RE: Intrusion Alerts
- From: "Becker1" <becker1@xxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 27 Nov 2001 10:57:00 -0800
Thanks for the reply
Examples of the ports being scanned : 53501 - 57000
Sample Offender: 204.178.240.151,152,202,205 or 207.25.71.207,227,212
As far as internal websites being published, just OWA
John
----- Original Message ----- > You can sometimes see these attacks if your
internal users are listening to
> streaming media (RealPlayer, Windows Media Player).
>
> Why your external DNS Servers appear, not sure. Do you have any published
> Web sites that your internal users visit?
>
> Jason
Other related posts: