which logs do you refer to? Do you know which cisco command i can use to view the log files? I have not configured any log recording...is this something I need to do first?
Main Topics
Browse All Topicshey guys,
I have a cisco router at one of our colocation and its an edge router. I have an acl on there in which the FTP port to our Voice gateway keeps getting hit, like 10 hits every second. I think the box is getting attacked.
Is there anyway for me to find out the source IP of the attacker or IP of the device thats constantly trying to ftp to that box?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
you may also find this article useful, provided you have some knowledge of the router interface.
http://articles.techrepubl
Business Accounts
Answer for Membership
by: sarangk_14Posted on 2009-10-30 at 04:16:10ID: 25701788
Well, you should be able to get this information from the router log files. If the access has been denied to a connection, it will typically get logged.
Warm regards,
Sarang