[windows2000] Re: Who's trying to get on my server?

  • From: "Chris McEvoy" <chris@xxxxxxxxxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Tue, 7 Jan 2003 16:27:08 -0000

Use a firewall to log incoming activity.  I use Winroute Pro at home,
and ISA Server at work (total overkill for a home PC).

> -----Original Message-----
> From: Ray at home [mailto:listray@xxxxxxxxxx]=20
> Sent: Tuesday 07 January 2003 04:12
> To: windows2000@xxxxxxxxxxxxx
> Subject: [windows2000] Who's trying to get on my server?
>=20
>=20
>=20
> Hi list,
>=20
> I have a W2K server sitting out on the Internet, and I have=20
> logging turned on and what not.  I see a whole bunch of=20
> failed logon attempts today for users like Guest,=20
> Administrator, IUSR_[SERVERNAME], database, root, etc.. =20
> Someone's trying to get onto my server, apparently.  The=20
> event in the error log just says that the failed logon=20
> attempt came from workstation \\whatever, which means nothing=20
> to me.  Is there any way that I can log the IP addresses that=20
> these failed logon attempts are coming from so that I can=20
> hack onto their computers and put viruses on them?
>=20
> Thanks a lot,
>=20
> Ray at home
>=20
>=20
> =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
>=20
http://thethin.net/win2000list.cfm

==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: