (we don't keep server logs) as well as sensitivity to computer security. If any of our advertising networks is doing something funky, we need to know as we will call them to task and disable their ads.

We've also assigned a refresh to the ad server to display a new ad every 40-50 seconds... this might be way your suddenly seeing pings while sitting idle.


reply posted on 30-4-2006 @ 06:42 PM by Jedi_Master
Originally posted by SkepticOverlord
Jedi_master...
None of these are connected to ATS in any way...
202.97.238.131 port 4081 --> Hei Long Jiang province education committee
61.180.228.245 port 1030 --> Qing An Zhang Hong Wei netbar
71.232.95.92 port 15118 --> Comcast Cable Communications, Inc
222.231.24.219 port 4899 -->
madness
70.167.254.214 port 1025 --> Cox Communications Inc
It seems your IP is getting some odd activity. Send me a u2u as to who your provider as and I can look up a couple things for you.


Howdy SO...

Ya those may have not have originated from ATS, but I got them when I was logged on to ATS, but it doesn't explain the other 6 addresses and ports...

But the others I think did originate from ATS, and the 4899 port worries me, I didn't really start looking into it untill I noticed my out going log ( on my router ) from ATS started growing from normal ( about every 60 seconds there is a new log entry from ATS and Fast click, servedby.adversitising.com, as.casalemadia.com ect ) ...

Most of these could be from cookie updates like you said but the ports are suspicious ( the cookie updates I've seem are from port 80 )...

No big deal for me though after the hack from Remote Administrator on my server( this was from another site ) I've learned my lesson and now I've blocked all access to those ports, and all other ports that could cause a problem, but my router still records them...

I'm going to continue to monitor this and let yoiu know what I find...

Here is a capture of my incoming log for the past couple of hours ( and I'm only logged on to ATS and my email )...


Pages:     ^^TOP^^