TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Need to clarify that the script establishes an HTTP connection to the web server from sequential port number......therefore tying up the ports on the server. > -----Original Message----- > From: Lecompte, Johanne L > Sent: June 20, 2002 11:56 AM > To: [EMAIL PROTECTED] > Subject: port probes > > Hi > > One of my web servers is being hit with a script of some kind probing all > ports in a sequential manner over a short period of time. This action is > grabbing CPU cycle and therefore slowing down the web server's response > for general public. > Using ISS 6.x version is there a way for me to block such actions from > either an existing signature or a connection/user defined signature? > Is there a way to look for such activity and based on a time frame send an > alert to the administrators of ISS???? > > Anyone's past experience with such attacks would be appreciated. > > Thanks > > Johanne L. Lecompte > EDS - OSDC - NSD > > * mailto:[EMAIL PROTECTED] > > >
