What is the IP address?

  • Thread starter Thread starter Ian
  • Start date Start date
I

Ian

In Security Log of Event Viewer, there are some records
indicating that someone trying to break in the network.
How to find out what is the IP address? Thanks.

Logon Failure:
Reason: Unknown user name or bad password
User Name: abc
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package:
MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: XYZ
 
You would need to correlate your firewall logs [or turn them on] by time with the
failed logon attempts in your security log. I would be sure to check your firewall
configuration to see where they are getting access and that you do not have any ports
open that should not be. There are free online self scan sites that can help such as
http://scan.sygatetech.com/ . --- Steve
 
Back
Top