take a look at the SQL error log; the default for a normal installation is to log failed logins, so you can browse it with SSMS, and find the ip address; you can then ping that to get the hostname.
Lowell
--help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!