• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Intrusion Detected from DC IP

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Misc.] >> ISA Server 2004 Events >> Intrusion Detected from DC IP Page: [1]
Login
Message << Older Topic   Newer Topic >>
Intrusion Detected from DC IP - 23.May2008 2:57:05 AM   
iceboy

 

Posts: 4
Joined: 19.Feb.2008
Status: offline
Hello 

I  am  recieving port  scan  alert  from  Domain  Controller  .

" ISA Server detected an all port scan attack from Internet Protocol (IP) address 192.168.0.2 "


How can  solve ths  problem   ?


Thanks

Post #: 1
RE: Intrusion Detected from DC IP - 27.May2008 8:48:34 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Take a look at the ISA firewall's log files and try to identify the traffic.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to iceboy)
Post #: 2
RE: Intrusion Detected from DC IP - 2.Jun.2008 2:19:05 PM   
HePa

 

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline
I would also recomend you to take a look at the domain controller sending all the alerts! Look through the event viewer and run a scan with your AV, maby it find something that you don't.If your DC has been attacked, hacked etc. it's not funny ay all so take a look at it as soon as possible. Remember that all the password hashes are stored at your domain controller, and if someone gets those they can do what ever they want in your domian. Perhaps this anit a intrusion.

_____________________________

HePa

(in reply to tshinder)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Misc.] >> ISA Server 2004 Events >> Intrusion Detected from DC IP Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts