Hackers

[cfreyman]

It seems we are having a problem with a person/program that is trying to gain access to our network. I checked the security log and there were about 50 repeated failed login attempts....is there anything i can do to investigate who is doing this? when i go to the details of the message in the log....it tells me it is a computer that is not on our network (never heard of it) and the username is Administrator....any help??

 

[Davey7549]

cfreyman
Here is a program that claims it can backtrack to source however I have not had any experience with it. It is trialware for download so it may be of assistance and worth a try.
Neo Watch
http://www.neoworx.com/products/neowatch/default.asp
Dave

 

[PC_DISK1]

Are you using NT, or 2000? In NT you can go to server manager and see if that computer is regestered with your server. But wait, if they are using a non NT system it probably wont show up.
GoodLuck

 

[cfreyman]

i checked the wins, server mgr, and the dchp dbase...there is no record of that computer.....the name of the computer cant be pinged...im just wondering if there is some log or somthing that records who attempts to enter a network password etc...

thanks for the software...ill give it a go