RE: Being Attacked...HELPED

  • From: "Steve Moffat" <steve@xxxxxxxxxx>
  • To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 5 May 2005 13:55:31 -0300

How many pc's in your lan?

Shut them all down and start them up one by one.

S 

-----Original Message-----
From: Scott [mailto:scott.clarke@xxxxxxxxxxxx] 
Sent: Thursday, May 05, 2005 1:52 PM
To: ISA Mailing List
Subject: [isalist] Being Attacked...HELPED

http://www.ISAserver.org

I am seeing a lot of Trinoo, HTTP, and HTTP Cross Site scripting
attacks. 
Both Trinoo and HTTP are coming from internal user machines and Cross
site coming from 0.0.0.0

This only started happening recently...HELP!!!

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

The correct technical term for haggis stalking is "havering". 



Other related posts: