Solved

Unknown logon attempts

Posted on 2014-11-25
7
162 Views
Last Modified: 2014-11-26
Ever since upgrading to Mac OS Yosemite, I've been experiencing unknown logon attempts to my work server -- the logon attempts are coming from my home computers. The work server is Windows 2008 SBS. The logon is using an incorrect password which is causing a lockout on my user account.

I have deleted the native VPN accounts thinking this might be causing the problem. But it still occurs. I installed the Sonicwall NetExtender Mac client application to connect to my work VPN because the native Mac VPN connection did not work after the upgrade to Yosemite (I understand there's a bug in the OS). However, I was observing the logon attempt behavior prior to installing NetExtender -- so I don't think it's related.

Is there a way to determine what is causing this behavior?
0
Comment
Question by:clcarlson
  • 4
  • 3
7 Comments
 
LVL 53

Expert Comment

by:strung
ID: 40465010
Try Little Snitch. It alerts you to outgoing connection attempts from your Mac:

http://www.obdev.at/products/littlesnitch/index.html

There is a free demo:  http://www.obdev.at/products/littlesnitch/download.html
0
 

Author Comment

by:clcarlson
ID: 40465026
Thanks for the suggestion. I will give it a try tonight and see if identifies the culprit. I will report back :)
0
 
LVL 53

Expert Comment

by:strung
ID: 40465053
Alternatively, you could check your console logs for the time the log in attempt was made. There is likely a log item for the failed attempt.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 

Author Comment

by:clcarlson
ID: 40465065
Where do I find the console logs? Do I access via terminal? Or is it viewable with a text viewer?

Thanks.
0
 
LVL 53

Accepted Solution

by:
strung earned 500 total points
ID: 40465069
Just open Console.app found in /Applications/Utilities, or use Spotlight to search for Console.
0
 

Author Comment

by:clcarlson
ID: 40465074
Ok, thanks. I will check it out.
0
 

Author Closing Comment

by:clcarlson
ID: 40468128
This was so easy and quick! The offending application (Calendar) popped right out when I opened the Console.app.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Disconnecting Servers 5 23
MAC Management Software 8 76
How can I have an external hard drive on my network? 23 193
Reinstall Mac OSx 13 11
This article describes in detail how to set up the iPad in the Enterprise using iPCU aka iPhone Configuration Utility.  This could also be used for the iPhone although I have not detailed out any differences. Preparation as an iPad Administrator:…
In this article we will discuss some EI Capitan Mail app issues and provide some manual process to resolve them.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now