This is a multi-part message in MIME format.
------=_NextPart_000_0009_01C3A2C6.A1351220
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_000A_01C3A2C6.A1375C10"
------=_NextPart_001_000A_01C3A2C6.A1375C10
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
BlankI found the following warning in my Event Viewer today:
Event Type: Warning
Event Source: Microsoft ISA Server Control
Event Category: Packet filter
Event ID: 15104
Date: 04/11/2003
Time: 00:51:37
User: N/A
Computer: SERVER
Description:
ISA Server detected a well-known port scan attack from Internet =
Protocol (IP) address 66.220.17.151. A well-known port is any port in =
the range of 1-2048. For more information about this event, see ISA =
Server Help.=20
Data:
0000: 1f 00 00 00 .... =20
I went through the ISA Server Help but could not follow the steps for =
blocking the IP address. I shall appreciate if someone can guide me how =
to block this IP Address.=20
Rajiv Khandelwal
------------------------------------
www.vardaan.net
------=_NextPart_001_000A_01C3A2C6.A1375C10
Content-Type: text/html;
charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE id=3DridTitle>Blank</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1252"><BASE=20
href=3D"file://C:\Program Files\Common Files\Microsoft =
Shared\Stationery\">
<STYLE>BODY {
MARGIN-TOP: 25px; FONT-SIZE: 10pt; MARGIN-LEFT: 25px; COLOR: #000000; =
FONT-FAMILY: Arial, Helvetica
}
P.msoNormal {
MARGIN-TOP: 0px; FONT-SIZE: 10pt; MARGIN-LEFT: 0px; COLOR: #ffffcc; =
FONT-FAMILY: Helvetica, "Times New Roman"
}
LI.msoNormal {
MARGIN-TOP: 0px; FONT-SIZE: 10pt; MARGIN-LEFT: 0px; COLOR: #ffffcc; =
FONT-FAMILY: Helvetica, "Times New Roman"
}
</STYLE>
<META content=3D"MSHTML 6.00.2800.1264" name=3DGENERATOR></HEAD>
<BODY id=3DridBody bgColor=3D#ffffff=20
background=3Dcid:000401c3a298$877a6520$0b10a8c0@Domain.com>
<DIV>I found the following warning in my Event Viewer today:</DIV>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
<DIV>Event Type: Warning<BR>Event Source: Microsoft ISA =
Server=20
Control<BR>Event Category: Packet filter<BR>Event=20
=
ID: 15104<BR>Date: 04/11/2003<BR>Time: 00:51:3=
7<BR>User: N/A<BR>Computer: SERVER<BR>Description:<BR>ISA=
=20
Server detected a well-known port scan attack from Internet Protocol =
(IP)=20
address 66.220.17.151. A well-known port is any port in the range of =
1-2048.=20
For more information about this event, see ISA Server Help. =
<BR>Data:<BR>0000:=20
1f 00 00=20
=
00  =
; =20
.... </DIV></BLOCKQUOTE>
<DIV dir=3Dltr>I went through the ISA Server Help but could not follow =
the steps=20
for blocking the IP address. I shall appreciate if someone can guide me =
how to=20
block this IP Address. <BR><BR>Rajiv Khandelwal</DIV>
<DIV dir=3Dltr>------------------------------------<BR><A=20
href=3D"http://www.vardaan.net">www.vardaan.net</A></DIV>
<P> </P></BODY></HTML>
------=_NextPart_001_000A_01C3A2C6.A1375C10--
------=_NextPart_000_0009_01C3A2C6.A1351220
Content-Type: image/gif;
name="Blank Bkgrd.gif"
Content-Transfer-Encoding: base64
Content-ID: <000401c3a298$877a6520$0b10a8c0@Domain.com>
R0lGODlhLQAtAID/AP////f39ywAAAAALQAtAEACcAxup8vtvxKQsFon6d02898pGkgiYoCm6sq2
7iqWcmzOsmeXeA7uPJd5CYdD2g9oPF58ygqz+XhCG9JpJGmlYrPXGlfr/Yo/VW45e7amp2tou/lW
xo/zX513z+Vt+1n/tiX2pxP4NUhy2FM4xtjIUQAAOw==
------=_NextPart_000_0009_01C3A2C6.A1351220--