ISA Server detected an all port scan attack from Internet Protocol (IP) address xx.xx.xx.xx?

  • From: "Bentley, Todd" <bentley@xxxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 26 Feb 2002 09:41:12 -0500

it seems my isa server is doing its job detecting and blocking these scans, but 
now what?  Is there someway I can let this address know we are on to him.  Is 
there a watch dog service I could report it to.  Any suggestions on what I can 
do beyond discarding the attack?

Thanx in advance

Todd L. Bentley
MCSE
Rupert Technologies



Other related posts: