Re: Strange logon attempts
- From: "Pegasus \(MVP\)" <I.can@xxxxxxx>
- Date: Thu, 15 Jun 2006 10:29:09 +1000
"Matt" <matthewsatkins@xxxxxxxxx> wrote in message
news:1150296972.776493.146200@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have recently taken over a network. I started to audit failed logon
attempts and am finding a particular computer trying to log on as my
desktop tech once or twice a day. The attempts are coming from a
computer name that I do not recognize. When this first started
happening, I couldn't find a reference for this computer anywhere in my
network. Just yesterday, I found that it was given an IP address lease
a few days ago. What can I do to find where this PC is??
.. . . or even better:
@echo off
:again
ping RogueName | find /i "bytes=" > nul || goto wait
echo %date% %time:~0,5% >> c:\rogue.txt
nbtstat -a RogueName >> c:\rogue.txt
:wait
ping localhost -n 300 > nul
goto again
.
- Follow-Ups:
- Re: Strange logon attempts
- From: Matt
- Re: Strange logon attempts
- References:
- Strange logon attempts
- From: Matt
- Strange logon attempts
- Prev by Date: Re: Strange logon attempts
- Next by Date: Internet is slow through server
- Previous by thread: Re: Strange logon attempts
- Next by thread: Re: Strange logon attempts
- Index(es):
Relevant Pages
|