Announcement

Collapse
No announcement yet.

Spyware

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Spyware

    hello this is my first post :)
    problem : i was online ...(i use win ) notin special ...and used netstat ...and saw some connections ...one of them made me curious as there were a lot of them .... sometin.deploy.akamaitechnologies.com were al least 4 ..i copied it and > google ..and i found it to be some sort of spyware ..they pop up when i use yahoo ... if i open yahoo front page ...if i open yahoo e mail ..if i use yahoo messenger ..later i found a program called spystop ..i d/l it and started it .it has a list there ..in the program with a lot of adressez to block as they were spyware ...i searched and the blabla.deploy.akamaitechnologies.com was on that list as spyware ..so i changed my mail I no longer use yahoo ..And the question is ..what kind of spyware was that and what extra info can that get from me

  • #2
    Akamai is a caching service, not a spyware farm.

    ...It ...doesnt ...really ...matter ...though ...as ...this ...is ...probably ...heading ...towards .../dev/null
    Virtutis gloria merces

    Comment


    • #3
      Originally posted by ripshy
      Akamai is a caching service, not a spyware farm.

      ...It ...doesnt ...really ...matter ...though ...as ...this ...is ...probably ...heading ...towards .../dev/null
      I'm sure you're right, but just for the sake of being consistent.....

      1. Go to google
      2. type "how akamai works"
      3. read the first hit - http://www.cs.washington.edu/homes/ratul/akamai.html

      Now, /dev/null anyone?

      Comment


      • #4
        If you are concerned about traffic leaving/entering a specific system, you may want to consider running a firewall on it and explicitly only allowing the traffic that you _know_ is valid, logging all else for your viewing/rules-correction pleasure. It really doesn't matter if your system is completely infested with spyware if the spyware has no way to phone home...
        if it gets me nowhere, I'll go there proud; and I'm gonna go there free.

        Comment


        • #5
          spyware

          .<tried to get my(forgotten) password back but i waited a whole day for it and notin so i registred again ..sorry >.
          not akamaitech .....but some of this

          a204-176-7-252.deploy.akamaitechnologies.com
          a204-176-7-253.deploy.akamaitechnologies.com

          and i also found another info on this ..some one with the same problem http://www.incidents.org/archives/in.../msg00762.html
          he mailed the guys from akamaitechnologies and i quote them "Blocking Akamai servers by IP is not possible, since Akamai's network
          consists of 11,600+ servers in over 820 networks across 62 countries.
          However, HTTP traffic is not a danger to your machine."
          Now that`s weird :P ...cant block them ?

          Comment


          • #6
            Originally posted by wegas
            .<tried to get my(forgotten) password back but i waited a whole day for it and notin so i registred again ..sorry >.
            not akamaitech .....but some of this

            a204-176-7-252.deploy.akamaitechnologies.com
            a204-176-7-253.deploy.akamaitechnologies.com

            and i also found another info on this ..some one with the same problem http://www.incidents.org/archives/in.../msg00762.html
            he mailed the guys from akamaitechnologies and i quote them "Blocking Akamai servers by IP is not possible, since Akamai's network
            consists of 11,600+ servers in over 820 networks across 62 countries.
            However, HTTP traffic is not a danger to your machine."
            Now that`s weird :P ...cant block them ?
            Call me crazy, but you can block some port 80 stuff, going in or out. You don't loose the rest of your port 80 "safe" content. Further, if you are worried about 11,600+ servers, I do note that 2 of the end with domain akamaitechnologies.com, just block everything from that domain. This is not rocket sience is it?
            "Never Underestimate the Power of Stupid People in Large Groups"

            Comment


            • #7
              Originally posted by wegas
              "Blocking Akamai servers by IP is not possible, since Akamai's network consists of 11,600+ servers in over 820 networks across 62 countries.
              However, HTTP traffic is not a danger to your machine."
              Now that`s weird :P ...cant block them ?
              blah blah blah.. whatever. that is why you block _all_ traffic by default and only allow the connections/states that you _know_ are valid and permitted, and adjust the firewall accordingly.
              if it gets me nowhere, I'll go there proud; and I'm gonna go there free.

              Comment


              • #8
                Originally posted by wegas
                Now that`s weird :P ...cant block them ?
                Yankees response should clarify why you theoretically cannot block them. But hey, nearly anything is possible with ipchains.

