External logon attempt IP addresses

  • Thread starter Thread starter Lasher
  • Start date Start date
L

Lasher

I get a lot of attempts to log on to my win2000 server from the internet.
The event logs show the failures and the workstation names, but no IP
address. Is there a way to log the IP address of the attempt and then to
block that address?

Thanks
Lasher
 
It is best to take the approach to block access from all machines from
the internet. Sounds like you have file and print sharing enabled on your
network adapter connected to the internet. Go to http://scan.sygatetech.com/
and do a quick scan to test for basic network vulnerability from untrusted
networks. There are many excellent free firewalls available for personal use
if you do not want to put a device at the perimiter [even a low cost
e]. --- Steve

http://www.webattack.com/Freeware/security/fwfirewall.shtml
http://www.netgear.com/products/prod_details.asp?prodID=140&view=sb -- A
$75 certified SPI firewall, that can also block outbound access.
 
Back
Top