Solved

terminal server attack from specific IP addresses

Posted on 2013-01-23
1
626 Views
Last Modified: 2013-01-25
We have a Sonicwall for firewall and win 2k3 and win 2k8 terminal servers.

Someone is trying to access our terminal servers  using the "admin" user name along with other user names.  So far access has been denied but I know the specific IP addresses that are trying to attack us....Is there anything I can do to block these particular IP Addresses?

Also, the ports that are being used to try to gain access are different every time.
Any and all advice/help would be greatly appreciated!
0
Comment
Question by:Lamrski
1 Comment
 
LVL 39

Accepted Solution

by:
als315 earned 500 total points
ID: 38810939
You can add blocking rule for this IP address. Sample you can find here:
https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=5973

You can also determine ISP, where this address is:
http://whois.domaintools.com/
and write a letter to ISP's contact address, descrbing situation.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Determine if SQL is installed in Server 2008 R2 4 77
Is my window10 Safe? after a malware removed by AV? 5 47
fb messenger security and privacy 15 56
PCI compliance 16 30
As technology users and professionals, we’re always learning. Our universal interest in advancing our knowledge of the trade is unmatched by most industries. It’s a curiosity that makes sense, given the climate of change. Within that, there lies a…
Data breaches are on the rise, and companies are preparing by boosting their cybersecurity budgets. According to the Cybersecurity Market Report (http://www.cybersecurityventures.com/cybersecurity-market-report), worldwide spending on cybersecurity …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question