Sprint Broad Band

I have seen their scans on my system.

This was a full blown port scan for all
known trojans.

I am guessing you have some service running on one
of the ports and they figured you had a problem.

Too bad SBB failed to inform everyone of their
little scans.
On the other hand I am kind of glad to see
my OpenBSD firewall detect the stuff.

The Wolf

-> -----Original Message-----
-> From: Doug Winterburn [mailto:doug@winterburn.net]
-> Sent: Thursday, October 26, 2000 9:49 PM
-> To: plug-discuss@lists.PLUG.phoenix.az.us
-> Subject: RE: Sprint Broad Band
->
->
-> I just received a letter from SBB telling me "We have
-> recently learned
-> that your PC is infected with one or more viruses or Trojan Horses."
->
-> Well, since they suggested I consider a firewall, and since
-> they claim
-> to have a firewall, and since I do have a linux firewall - I
-> was rather
-> panicked! I ran around the house checking the virtual PC's
-> (vmware) and
-> any other PC's that might have had consentual contact with
-> those on my
-> network. There was nothing as described or as they intimated or that
-> showed up in all my logs/virus scanners.
->
-> So, to find out what I had missed (since they explained
-> their innocent
-> port scans which I have been seeing for a long time had found this
-> illness), I called. I asked what in particular they had found (as I
-> really wanted to know how to plug the hole) and the
-> techno-wizard that
-> answered (after 10 minutes or so) said that "it should have
-> been worded
-> differently - you don't have a virus, but it could happen". So,
-> basically, they send out spam snail mail letters to cover
-> their A** in
-> case their network might be compromised and the lawyers show up. No
-> matter that I try my best to "keep clean" - just send out
-> the bulk email
-> telling me I'm infected!
->
-> I'm still searching (for an alternative)...
->
-> -Doug
->
->
-> Date: Thu, 26 Oct 2000 16:23:10 -0700
-> To: plug-discuss@lists.PLUG.phoenix.az.us
-> From: Jim Gunkel <jimg@nevrona.com>
-> Subject: RE: Sprint Broad Band
-> orp.com>
-> Reply-To: plug-discuss@lists.PLUG.phoenix.az.us
->
-> At 16:11 10/26/2000 -0400, you wrote:
-> >You lucky I NEVER get 0% packet loss.
-> >my stats are somewere
-> >12 - 35 % packet loss
-> >although I have seen worse results.
->
-> I figured I had beaten up on them enough on the message so I
-> didn't want
-> to
-> mention that about 5% of the time that we click on a link in the
-> browser,
-> it comes back with an error message (i.e. lost packet) and we have to
-> reload to get the page again. About every 5 or 6 pings I
-> get a "request
-> timed out" error, but since Windows' brain-dead ping program
-> counts that
-> as
-> a 0ms time, it makes the Average number look better than it is so I
-> included one with all hits. This lost packet rate is
-> usually much worse
-> in
-> the late afternoons.
->
-> Jim Gunkel
-> Nevrona Designs
->
-> ________________________________________________
-> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your
-> mail doesn't post to the list quickly and you use Netscape
-> to write mail.
->
-> Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us
-> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
->