[ale] Strange activity on net

[Mike Harrison]

> determine what ports are being targeted.  Once I have port numbers than I
> can lookup (via google of course) what activity normally uses the port(s).
> In a lot of case I usally find windows based exploits.

You should join DShield.

http://www.dshield.org

Specifically:

http://www.dshield.org/howto.html

If you would like to help good people track
and thwart such activity.

It was a project started by Johannes Ulrich
that got the attention of Sans.org, which got
Johannes a job at Sans and Dshield became
a part of Sans and the Internet Storm Center.
Not sure where Johannes is now, but it's still a
great place to see what is going on on the 'net.