Intrusion Attempts ?
Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance
I have a SBS2000 system and daily receive the following ISA server intrusion
notifications.
ISA Server name: ABCSERVER
ISA Server detected a well-known port scan attack from Internet Protocol
(IP) address 80.176.209.174. A well-known port is any port in the range of
1-2048. For more information about this event, see ISA Server Help.
What steps can I take if any, is this a genuine intrusion attempt or
possibly a virus infected system somewhere ?
Thanks in Advance
Gary
.
Relevant Pages
- Re: Microsoft SBS 2000 Internet Permissions Problem
... The web site logon page is access via HTTPS port 85: ... If Microsoft Internet Explorer is configured to reference a server that is ... ISA Server 2000 Standard Edition, ... (microsoft.public.windows.server.sbs) - port forwarding (rerouting) with isa server.
... I have a question about port forwarding with isa server. ... external nic connected to the router and one internal nic ... (microsoft.public.isa) - Re: Trying to understand this behavior, Ports in IIS
... That tells me the ISA server was accepting the connections. ... assign port 8080. ... In the border router and in the PIX firewall (both devices are "in front of" ... (microsoft.public.inetserver.iis.security) - Re: Adding Rules for Blackberry ES to ISA 2000 - SOLVED
... I found that their connection actually initiated a connection on port ... any lan machine to any outside host:: allow host to ... Note that in order to get outbound bes to work on an isa server (when ... (microsoft.public.isaserver) - Re: Adding Rules for Blackberry ES to ISA 2000 - SOLVED
... I found that their connection actually initiated a connection on port ... any lan machine to any outside host:: allow host to ... Note that in order to get outbound bes to work on an isa server (when ... (microsoft.public.isaserver) |
|