TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

Hi

One of my web servers is being hit with a script of some kind probing all
ports in a sequential manner over a short period of time. This action is
grabbing CPU cycle and therefore slowing down the web server's response for
general public.
Using ISS 6.x version is there a way for me to block such actions from
either an existing signature or a connection/user defined signature?
Is there a way to look for such activity and based on a time frame send an
alert to the administrators of ISS????

Anyone's past experience with such attacks would be appreciated.

Thanks

Johanne L. Lecompte
EDS - OSDC - NSD

* mailto:[EMAIL PROTECTED]





Reply via email to