Preserved Topic: NT server (Page 1 of 1)

Not sure where to ask this.

I have a windows nt 4.0 server...and on my event log I have many login failures. These are occuring from a computer outside of our network (someone on the net is trying to break in)...is there any way to get the IP address from the logs? Or am I going to have to find other means of acquiring the address?

I'm pretty convinced the Event log wasnt going to have the IP.
Damn intrusion detection software was off, so this is a lame backup.

Dark


[This message has been edited by Dark (edited 05-13-2002).]

By default, log files are being stored in C:\WINNT\system32\LogFiles\W3SVC1 (or something similar).

Sasha »