It appears to be a new attempt to steal passwords. I've also seen them on
the POP and IMAP ports.

If you've only seen them one or two at a time, it could be a valid user
trying to incorrectly configure a client.

-----Original Message-----
From: Harris, Dot [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, October 03, 2002 6:59 AM
To: Exchange Discussions
Subject: Who's there?


I've never seen this error before, but three times this week I've seen this
error on one of my smtp servers.  The error reported by Microsoft Operations
Manager:

Severity:  Error
Status:  New
Source:  MSExchangeIMC
Name:  Authentication attempt (AUTH %1) from %2 failed: %3() call failed
with error: %4
Description:  Authentication attempt (AUTH ntlm) from 128.134.25.180 failed:
HrAccept() call failed with error: Logon failure: unknown user name or bad
password.

Has anyone seen this before?  Looks to me as though someone's trying to
spam.  Any thoughts on this.


Dot Harris
Exchange Administrator
William Blair & Company
[EMAIL PROTECTED]






_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to