Elsinore

User Forum

www.screenconnect.com
Welcome Guest Search | Active Topics | Log In | Register

Tag as favorite
Stolen laptop - still connected to our server - how to get IP?
Options
Previous Topic Next Topic
sysadmin
#1 Posted : Thursday, October 06, 2011 4:11:28 PM
Rank: Advanced Member
Joined: 6/1/2011
Posts: 45
Location: NYC
A thief is using the laptop, and I'd like to get his IP for the police. I checked the app folder on the server, but I couldn't find any web server logs.

using netstat i've narrowed it down to 3 possibilities, but not sure how to link an IP to a particular client.
Back to top
Report? | Edit by user
Jake Morgan
#2 Posted : Thursday, October 06, 2011 6:12:44 PM
Rank: Administration
Joined: 4/9/2010
Posts: 871
Can't you get it by clicking the magnifying glass on the session and looking at the log?
Back to top
Report?
sysadmin
#3 Posted : Thursday, October 06, 2011 7:07:05 PM
Rank: Advanced Member
Joined: 6/1/2011
Posts: 45
Location: NYC
Jake Morgan wrote:
Can't you get it by clicking the magnifying glass on the session and looking at the log?


Doh. Yes, that works. I actually called in to Jeff and he told where the logs were located, which looks like the same log that the magnify glass pulls from.
Back to top
Report?
Jake Morgan
#4 Posted : Thursday, October 06, 2011 7:19:05 PM
Rank: Administration
Joined: 4/9/2010
Posts: 871
Yes. Same log file, and in appearance you can even specify what events are shown and their format.

Let us know how the hunt turns out!
Back to top
Report?
haastility
#5 Posted : Friday, October 07, 2011 2:17:08 PM
Rank: Member
Joined: 8/25/2011
Posts: 18
Location: Rochester, NY
Question... I have over 50 unattedned installs and most of them are remote but they all show the same 192.168.1.1 ip address, any ideas why?
Back to top
Report?
Jake Morgan
#6 Posted : Friday, October 07, 2011 10:10:53 PM
Rank: Administration
Joined: 4/9/2010
Posts: 871
Quote:
Question... I have over 50 unattedned installs and most of them are remote but they all show the same 192.168.1.1 ip address, any ideas why?


Sounds like you may have double-NATing with the SC server behind NAT 1 and all of the other 50 machines behind both NAT 1 and NAT 2.
Back to top
Report?
JeffBower
#7 Posted : Wednesday, October 12, 2011 3:02:22 PM
Rank: Member
Joined: 5/14/2010
Posts: 17
Location: Chicago
So any update on the stolen laptop? Were you able to track down the thief via the IP address?
Back to top
Report?
sysadmin
#8 Posted : Wednesday, October 12, 2011 4:32:21 PM
Rank: Advanced Member
Joined: 6/1/2011
Posts: 45
Location: NYC
Police weren't interested. NYPD is too busy arresting people for writing on the sidewalks with chalk down at Wall St.
Back to top
Report?
Users browsing this topic
Guest
Tag as favorite
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

SoClean Theme By Jaben Cargman (Tiny Gecko)
Powered by YAF | YAF © 2003-2009, Yet Another Forum.NET