Link to home
Create AccountLog in
Avatar of clcarlson
clcarlson

asked on

Unknown logon attempts

Ever since upgrading to Mac OS Yosemite, I've been experiencing unknown logon attempts to my work server -- the logon attempts are coming from my home computers. The work server is Windows 2008 SBS. The logon is using an incorrect password which is causing a lockout on my user account.

I have deleted the native VPN accounts thinking this might be causing the problem. But it still occurs. I installed the Sonicwall NetExtender Mac client application to connect to my work VPN because the native Mac VPN connection did not work after the upgrade to Yosemite (I understand there's a bug in the OS). However, I was observing the logon attempt behavior prior to installing NetExtender -- so I don't think it's related.

Is there a way to determine what is causing this behavior?
Avatar of strung
strung
Flag of Canada image

Try Little Snitch. It alerts you to outgoing connection attempts from your Mac:

http://www.obdev.at/products/littlesnitch/index.html

There is a free demo:  http://www.obdev.at/products/littlesnitch/download.html
Avatar of clcarlson
clcarlson

ASKER

Thanks for the suggestion. I will give it a try tonight and see if identifies the culprit. I will report back :)
Alternatively, you could check your console logs for the time the log in attempt was made. There is likely a log item for the failed attempt.
Where do I find the console logs? Do I access via terminal? Or is it viewable with a text viewer?

Thanks.
ASKER CERTIFIED SOLUTION
Avatar of strung
strung
Flag of Canada image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Ok, thanks. I will check it out.
This was so easy and quick! The offending application (Calendar) popped right out when I opened the Console.app.