Use a firewall to log incoming activity. I use Winroute Pro at home, and ISA Server at work (total overkill for a home PC). > -----Original Message----- > From: Ray at home [mailto:listray@xxxxxxxxxx]=20 > Sent: Tuesday 07 January 2003 04:12 > To: windows2000@xxxxxxxxxxxxx > Subject: [windows2000] Who's trying to get on my server? >=20 >=20 >=20 > Hi list, >=20 > I have a W2K server sitting out on the Internet, and I have=20 > logging turned on and what not. I see a whole bunch of=20 > failed logon attempts today for users like Guest,=20 > Administrator, IUSR_[SERVERNAME], database, root, etc.. =20 > Someone's trying to get onto my server, apparently. The=20 > event in the error log just says that the failed logon=20 > attempt came from workstation \\whatever, which means nothing=20 > to me. Is there any way that I can log the IP addresses that=20 > these failed logon attempts are coming from so that I can=20 > hack onto their computers and put viruses on them? >=20 > Thanks a lot, >=20 > Ray at home >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D > To Unsubscribe, set digest or vacation > mode or view archives use the below link. >=20 http://thethin.net/win2000list.cfm ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm