Tracing IP's of hacker using DCOM

  • Thread starter Thread starter Alan
  • Start date Start date
A

Alan

I want to know if there is a good way to track the IP
address of someone trying to remotely get into an XP
workstation? The logs show that there was some suspicious
activity on a system and I want to try and track where it
came from. Thanks for any help!!

Regards,
Alan
 
Most 'attacks' are just port scans.. tracking IP addresses does not always
lead to the person 'hacking', in fact, vary rarely.. reports just pile up
somewhere.. forget it and get on with your computing..
 
There sure is, but you have to enable auditing
Alan said:
I want to know if there is a good way to track the IP
address of someone trying to remotely get into an XP
workstation? The logs show that there was some suspicious
activity on a system and I want to try and track where it
came from. Thanks for any help!!

Regards,
Alan
Click to expand...

Alan-

HOW TO: Enable Local Security Auditing in Windows 2000
http://support.microsoft.com/default.aspx?scid=kb;en-us;248260

The same instructions work for Windows XP also. Follow the instructions and
you will have record of any computer that attempts to connect to yoru
computer, in the Event Viewer security logs.

Good Luck!
PS
 
Back
Top