Hi,
using Windows 2008 R2 I would like to get info when and from which source IP has someone tried to unsuccessfully connect to my Windows server.
Sample output should be something like:
[tt]Time IP address
-------------- -------------
sep 2014 12:00 192.168.20.10
sep 2014 12:01 192.168.20.11[/tt]
I searched the web but can't get the info I need.
For example I tried PowerShell command:
[tt]Get-EventLog -LogName Security |Where { ("FailureAudit" -eq $_.EntryType) }[/tt]
but above command displays only events without detailed data of IP Address.
Thanks
using Windows 2008 R2 I would like to get info when and from which source IP has someone tried to unsuccessfully connect to my Windows server.
Sample output should be something like:
[tt]Time IP address
-------------- -------------
sep 2014 12:00 192.168.20.10
sep 2014 12:01 192.168.20.11[/tt]
I searched the web but can't get the info I need.
For example I tried PowerShell command:
[tt]Get-EventLog -LogName Security |Where { ("FailureAudit" -eq $_.EntryType) }[/tt]
but above command displays only events without detailed data of IP Address.
Thanks