Port scan from Tomtom

ashleyw · Occasional Visitor Joined: Nov 18, 2003 Posts: 21

Not sure what is happening but over the last few days, my firewall has detected a few port scans from an ip which turns out to be the tomtom website. Each time it happens I have been on the website about an hour earlier.

Anyone else had this?

Ashley.

Privateer · Posted: Wed Apr 07, 2004 10:35 am Post subject:

Hi Ashley,

That’s very strange! I use ZoneAlarm Pro at home, but I’ve switched off notification of possible hacks. Next time I’m at home I’ll reactivate that setting and then visit the TomTom website to see what happens!

Is there any specific area of the TomTom website that you used, e.g. the support pages?

Regards,
_________________
Robert.
iPhone 6s Plus, iOS 14.0.1: iOS CamerAlert v2.0.7
TomTom GO Mobile iOS 2.3.1; TomTom (UK & ROI and Europe) iOS apps v1.29
Garmin Camper 770 LMT-D

ashleyw · Occasional Visitor Joined: Nov 18, 2003 Posts: 21

Pretty much all over the site. I'll give it another go.

Justin-case · Posted: Thu Apr 08, 2004 10:03 pm Post subject:

Ashleyw do you by any chance use norton 2004?

if so in settings you can set norton up to ban there IP addy for an hour
its not ideal but nice to let them know you know.

Randon pinging is common but to physically scan your computer for open ports is some what naughty, i would consider fireing up IP Tools and have a look back.

To check the ip addy just type it in your browser and hit go this will bypass the dns server and take you straight to the culprit if it is indeed TT.

JC

ashleyw · Occasional Visitor Joined: Nov 18, 2003 Posts: 21

I was using outpost firewall, I've changed to Zonealarm and it hasn't happened since. The IP address was definately for the tomtom site. Very strange.

Dodgy · Occasional Visitor Joined: Mar 04, 2004 Posts: 31

But you haven't said what ports they were scanning, this could just be normal 'background radiation'! Take a look at your logs, it wasn't port 113 they were scanning was it?

Dave.

Dave · Posted: Fri Apr 09, 2004 2:19 pm Post subject:

Not wishing to jump in and defend TomTom as I'll probably get leached by others, but I am Security GIAC Certified, I visit TomTom's website on a daily basis and have seen no port attacks, spoofs, and I've interrogated my firewall logs. I think the firewall software you were using was just being a little over cautious and sending spurious alerts and alarm bells ringing when it wasn't actually a port scan.

ashleyw · Occasional Visitor Joined: Nov 18, 2003 Posts: 21

It's not happened since, I've gone back to outpost firewall and am keeping my eyes peeled.

	PocketGPS
	Web