How exactly does ISP port scanning work?

Post by **rep** » Fri Apr 01, 2005 10:38 am

Years ago I ran a shoutcast station for myself with some CDs I ripped. It was easy to do that in synchronization with VNC which I use a lot when I'm out and about than to copy all of the mp3 files over to a CD.

My ISP found out and was like, "HARRR!!! WE DON'T ALLOW ANY SUCH HOSTING!!!" Even though I've for years been on the @Work (Business Services, or BS now.) professional system which allows hosting from your location.

Long story short, I had it on port 8888 then 9999. I also ran an HTTP and FTP for myself on that same server, and they shut those down as well because they're retarded.

They never said anything about Q3 ports like 27960. I ran servers for friends and whatnot for a while, and nothing was ever done.

My question is, do they check what's happening or do they just look for the ports in question? If I make my HTTP or Shoutcast run on 27960, should I be fine?

Post by **Tormentius** » Fri Apr 01, 2005 3:20 pm

They probably don't like the thought of an unlicensed person distributing music of unknown origin to the public and leaving them liable.

That said, if you're on a business plan you are allowed by definition to host web and email at most ISPs. Call your ISP and have a chat with management.

Post by **rep** » Fri Apr 01, 2005 5:39 pm

Yeah I already did talk with them a few times about the latter, but the distribution thing isn't accurate. Distributing something means it's going out to people other than yourself, and since I have it set up for just enough connections (Home/Work) and no one knows about it, it's safe.

Plus, a shoutcast stream has nothing on the bandwidth hogged up by the kids just down the road, with all sorts of illegal P2P shit going on.

Post by **+JuggerNaut+** » Fri Apr 01, 2005 7:24 pm

Rep, i have the same isp as you and i host shoutcast on a fairly regular basis for a couple of years now, no complaints.

Post by **rep** » Sat Apr 02, 2005 10:41 am

They told me on the phone that they don't monitor any connection until it goes over 1GB of uploads a month.

Funny, because since I'm on the business plan, they shouldn't monitor me for bandwidth usage whatsoever. I can't think of a person with broadband who doesn't go above 1GB of uploads monthly... Let alone all the kids who have P2P going on.

Post by **AmIdYfReAk** » Sat Apr 02, 2005 4:20 pm

you've been flagged by your isp, thus.. they will continue to monitor your line, this is why they are getting you.

they track the connections and on what port they are and probe them. its simple really.