"Unusual" Port Scans from our computer - ISP shuts us down

From: Fred Marshall (fmarshallx_at_remove_the_x.acm.org)
Date: 09/05/03


Date: Thu, 4 Sep 2003 18:09:34 -0700


I have a couple of situations where a single ISP reports that "hostile" port
scans are emanating from our computer. The ISP action is to block our
internet connections.

I've not been able to determine what might be causing such behavior, whether
it truly represents a threat to the world or is an over-reaction by the ISP.
Googling for "port scans out", etc. and searching various antivirus sites
yields nothing that appears to address this issue.

Any suggestions how to resolve?

The first time I ran into this an up to date virus scan found nothing. We
were forced to rebuild the system - i.e. reinstall Windows and everything
else. That's an awfully time consuming process for a "maybe" threat.

I'm asking the ISP for an exact description of what they're seeing. This
has only happened a couple of times, always with commercial / retail
enterprises and only with just the one ISP out of 3 that are local. I think
both customers are on DSL - but doubt that it would matter of course.

Thanks,

Fred



Relevant Pages

  • Re: Current status?
    ... You would still need to know who your MTA is ... justification for allowing anybody to use port 25. ... to the problem of how to get the email system to be more immune to SPAM. ... your ISP should never allow you ...
    (comp.os.vms)
  • Re: SMTP Server for outgoing only behind a home router
    ... They cliam to ONLY block port 80 to keep me from ... you will get a 220 greeting line from the remote SMTP server: ... So AOL.COM methods stops legitimate roaming users from using ESMTP AUTH to ... So look to see of your ISP supports ESMTP AUTH for dynamic IP users and/or ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: Current status?
    ... spam will not stop because you start blocking port 25. ... I still won't use the idiots running the ISP for my mail. ...
    (comp.os.vms)
  • Re: cannot send mail from Windows mail
    ... Ask your home ISP if they support SMTP on a port other than 25. ... Server, email messages while connected to their Internet Connection. ...
    (microsoft.public.windows.vista.mail)
  • Re: Current status?
    ... I'm on Verizon FIOS at home and I know the FIOS converter box ... port 25 traffic wouldn't make it to my LAN (or single computer ... ISP, ... through a mailhub with a fixed IP address - for most people the simplest to ...
    (comp.os.vms)

Quantcast