Ebay port scans you - check this out!

[Gogol]

Sorry if it has already been posted.

https://www.ghacks.net/2020/05/25/ebay-is-port-scanning-your-system-when-you-load-the-webpage/amp/

Well, does this mean that they are turning into a scam site?

Be careful guys.

 

[dotc0m]

 

[DaPromo]

First I assumed from reading the title they do it to detect proxies and scan common proxy ports like 3128, 8080, 80 etc but checking it for myself I see they scan oddly specific ports with no common use like 5944 6040 5950 5902

What is this for?

Or are they port knocking to check the response? A non-proxied browser should reject/refuse the connection but a poorly configured proxy may actually give a response of invalid port.

It's obvious they do it for security reasons but I am interested in the reason to choose this solution.

 

[Gogol]

Tinfoilhatmode = On

 

[Aulig]

"It is unclear why eBay is running the port scans. A likely explanation is that it is done to combat fraud, e.g. by taking over a computer, establishing a remote desktop connection and either making purchases on eBay, through fake auctions, or other means."

 

[dotc0m]

"It is unclear why eBay is running the port scans. A likely explanation is that it is done to combat fraud, e.g. by taking over a computer, establishing a remote desktop connection and either making purchases on eBay, through fake auctions, or other means."

RIP to all those windows server 2008 VPS with stealth accounts....

 

[BetterKnow]

RIP to all those windows server 2008 VPS with stealth accounts....

If that's the case, RDP ports can easily be changed.

This sounds like some low effort attempt by eBay to combat fake/bot accounts.

 

[DaPromo]

Ok after searching around for these ports in particular I came across this

Their effort appears to be towards RDP and remote controlled setups so for those running stealth accounts check your setup and make sure it's compliant!
If anyone need help adjusting you can PM me.

 

[TheVigilante]

Ok after searching around for these ports in particular I came across this

Their effort appears to be towards RDP and remote controlled setups so for those running stealth accounts check your setup and make sure it's compliant!
If anyone need help adjusting you can PM me.

nice find lol

 

[umpteen]

Great find mate!