Ebay port scans you - check this out!

Gogol · May 26, 2020

Sorry if it has already been posted.

Code:

https://www.ghacks.net/2020/05/25/ebay-is-port-scanning-your-system-when-you-load-the-webpage/amp/

Well, does this mean that they are turning into a scam site?

Be careful guys.

dotc0m · May 26, 2020

DaPromo · May 26, 2020

First I assumed from reading the title they do it to detect proxies and scan common proxy ports like 3128, 8080, 80 etc but checking it for myself I see they scan oddly specific ports with no common use like 5944 6040 5950 5902

What is this for?

Or are they port knocking to check the response? A non-proxied browser should reject/refuse the connection but a poorly configured proxy may actually give a response of invalid port.

It's obvious they do it for security reasons but I am interested in the reason to choose this solution.

Gogol · May 26, 2020

dotc0m said:

Tinfoilhatmode = On

Aulig · May 26, 2020

"It is unclear why eBay is running the port scans. A likely explanation is that it is done to combat fraud, e.g. by taking over a computer, establishing a remote desktop connection and either making purchases on eBay, through fake auctions, or other means."

dotc0m · May 26, 2020

Aulig said:
"It is unclear why eBay is running the port scans. A likely explanation is that it is done to combat fraud, e.g. by taking over a computer, establishing a remote desktop connection and either making purchases on eBay, through fake auctions, or other means."

RIP to all those windows server 2008 VPS with stealth accounts....

BetterKnow · May 26, 2020

dotc0m said:
RIP to all those windows server 2008 VPS with stealth accounts....

If that's the case, RDP ports can easily be changed.

This sounds like some low effort attempt by eBay to combat fake/bot accounts.

DaPromo · May 26, 2020

Ok after searching around for these ports in particular I came across this

Their effort appears to be towards RDP and remote controlled setups so for those running stealth accounts check your setup and make sure it's compliant!
If anyone need help adjusting you can PM me.

TheVigilante · May 26, 2020

DaPromo said:
Ok after searching around for these ports in particular I came across this

Their effort appears to be towards RDP and remote controlled setups so for those running stealth accounts check your setup and make sure it's compliant!
If anyone need help adjusting you can PM me.

nice find lol

umpteen · May 26, 2020

Great find mate!

Ebay port scans you - check this out!

Gogol

Administrator

dotc0m

Elite Member

DaPromo

Regular Member

Gogol

Administrator

Aulig

Senior Member

dotc0m

Elite Member

BetterKnow

Senior Member

DaPromo

Regular Member

TheVigilante

Banned - Multiple Rules Violations

umpteen

BANNED

Main Menu

Marketplace

Making Money

BlackHat World