ISA Server alert: An intrusion was attempted by an external user.

From: HelpPls (smd6169_at_hotmail.com)
Date: 01/19/05

  • Next message: Carlos: "Windows Media and Real Player streaming could not work due to Kerboros authentication"
    Date: Wed, 19 Jan 2005 16:54:38 -0500
    
    

    I keep receiving this alert. Is this a scan actually done from within the
    network or
    really from someone on the outside? Anyway to see who this REALLY is?

    ISA Server name: ISA200SERVER

    ISA Server detected a well-known port scan attack from Internet Protocol
    (IP) address 127.0.0.1. A well-known port is any port in the range of
    1-2048. For more information about this event, see ISA Server Help.

    Thanks - Sean


  • Next message: Carlos: "Windows Media and Real Player streaming could not work due to Kerboros authentication"

    Relevant Pages

    • Re: Witch rule to allow firewal client to connect to isa server ?
      ... -) logs records look like this: ... Destination port: 1745 ... > Which subnets does your ISA server interfaces belongs to? ... >>> network' checkbox at particular network properties. ...
      (microsoft.public.isa)
    • Re: Witch rule to allow firewal client to connect to isa server ?
      ... -) logs records look like this: ... Destination port: 1745 ... > Which subnets does your ISA server interfaces belongs to? ... >>> network' checkbox at particular network properties. ...
      (microsoft.public.isa)
    • Re: What is the best way to administering two separate forests?
      ... So we need to get into their network and do things comfortably. ... > administration or installing Admipak on that computer to administer the ... > require configuration on their end to allow port 3389 access to the proper ... >> outside IPs of our ISA Server and their ISA Server will be in the same ...
      (microsoft.public.win2000.networking)
    • Re: Am i OK? Getting a LOT of alerts from my router about LAND!!!
      ... I neglected to add that my wife was using bit torrent, which uses mainly port 6881. ... I have since opened port 6881 & the problem has stopped, no more router alerts! ... or perhaps just your Internet Service Provider doing routine network maintenance. ... Save this email for comparison with future alert messages. ...
      (comp.security.firewalls)
    • Re: Block Port 4444
      ... Is this with regards to the Blaster Worm which can use port 4444. ... doc from MS on protecting your network and ISA server from blaster. ...
      (microsoft.public.isa.configuration)

    Loading