|
I was looking through the security event log and noticed quite a few different logon failures. There are unknown names trying to login to unknown computers. Here is an example of what I see. Has anyone run into this before? Any ideas or leads as to where I can find more information on this?
Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 2/28/2003 Time: 10:12:58 AM User: NT AUTHORITY\SYSTEM Computer: mailservername Description: Logon Failure: Reason: Unknown user name or bad password User Name: UKNOWNUSERNAME$ Domain: UNKNOWNDOMAINNAME Logon Type: 3 Logon Process: NtLmSsp Authentication Package: NTLM Workstation Name: UNKOWN
Thanks,
John |
