How To Stop Excessive Remote Failed Log On
hello all, how are you? there are many failed log on in my windows server 2008 r2 event log. here is one example from my event viewer: --start quote-- An account failed to log on. Subject: Security ID: NULL SID Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: NULL SID Account Name: Account Domain: WORKGROUP Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xc000006d Sub Status: 0xc0000064 Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: --random name-- Source Network Address: --random ip -- Source Port: 13960 Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0 --end quote-- these attempts are so many and periodically. sometimes they up to 30 attempts in only 1 minute, and it happens almost 24 hours nonstop my question is: what is that and how to make it stop? please kindly help me, thank you very much regards, sebastian
June 4th, 2012 1:12am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics