Re: Strange logon attempts

On 14 Jun 2006 07:55:36 -0700, Matt wrote:
I have recently taken over a network. I started to audit failed logon
attempts and am finding a particular computer trying to log on as my
desktop tech once or twice a day. The attempts are coming from a
computer name that I do not recognize. When this first started
happening, I couldn't find a reference for this computer anywhere in my
network. Just yesterday, I found that it was given an IP address lease
a few days ago. What can I do to find where this PC is??

Do a trace route on it's ip address,
find the router closest to the pc,
start chasing each wire to each pc,
login and check ip address.

Other option, log into ip address, and snoop the files and
maybe you can find an
email address or something.
.

Relevant Pages

  • Password Help
    ... done by pressing 'cntl-alt-del' twice, at the login ...
    (microsoft.public.security)
  • Re: User Must Submit Twice For Data to Send
    ... > button twice. ... > control structor to initiate the log-in sequence. ... the login page has a control structor looking for the ... then the session variables sent to index.php on the second ...
    (comp.lang.php)
  • Re: How to login as the "Administrator" user from the Welcom screen?
    ... Press Ctrl + Alt + Delete twice ... > How to login as the "Administrator" user from the Welcome screen? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Strange logon attempts
    ... desktop tech once or twice a day. ... ping localhost -n 300> nul ... goto again ...
    (microsoft.public.windows.server.general)
  • Re: Administrator account problem
    ... control + alt + delete twice and another login pops up. ... Are we assuming you have Windows XP Home Edition with SP2 installed and all ...
    (microsoft.public.windowsxp.security_admin)