                Originally posted by converge
                blah blah blah.. whatever. that is why you block _all_ traffic by default and only allow the connections/states that you _know_ are valid and permitted, and adjust the firewall accordingly.
                If this does not make any sense to you, here is a lamens interpretation:

                Last edited by ripshy; October 3, 2003, 15:54.
                Virtutis gloria merces

                Comment


                • #9
                  spyware

                  what`s the best :P like in a lot of options ... i tried zonealarm and after i allowed iexplorer to "connect to the internet" no further connection was brought to my attention .. a firewall for home use .. to work on windows .i read another topic with almost same question but i dont have a old box and all that ...i tried one that always kept a connection to some "update manager" and that i hate cause i consider that to be spyware and when you got a damn message " new version available ...oh damn ..."you called home?" Some advice ?

                  Comment


                  • #10
                    Originally posted by wegas
                    what`s the best :P like in a lot of options ... i tried zonealarm and after i allowed iexplorer to "connect to the internet" no further connection was brought to my attention .. a firewall for home use .. to work on windows .i read another topic with almost same question but i dont have a old box and all that ...i tried one that always kept a connection to some "update manager" and that i hate cause i consider that to be spyware and when you got a damn message " new version available ...oh damn ..."you called home?" Some advice ?

                    As for a win-box home firewall, i use one called kerio personal firewall, works for me. I got zonealarm on another machine, they seem to do fine.
                    ~:CK:~
                    I would like to meet a 1 to keep my 0 company.

                    Comment


                    • #11
                      Tiny Personal was my favorite.... it's the only free windows fw that I could stand, although I think the newer version is kinda flukey and they want you to pay for it. There is already a thread somewhere on the boards re: this, iirc.
                      if it gets me nowhere, I'll go there proud; and I'm gonna go there free.

                      Comment


                      • #12
                        deploy.akamaitechnologies.com RESOLVED as www.fbi.gov

                        Hey i want to know something about deploy.akamaitechnologies.com
                        Why do you people thinq is a cache farm ? Why studies show that deploy.akamaitechnologies.com is a fbi.gov partner?
                        Google akamaitechnologies and you will see what i am talking about ! Who said is a cache farm ?

                        Comment


                        • #13
                          Good Gawd, leave old ass threads alone. It's easy to do. First look at the timestamp associated with the threads origin (hint: upper left hand corner of the first post in the thread)

                          Now that it's been revived....it's....probably....on...it's....way... .to..../dev/null.....as...I....type....this....


                          Choo....Choo....
                          “Bigamy is having one wife too many. Monogamy is the same.”

                          Comment


                          • #14
                            Originally posted by 0versight
                            Sygate is the best of the free firewalls out there.
                            I could not agree more Oversight. Sygate is definitely the best which has been made for Windows. Norton and Kerio sucks too.
                            When people call me normal I know it's time to seek mental help

                            Comment


                            • #15
                              spyware, firewalls, and an observation

                              this is my first post also. I found this site (and this thread) today after noticing on my "McAfee personal firewall" that akamaitechnologies.com (note: different numbers and stuff preceded the "aka..." -and yes, "deploy" was in there) had ICMP Pinged me several times. (By the way, what does that mean? ICMP Ping? Anyone??). Another commonly occuring address that's been noted by this firewall is ipt.aol.com (preceded by letters and numbers that vary from address to address but all share the ipt.aol.com). There have been others that have acted similarly, but today I decided to try and figure out what this aka.... address was about. I haven't gotten a concrete answer to that question yet, but it did lead me to this site and thread, and here I am.
                              My laptop came with a firewall, which works pretty well, but I lived with trojans, worms, and all that junk until I bought some virus protection. I chose McAfee Anti-Virus, because it was there, and I'd been told that between the leading A-V's, one was as good as another (i'd love comments/opinions on that -via this thread or email). Later, my server offered this McAfee personal firewall, which gives me a very basic summary of whose been ICMP Pinging me and TCP Ports associated with certain addresses and activities (another thing i don't understand).

                              As you can see, I'm just learning the basics of all this stuff and glad to have come accross this web site as it may just offer some answers for me. Maybe I can even pass on some info. here (someday. lol).

                              here's another.... does anyone know what "www-ldap-gw" mean or is? that's another that's popped up in the "Event Information" coloumn (along with "ICMP Ping" "Port3765(TCP" blah blah blah).

                              I don't know if it's of any help in understanding the akamaitechnologies.com thing, but I can give you a source IP for some of the one's that have visited me. here's one for the most commonly used to Ping me today: SOURCE IP: 193.108.155.115
                              HOST NAME: a193-108-155-115.deploy.akamaitechnologies.com
                              thanks
                              Last edited by AlxRogan; October 31, 2004, 19:10. Reason: to keep baby Jesus from crying
                              -GirlOUTthere

                              Comment

                              Working...
                              X