Re: Intrusion allert, any help/idea is much appreciated
- From: "Shane Mullins" <tsmullins@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 26 Apr 2002 09:14:31 -0400
MessageI was going through my alerts and this same ip came up on my system. I
am going to measures to keep this guy out of our network. I am no security
expert, but I will block this hacker from my network. I am going to deny
access at the router level to this guy. If you have any suggestions please let
me know. He must be running some massive port scans, or something, and could
only be up to no good.
Shane
----- Original Message -----
From: Eddie Kwong
To: [ISAserver.org Discussion List]
Sent: Thursday, April 25, 2002 2:02 PM
Subject: [isalist] Intrusion allert, any help/idea is much appreciated
http://www.ISAserver.org
Hi all, during the last one minute time frame, I have received more than 390
Intrusion allert message from ISA Server from
the following
'ISA Server detected an all port scan attack from Internet Protocol (IP)
address 63.210.101.141.'
What do you people do with this?
Any suggestion is appreciated.
I used to receive less than five/ten of these message a day and I presume
it is normal.
Many thanks
Eddie
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tsmullins@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
