Port stealthed - Page 2
Page 2 of 2 FirstFirst 12
Results 11 to 16 of 16

Thread: Port stealthed

  1. #11
    Member
    Join Date
    Jan 2006
    Posts
    31
    Originally posted here by nihil
    Hmmm,

    I am confused (And I haven't even had a drink yet!)

    169.254.xxx.xxx

    Isn't that one of those "reserved addresses"................... APIPA?

    Seems odd that this software came back with anything at all?

    Another newbie question....what is a reserved address and what is APIPA?

  2. #12
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Reserved addresses are addresses that IANA, (who control IP addresses on the internet), have set aside for a specific purpose.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  3. #13
    Member
    Join Date
    Jan 2006
    Posts
    31
    Thanks...tho I'm just as confused now as when I started. I was tracing this IP because I've been getting spammed and this was the originating IP address listed. Someone else said it sounded like a "spoofed" IP address.

  4. #14
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Then the IP address is being spoofed.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  5. #15
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,192
    Hi, Thager

    and what is APIPA?
    Terribly sorry, I should have been more clear. It is Microsoft's "Automatic Private Internet Protocol Addressing" facility.

    I guess it came in with Windows 98 or maybe 98SE?

    Basically, if you cannot get an IP from your normal DHCP server, then this is created locally, to get you going. It is supposed to check for a "proper" connection every so often (5 minutes comes to mind?)

    As

    Tiger~ says, sounds like it was "spoofed"...........that is forged, counterfeited or whatever you like to call it.

    Perhaps you might like to give a few more details of your problem?

    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

  6. #16
    Senior Member Godsrock37's Avatar
    Join Date
    Jan 2005
    Location
    PA
    Posts
    121
    two things:
    1st- the program is returning stealthed most likely because the ports scanned were dropping the packets like they were supposed to for good security practice (you dont want people knowing that there is or isnt a computer attached to the ip) but there were other ports open/closed on the same ip address, so its easy to deduce it is in fact just a stealthed port (defeating the point of stealthing it)
    that was a long winded way of saying it sorry

    2nd- it may not be spoofed, it could be in fact be the ip it came from if it was compromised in some form or another, though spoofing is more likely
    if God was willing to live all out for us, why aren't we willing to live all out for Him? God bless,
    Godsrock37
    my home my forum

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides