View previous topic :: View next topic |
Author |
Message |
ashleyw Occasional Visitor
Joined: Nov 18, 2003 Posts: 21
|
Posted: Wed Apr 07, 2004 10:14 am Post subject: Port scan from Tomtom |
|
|
Not sure what is happening but over the last few days, my firewall has detected a few port scans from an ip which turns out to be the tomtom website. Each time it happens I have been on the website about an hour earlier.
Anyone else had this?
Ashley. |
|
Back to top |
|
|
Privateer Pocket GPS Moderator
Joined: 30/12/2002 17:36:20 Posts: 4912 Location: Oxfordshire, England, UK
|
Posted: Wed Apr 07, 2004 10:35 am Post subject: |
|
|
Hi Ashley,
That’s very strange! I use ZoneAlarm Pro at home, but I’ve switched off notification of possible hacks. Next time I’m at home I’ll reactivate that setting and then visit the TomTom website to see what happens!
Is there any specific area of the TomTom website that you used, e.g. the support pages?
Regards, _________________ Robert.
iPhone 6s Plus, iOS 14.0.1: iOS CamerAlert v2.0.7
TomTom GO Mobile iOS 2.3.1; TomTom (UK & ROI and Europe) iOS apps v1.29
Garmin Camper 770 LMT-D |
|
Back to top |
|
|
ashleyw Occasional Visitor
Joined: Nov 18, 2003 Posts: 21
|
Posted: Wed Apr 07, 2004 3:54 pm Post subject: |
|
|
Pretty much all over the site. I'll give it another go. |
|
Back to top |
|
|
Justin-case Occasional Visitor
Joined: Apr 04, 2004 Posts: 21 Location: North London
|
Posted: Thu Apr 08, 2004 10:03 pm Post subject: |
|
|
Ashleyw do you by any chance use norton 2004?
if so in settings you can set norton up to ban there IP addy for an hour
its not ideal but nice to let them know you know.
Randon pinging is common but to physically scan your computer for open ports is some what naughty, i would consider fireing up IP Tools and have a look back.
To check the ip addy just type it in your browser and hit go this will bypass the dns server and take you straight to the culprit if it is indeed TT.
JC |
|
Back to top |
|
|
ashleyw Occasional Visitor
Joined: Nov 18, 2003 Posts: 21
|
Posted: Fri Apr 09, 2004 9:36 am Post subject: |
|
|
I was using outpost firewall, I've changed to Zonealarm and it hasn't happened since. The IP address was definately for the tomtom site. Very strange. |
|
Back to top |
|
|
Dodgy Occasional Visitor
Joined: Mar 04, 2004 Posts: 31
|
Posted: Fri Apr 09, 2004 10:24 am Post subject: |
|
|
But you haven't said what ports they were scanning, this could just be normal 'background radiation'! Take a look at your logs, it wasn't port 113 they were scanning was it?
Dave. |
|
Back to top |
|
|
Dave Frequent Visitor
Joined: Sep 10, 2003 Posts: 6460 Location: UK
|
Posted: Fri Apr 09, 2004 2:19 pm Post subject: |
|
|
Not wishing to jump in and defend TomTom as I'll probably get leached by others, but I am Security GIAC Certified, I visit TomTom's website on a daily basis and have seen no port attacks, spoofs, and I've interrogated my firewall logs. I think the firewall software you were using was just being a little over cautious and sending spurious alerts and alarm bells ringing when it wasn't actually a port scan. |
|
Back to top |
|
|
ashleyw Occasional Visitor
Joined: Nov 18, 2003 Posts: 21
|
Posted: Fri Apr 09, 2004 5:01 pm Post subject: |
|
|
It's not happened since, I've gone back to outpost firewall and am keeping my eyes peeled. |
|
Back to top |
|
|
|
Posted: Today Post subject: Pocket GPS Advertising |
|
|
We see you’re using an ad-blocker. We’re fine with that and won’t stop you visiting the site.
Have you considered making a donation towards website running costs?. Or you could disable your ad-blocker for this site. We think you’ll find our adverts are not overbearing!
|
|
Back to top |
|
|
|