Re: Intrusion Attempts ?
- From: "Matt Gibson" <mattg@xxxxxxxxxxxxxxx>
- Date: Fri, 1 Jul 2005 10:04:14 -0700
Look in your ISA IP logs.
c:\program files\Microsoft ISA Server\ISALogs (if memory serves)
Matt Gibson - GSEC
"Gary D" <gary@xxxxxxxxxxxxxxxx> wrote in message
news:eLy3mkkfFHA.3940@xxxxxxxxxxxxxxxxxxxxxxx
>I have a SBS2000 system and daily receive the following ISA server
>intrusion notifications.
>
> ISA Server name: ABCSERVER
> ISA Server detected a well-known port scan attack from Internet Protocol
> (IP) address 80.176.209.174. A well-known port is any port in the range of
> 1-2048. For more information about this event, see ISA Server Help.
>
> What steps can I take if any, is this a genuine intrusion attempt or
> possibly a virus infected system somewhere ?
>
> Thanks in Advance
>
> Gary
>
>
.
- References:
- Intrusion Attempts ?
- From: Gary D
- Intrusion Attempts ?
- Prev by Date: SBS 2003 unable to logon - Username and Password greyed out
- Next by Date: Re: Server Freezes
- Previous by thread: Intrusion Attempts ?
- Next by thread: Re: Intrusion Attempts ?
- Index(es):
Relevant Pages
|
