Dev Shed Lounge
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsOtherDev Shed Lounge

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old June 11th, 2003, 01:33 PM
Stink Sleeve's Avatar
Stink Sleeve Stink Sleeve is offline
Contributing User
Dev Shed Novice (500 - 999 posts)
 
Join Date: Mar 2003
Location: New Hampshire, USA
Posts: 550 Stink Sleeve User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 11 h 17 m 26 sec
Reputation Power: 6
Proof of connection attempts to Terminal Server?

Is there any where on the server that logs the IP addreses of
connection attempts to Terminal Server?

In my event viewer are connection attempts and the only way
I know it was one particular person is because it attempted to
bridge his printers and I know that they are his because of the
names of the printers. I want to bust this guy. He is an ISP owner
attempting unauthorized access....

Any help is appreciated, perhaps some other proof?

Windows 2000 Server sp3, Running terminal server.
__________________
Download Mozilla Firefox Now!

Reply With Quote
  #2  
Old June 11th, 2003, 02:05 PM
bcyde's Avatar
bcyde bcyde is offline
Me likey breadsticks...
Dev Shed Beginner (1000 - 1499 posts)
 
Join Date: Jan 2003
Location: Los Angeles
Posts: 1,189 bcyde User rank is Sergeant (500 - 2000 Reputation Level)bcyde User rank is Sergeant (500 - 2000 Reputation Level)bcyde User rank is Sergeant (500 - 2000 Reputation Level)bcyde User rank is Sergeant (500 - 2000 Reputation Level)bcyde User rank is Sergeant (500 - 2000 Reputation Level) 
Time spent in forums: 3 Days 1 h 12 m 58 sec
Reputation Power: 12
Send a message via AIM to bcyde Send a message via Yahoo to bcyde
Sorry I don't have any specific info

Judging from this article, though, it is possible:

http://support.microsoft.com/?kbid=324956

Specifically there's an item about :
Private IP Address Information May Be Logged by the Terminal Server.

Keep us posted, I love a good sting operation.

-b
__________________
PostgreSQL, it's what's for dinner...

Reply With Quote
  #3  
Old June 12th, 2003, 05:44 PM
Stink Sleeve's Avatar
Stink Sleeve Stink Sleeve is offline
Contributing User
Dev Shed Novice (500 - 999 posts)
 
Join Date: Mar 2003
Location: New Hampshire, USA
Posts: 550 Stink Sleeve User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 11 h 17 m 26 sec
Reputation Power: 6
I reported this to my bandwidth provider and he wrote me back
an email that only said...
Quote:
We will go after it.


Now, this doesn't sound too promising or professional if you ask me.
I should probably pursue this myself with an attorney.

I will try the Local Security Policy for this and see.

Reply With Quote
Reply

Viewing: Dev Shed ForumsOtherDev Shed Lounge > Proof of connection attempts to Terminal Server?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 5 hosted by Hostway
Stay green...Green IT