RE: How to find the IP of someone trying to Breakin?

From: Desmond Lee (mcp_at_donotspamplease.mars)
Date: 01/31/05


Date: Sun, 30 Jan 2005 18:53:03 -0800

Consider investing in a good Personal Firewall on your W2k machine (Sygate,
Tiny, Kerio, Symantec, etc.). Unsolicited incoming traffic will be blocked,
logged and a prompt usually will appear alerting you to that effect. Most
logs will give you extensive info about such attempts, though one has to be
aware that IP addresses can easily be spoofed.

Do let us know if this helps. Thanks!

"josh82443" wrote:

> Hi I'm working with Windows 2000 Server with SP4. My problems is that someone
> is trying to loggin to my account. when looking in the event Security log I
> find the Name that they are trying to use to loggin and the work station
> name. But nothing that really helps me out. Since the user is trying to gain
> access from the outside. what I need is some helpful information like IP
> address of the person trying to loggin, How they are trying to loggin. That
> kind of information. If I had the IP address I could block them at the router.
>
> Thank you for your Time & Help
> Josh