I have exactly 30,485 Audit Failure's in my Windows Log..... should i be worried?......starting from the reboot at the begenning of this month 11/01/2007 to today.... i just decided to check as explorer.exe was taking up 400MB of RAM... which is highly unusuial........ What i get from the log: (it seems to happen every min or 2 of every day since i re-started the server (and possibly before... i didnt check last time :/ .... and im the ONLY one with admin... and Administrator is not even a valid login...) EventData SubjectUserSid S-1-0-0 SubjectUserName - SubjectDomainName - SubjectLogonId 0x0 TargetUserSid S-1-0-0 TargetUserName ADMINISTRATOR TargetDomainName Status 0xc000006d FailureReason %%2313 SubStatus 0xc0000064 LogonType 3 LogonProcessName NtLmSsp AuthenticationPackageName NTLM WorkstationName \\83.10.190.197 TransmittedServices - LmPackageName - KeyLength 0 ProcessId 0x0 ProcessName - IpAddress 83.10.190.197 IpPort 4462its a diffrent ip and port for each day it seems... though i dont have time to go through ALL the logs....Thanks to any help/Siguestions....... tracert is endless..... acok197.neoplus.adsl.tpnet.pl

with google for that tracert resolve i get:954. ~Rafall 2007-03-06 19:36acok197.neoplus.adsl.tpnet.plSpoko fonik tylko czemu tak si tnie i wiesza nie wiem co zrobi eby si nie muli wrecie go pierdo... o ciane i nic nie zostaniePolish to English translator helped none...... (am i over reacting? or would i find similar things if i checked each resolved ip with google? botnet?)