Cable Forum - View Single Post

iadom · 05-04-2005, 11:32

I have just received an e-mail from Ntl & Virgin net AUP telling me that they have received a report of internet abuse from me. Case Reference C114949
Windows is always fully patched. XP firewall disabled.
I use Authentium AV set to scan daily, it also auto updates its deffiles, sometimes two or three times each day.
I have ZA Pro, Pest Patrol ( paid for ) AdAware, Spybot, MS beta AntiSpyeware, SpyewareBlaster and also Prevx Home installed. I use these to scan my system on a regular basis.
The only thing found recently was a 'Web Trends' item in Spybot.
All other scans are clean.
I also use an utility called VisualZone which is an add on for ZoneAlarm, it gives much more info. It has a facility called 'Backtrace' which can be used for tracing scan attempts. I have this disabled and only ever use it on very rare occasions when a single IP shows up in my firewall logs many times. Could this be construed as a 'port scan'. It would be ironic if I have been reported by an individual who actually does have an infected PC.
I don't often send in abuse reports, only when I see long term hits from the same source, yesterday I reported an Ntl IP , from stretford/baguley that had scanned port 135 on 71 occasions in the past 10 days, ( suspect Blaster infection).
Could it be that AUP have recieved my report and sent me the abuse notification in error.
I had the previous IP ever since I went on BB over three years ago, this only changed a couple of weeks ago when I had a Samsung STB and a 2meg upgrade.
Since then I have noticed a huge increase in firewall activity, mainly ports, 135,139,445 & the 1026 to 9 range.

I believe there is an AUP team member on the forum, if you read this could you please contact me.

05-04-2005, 11:32	#1
iadom Oh Lanky Lanky. Join Date: Jun 2003 Location: Shaw, Oldham, Lancashire. Services: 2 TV 360 boxes. 500mb BB, Phone line. Posts: 8,040	Who's been a naughty boy??? I have just received an e-mail from Ntl & Virgin net AUP telling me that they have received a report of internet abuse from me. Case Reference C114949 Windows is always fully patched. XP firewall disabled. I use Authentium AV set to scan daily, it also auto updates its deffiles, sometimes two or three times each day. I have ZA Pro, Pest Patrol ( paid for ) AdAware, Spybot, MS beta AntiSpyeware, SpyewareBlaster and also Prevx Home installed. I use these to scan my system on a regular basis. The only thing found recently was a 'Web Trends' item in Spybot. All other scans are clean. I also use an utility called VisualZone which is an add on for ZoneAlarm, it gives much more info. It has a facility called 'Backtrace' which can be used for tracing scan attempts. I have this disabled and only ever use it on very rare occasions when a single IP shows up in my firewall logs many times. Could this be construed as a 'port scan'. It would be ironic if I have been reported by an individual who actually does have an infected PC. I don't often send in abuse reports, only when I see long term hits from the same source, yesterday I reported an Ntl IP , from stretford/baguley that had scanned port 135 on 71 occasions in the past 10 days, ( suspect Blaster infection). Could it be that AUP have recieved my report and sent me the abuse notification in error. I had the previous IP ever since I went on BB over three years ago, this only changed a couple of weeks ago when I had a Samsung STB and a 2meg upgrade. Since then I have noticed a huge increase in firewall activity, mainly ports, 135,139,445 & the 1026 to 9 range. I believe there is an AUP team member on the forum, if you read this could you please contact me.