Phishing Web site source FYI

[Pete]

Noticed the following yesterday from:

67.207.222.109

02/25 14:09:48 Name: (portscan) ICMP Sweep

Only occurred yesterday that I could see.

[syner]

ok i am going to bite here. this is my website. i am Robert Conlin. what is the phishing post all about and why is this post on this board?

[TrOjAn]

Looks like pete was saying you port scanned his PC?

TrOjAn

[syner]

sounds like it but the problem is i didn't. this is why i am asking for more information. thanks for clarifying what he said though. hopefully he can explain this in more detail personally as i am concerned about this post.

[syner]

i don't see why i am being singled out here for a post on this forum for something like this also. does he post stuff like this all the time or something? why didn't he just contact me directly if this is the case. something is not right with this post and obviously since this affects me directly i will take this very seriously.

[TrOjAn]

We often get scans from people, sometimes we post details in case its a co ordinated attack on HS servers.

IF? that scan came via your servers and you did not do it I would think its in your interest to find out how / why it happened? in case someones spoofing from your IP.

Just a thought, Im sure pete will delete it once he sees that its not malicious.. I just checked my hs server and noticed someone from the US tried to get on my HS server, ip 66.11.122.194

TrOjAn

[syner]

maybe there is a misunderstanding on my comment. when i said i take it seriously i meant from both sides. i am checking on my side although the domain is hosted like many companies these days. it is not an internal box. still again i don't see why there would be a portscan coming from my host. they don't even know who you guys are i am sure. the only way i know this is going on is because i see you guys coming to my website and going around (although i do know about you guys for years. have been buying zwave hardware from homeseer for some time).

no harm no foul but obviously this is a concern if true or not misunderstood.

[tmcgowan]

Given the cicumstances, I think a moderator ought to remove the post.

[sparkman]

Port scan site FYI

Also, an icmp port scan is not the same as phishing. An icmp port scan is not neccesarily malicious, whereas phishing always is. At a minimum the post title should be changed.

Cheers
Al

[Pete]

This is really the first ICMP port scan that I have seen on my internet address. I would not have posted it had I not seen it. It is in my logs.

It wasn't meant to be a malicious post but rather a heads up.

An ICMP Port scan can be utilized for phishing with malicious intent; although I doubt that was the case here.