• Skip to main content
  • Skip to header right navigation
  • Skip to site footer
iGuRu

iGuRu

Real-time Technology News. Opinions & Tweaks

  • / news
  • / infosec
  • / tools
  • / tweaks
  • / dummies
  • / opinions
  • / support
home / News / eBay scans your computer ports

eBay scans your computer ports

25/05/2020 15:30 by giorgos

Have you recently visited eBay? The site is a popular destination for buying new and used items. You will probably be surprised to learn that eBay scans your computer ports when you visit the site with a browser.

You can verify it very easily. Use a browser such as Google Chrome, Firefox, Brave, Microsoft Edge, or Vivaldi. Open a new page and press the F12 key to open the Browser Developer Tools.

ebay banner - eBay scans your computer ports

Open an eBay page on the Network tab in Developer Tools.

Wait for the page to load and look for 127.0.0.1 in the list of links. These are the scans that eBay runs when you log in to the site.

You can click on the link to see additional information. This way you will see the port that is scanning eBay right now. The scan is performed by check.js, a JavaScript that runs on eBay when users log in to the site. Uses WebSockets to run searches on your local system using a specified port, and scans are performed regardless of login status.

Bleeping Computer has created a handy table listing the ports:

ProgramEbay NamePort (The Harbour District)
UnknownREF63333
VNCVNC5900
VNCVNC5901
VNCVNC5902
VNCVNC5903
Remote Desktop ProtocolRDP3389
AeroadminARO5950
Ammyy AdminAMY5931
TeamViewer TV05939
TeamViewer TV16039
TeamViewer TV25944
TeamViewer TV26040
Anyplace controlServices5279
AnyDeskANY7070

Most of these ports are used by remote connection applications, such as VNC, Teamviewer, or Windows Remote Desktop.

ebay port scan 1 - eBay scans your computer ports

The Nullsweep website, which mentioned first this issue, found that the scan does not run on Linux systems.

It is unknown at this time why eBay is scanning its visitors' computers. Of course the reactions on Twitter and other social media sites are very negative. Users as a whole criticize eBay for scanning ports and for scanning ports as well as users who are not logged in to the site.

What can you do;

Block check.js script with a content blocker.
In some browsers, such as Firefox, turn off Web Sockets. EBay is loading script check.js from the following address (currently): https://src.ebay-us.com/fp/check.js

So a regex like || src.ebay-us.com ^ * / check.js should work fine.

The address may change and may differ if you log in from different company addresses such as eBay.de.

The other option is to turn off WebSockets completely, but incompatibilities and upload problems may occur on other sites.

eBay scans your computer ports was last modified: 25 May, 2020, 3: 30 mm by giorgos

Subscribe to our newsletter

no spam

spread the news

  • Facebook
  • Twitter
  • Reddit
  • Printing
  • Email

Read them Technology News from all over the world, with the validity of iGuRu.gr

Follow us on Google News


Competition: Newstag: ebay, post scan

You May Also Like

Facebook's libra currency will be issued in 2021 in a limited form
iGuRu
Mastercard, Visa & eBay leave Facebook Libra
iGuRu
Google Official answer to the EU fine

About Us giorgos

George still wonders what he's doing here ...

Previous Post: « Thoron: post-exploitation framework for Linux Thoron: post-exploitation framework for Linux
Next Post: AutoRDPwn Shadow Attack Framework AutoRDPwn Shadow Attack Framework »

Reader Interactions

Comment Policy:

IGuRu.gr does not publish the comments immediately. Malicious comments, comments that include ads, or comments that are offensive are deleted without notice. We do not adopt the opinions expressed by our readers.
Your comments will be displayed after approval by the administrators


Leave your comment
Ακύρωση απάντησης

Your email address is not published. Τα υποχρεωτικά πεδία σημειώνονται με *

 

 © 2021 · iGuRu.gr · ☢ · Keep It Simple Stupid Genesis theme

about  ·   get in touch  ·  rss  ·  sitemap  ·  cough

loadingCancel
Could not post post - check your email address!
Email verification failed, please try again
Your blog can not post posts via email.