Login or Sign Up
 
 
 
 
 
 
 
 
 
 
 
 
 
Forums in Geneva > Geneva > NMap Null Scan?????!!!!!!!!!!!!
 
Only members can see photos
Only members can see names and photos
NMap Null Scan?????!!!!!!!!!!!!

my Norton is constantly flashing a message about this, that somebody is trying to attack my computer by using the NMap Null Scan...


 attacking computer: www.glocals.com (62.128.52.191,80)



destination address: My comp!! Address is not important!


source address: 62.128.52.191 (62.128.52.191)


 


What the hell is that???


The text you are quoting:

my Norton is constantly flashing a message about this, that somebody is trying to attack my computer by using the NMap Null Scan...


 attacking computer: www.glocals.com (62.128.52.191,80)



destination address: My comp!! Address is not important!


source address: 62.128.52.191 (62.128.52.191)


 


What the hell is that???



MerikeNov 22, 2009 @ 00:26
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
 
6 Replies | 1659 Views      |  Send to friend
 
Only members can see photos
Only members can see names and photos
Re: NMap Null Scan?????!!!!!!!!!!!!
Post 1

General Information
Hostname: mepo.spd.co.il
ISP: Golden Lines Cable
Organization: Golden Lines Cable
Proxy: None detected
Type: Cable/DSL

 


Geo-Location Information


Country: Israel
State/Region: 05
City: Tel Aviv
Latitude: 32.0667
Longitude: 34.7667


 


that is intresting!!


The text you are quoting:

General Information
Hostname: mepo.spd.co.il
ISP: Golden Lines Cable
Organization: Golden Lines Cable
Proxy: None detected
Type: Cable/DSL

 


Geo-Location Information


Country: Israel
State/Region: 05
City: Tel Aviv
Latitude: 32.0667
Longitude: 34.7667


 


that is intresting!!



Merike, Nov 22, 2009 @ 00:42
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
Only members can see photos
Only members can see names and photos
Re: NMap Null Scan?????!!!!!!!!!!!!
Post 2

The website (glocals) is hosted in Israel.


Though, because their ISP seems to have gained a peering with the Swiss Internet Exchange sometime recently, hop-induced latency-problems noticed on launch of the new site should no longer exist.


Anyway - does Norton say what exactly glocals.com was trying to do to your computer?


 


Regards,


Rainer

The text you are quoting:

The website (glocals) is hosted in Israel.


Though, because their ISP seems to have gained a peering with the Swiss Internet Exchange sometime recently, hop-induced latency-problems noticed on launch of the new site should no longer exist.


Anyway - does Norton say what exactly glocals.com was trying to do to your computer?


 


Regards,


Rainer


rainer_d, Nov 22, 2009 @ 00:59
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
Only members can see photos
Only members can see names and photos
Re: NMap Null Scan?????!!!!!!!!!!!!
Post 3

The website (glocals) is hosted in Israel.

Though, because their ISP seems to have gained a peering with the Swiss Internet Exchange sometime recently, hop-induced latency-problems noticed on launch of the new site should no longer exist.

Anyway - does Norton say what exactly glocals.com was trying to do to your computer?

 

Regards,

Rainer


Nov 22, 09 00:59

No, it did not say i thing:(

The text you are quoting:

No, it did not say i thing:(


Merike, Nov 22, 2009 @ 01:06
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
Only members can see photos
Only members can see names and photos
Re: NMap Null Scan?????!!!!!!!!!!!!
Post 4

Hm.


I use Mac OS X or Linux/Unix, so I have little expertise with this stuff.


On http://linkscanner.explabs.com/linkscanner/default.aspx


you can do a check and it also says "1 Threat" - but doesn't go into specifics.


http://www.google.com/safebrowsing/diagnostic?site=www.glocals.com


Also says there is nothing.


http://www.unmaskparasites.com/security-report/


Lists the external JavaScript references - my guess would be that this is the cause for the warning you get.


http://zeltser.com/fighting-malicious-software/lookup-malicious-websites.html


list some more sites/tools.


 


Rainer

The text you are quoting:

Hm.


I use Mac OS X or Linux/Unix, so I have little expertise with this stuff.


On http://linkscanner.explabs.com/linkscanner/default.aspx


you can do a check and it also says "1 Threat" - but doesn't go into specifics.


http://www.google.com/safebrowsing/diagnostic?site=www.glocals.com


Also says there is nothing.


http://www.unmaskparasites.com/security-report/


Lists the external JavaScript references - my guess would be that this is the cause for the warning you get.


http://zeltser.com/fighting-malicious-software/lookup-malicious-websites.html


list some more sites/tools.


 


Rainer


rainer_d, Nov 22, 2009 @ 01:11
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
Only members can see photos
Only members can see names and photos
Re: NMap Null Scan?????!!!!!!!!!!!!
Post 5

Ah, I just read the heading correctly.


Sorry for the noise.


A null scan is a special kind of portscan.


I will fail to explain the specifics in this posting without going into a very detailed explanation of portscanners, the TCP/IP protocol and various other subjects (which are not very interesting for people who don't know much about this stuff anyway).


As an "exercise for the interested student", you can try the nmap-manpage here:


http://nmap.org/book/man-port-scanning-techniques.html


and then work your way through various google searches and wikipedia-visits.


In short, it must be a false-positive.


Maybe you can configure Norton to stop reporting portscans to you completely?


 


 


Regards,


Rainer

The text you are quoting:

Ah, I just read the heading correctly.


Sorry for the noise.


A null scan is a special kind of portscan.


I will fail to explain the specifics in this posting without going into a very detailed explanation of portscanners, the TCP/IP protocol and various other subjects (which are not very interesting for people who don't know much about this stuff anyway).


As an "exercise for the interested student", you can try the nmap-manpage here:


http://nmap.org/book/man-port-scanning-techniques.html


and then work your way through various google searches and wikipedia-visits.


In short, it must be a false-positive.


Maybe you can configure Norton to stop reporting portscans to you completely?


 


 


Regards,


Rainer


rainer_d, Nov 22, 2009 @ 01:34
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
Only members can see photos
Only members can see names and photos
Re: NMap Null Scan?????!!!!!!!!!!!!
Post 6

Rainer, thanx a lot!!!!Wink

The text you are quoting:

Rainer, thanx a lot!!!!Wink


Merike, Nov 22, 2009 @ 08:41
Your Reply:
Reply  Reply With Quote  Thank Poster
! Report to Admin
6 Replies | 1659 Views      |  Send to friend
 
 
 
Feedback Form