Re: intruder

From: asdf0987z@yahoo.com
Date: 01/15/03 

From: asdf0987z@yahoo.com (asdf0987z@yahoo.com)
Date: 15 Jan 2003 12:49:00 -0800

Running DHCP? Look in the DHCP logs.

Bill

jcochran.nospam@naplesgov.com (Jeff Cochran) wrote in message news:<3e2b5eca.1285852838@news.easynews.com>...
> >I have a problem with an intruder. I found in Event viewer:
> >User Account Locked Out:
> >> > Target Account Name: Valentin
> >> > Target Account ID:
> >> > %{S-1-5-21-1343024091-1935655697-1060284298-1006}
> Caller Machine
> >> > Name: AMDK7
> >> > Caller User Name: SERV$
> >> > Caller Domain: SERV
> >> > Caller Logon ID: (0x0,0x3E7)
> >This guy tries often to enter in our network. How can I
> >find his IP address ?
>
> Firewall logs...?
>
> Jeff