Guild Wars Forums - GW Guru
 
 

Go Back   Guild Wars Forums - GW Guru > Forest of True Sight > Technician's Corner

Notices

Reply
 
Thread Tools Display Modes
Old Oct 16, 2006, 10:30 PM // 22:30   #1
Ascalonian Squire
 
Captain Fizz's Avatar
 
Join Date: Jan 2006
Location: Scotland
Guild: TDB
Profession: E/Me
Advertisement

Disable Ads
Default UDP Port Scan?

Hello folks,

I searched for "udp port scan" but it came up with nothing...

After checking my hardware firewall's logs I came accross this:
Quote:
Internet Domain: 206-127-156-126.plaync.com

Internet Address: 206.127.156.126

4 times this week

UDP Port Scan Detected, Packet Dropped
Has anyone else had this?
Or is this standard?

Just curious why it picked this up.
The IG's are not known for false positives...

Cheers.
Captain Fizz is offline   Reply With Quote
Old Oct 17, 2006, 02:21 AM // 02:21   #2
Forge Runner
 
jesh's Avatar
 
Join Date: May 2005
Location: San Diego, CA
Guild: Penguin Village
Profession: Mo/
Default

Uh.. it looks like plaync had someone scanning their ports and dropped the packets. I don't see how this matters at all. XD
jesh is offline   Reply With Quote
Old Oct 17, 2006, 07:38 AM // 07:38   #3
Ascalonian Squire
 
Captain Fizz's Avatar
 
Join Date: Jan 2006
Location: Scotland
Guild: TDB
Profession: E/Me
Default

So how would THEIR ports being scanned end up in MY ports getting scanned?

That makes no sense.

If PlayNC were getting scanned, then PlayNC's firewalls would show stuff like this.
Not my own firewall at home...

This shows that PlayNC servers scanned MY ports.
Captain Fizz is offline   Reply With Quote
Old Oct 17, 2006, 08:56 AM // 08:56   #4
Forge Runner
 
=HT=Ingram's Avatar
 
Join Date: Feb 2005
Location: Anchorage Alaska
Guild: Haz Team [HT]
Profession: R/W
Default

that's those Koreans trying to take over the world after all... Not surprised...
/sarcasm off

Now in all seriousness, they are prob using the client software to find better ways to optimized their connections for their customers... A standard port scan report would be one such way to find more universally open ports to use for the client.
Maybe some warning if it was being done would have been nice. But in the end its already happened. And yes I have similar listings in my firewall logs...

Those addresses are the Austin Texas servers for the record.
NetRange: 206.127.144.0 - 206.127.159.255
If you feel this was a violation of agreement or abuse of client trust contact:
+1(512) 498-4038 or email: [email protected]

Make sure you have your activity logs to present to them and ask for an explaination.

In the end however I don't think its that big a deal...

Last edited by =HT=Ingram; Oct 17, 2006 at 09:06 AM // 09:06..
=HT=Ingram is offline   Reply With Quote
Old Oct 17, 2006, 11:55 AM // 11:55   #5
Lion's Arch Merchant
 
dronex's Avatar
 
Join Date: Dec 2005
Profession: Mo/
Default

paranoia anyone -.- ? who cares what they scan
dronex is offline   Reply With Quote
Old Oct 17, 2006, 06:02 PM // 18:02   #6
Ascalonian Squire
 
Captain Fizz's Avatar
 
Join Date: Jan 2006
Location: Scotland
Guild: TDB
Profession: E/Me
Default

Just wondering if it was common or somone spoofing.
If other peeps are getting it too - I'm happy.

@dronex - I would be impressed if I could actually become paranoid about anything. ^_^
(My disposition does not lend itself to me becoming paranoid)
Captain Fizz is offline   Reply With Quote
Reply

Share This Forum!  
 
 
           

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 01:33 PM // 13:33.


Powered by: vBulletin
Copyright ©2000 - 2016, Jelsoft Enterprises Ltd.
jQuery(document).ready(checkAds()); function checkAds(){if (document.getElementById('adsense')!=undefined){document.write("_gaq.push(['_trackEvent', 'Adblock', 'Unblocked', 'false',,true]);");}else{document.write("