Port stealthed

[Thager]

Originally posted here by nihil
Hmmm,

I am confused (And I haven't even had a drink yet!)

169.254.xxx.xxx

Isn't that one of those "reserved addresses"................... APIPA?

Seems odd that this software came back with anything at all?

Another newbie question....what is a reserved address and what is APIPA?

[Tiger Shark]

Reserved addresses are addresses that IANA, (who control IP addresses on the internet), have set aside for a specific purpose.

[Thager]

Thanks...tho I'm just as confused now as when I started. I was tracing this IP because I've been getting spammed and this was the originating IP address listed. Someone else said it sounded like a "spoofed" IP address.

[Tiger Shark]

Then the IP address is being spoofed.

[nihil]

Hi, Thager

and what is APIPA?

Terribly sorry, I should have been more clear. It is Microsoft's "Automatic Private Internet Protocol Addressing" facility.

I guess it came in with Windows 98 or maybe 98SE?

Basically, if you cannot get an IP from your normal DHCP server, then this is created locally, to get you going. It is supposed to check for a "proper" connection every so often (5 minutes comes to mind?)

As

Tiger~ says, sounds like it was "spoofed"...........that is forged, counterfeited or whatever you like to call it.

Perhaps you might like to give a few more details of your problem?

[Godsrock37]

two things:
1st- the program is returning stealthed most likely because the ports scanned were dropping the packets like they were supposed to for good security practice (you dont want people knowing that there is or isnt a computer attached to the ip) but there were other ports open/closed on the same ip address, so its easy to deduce it is in fact just a stealthed port (defeating the point of stealthing it)
that was a long winded way of saying it sorry

2nd- it may not be spoofed, it could be in fact be the ip it came from if it was compromised in some form or another, though spoofing is more likely