[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 649
  • Last Modified:

terminal server attack from specific IP addresses

We have a Sonicwall for firewall and win 2k3 and win 2k8 terminal servers.

Someone is trying to access our terminal servers  using the "admin" user name along with other user names.  So far access has been denied but I know the specific IP addresses that are trying to attack us....Is there anything I can do to block these particular IP Addresses?

Also, the ports that are being used to try to gain access are different every time.
Any and all advice/help would be greatly appreciated!
0
Lamrski
Asked:
Lamrski
1 Solution
 
als315Commented:
You can add blocking rule for this IP address. Sample you can find here:
https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=5973

You can also determine ISP, where this address is:
http://whois.domaintools.com/
and write a letter to ISP's contact address, descrbing situation.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now