It appears to be a new attempt to steal passwords. I've also seen them on the POP and IMAP ports.
If you've only seen them one or two at a time, it could be a valid user trying to incorrectly configure a client. -----Original Message----- From: Harris, Dot [mailto:[EMAIL PROTECTED]] Sent: Thursday, October 03, 2002 6:59 AM To: Exchange Discussions Subject: Who's there? I've never seen this error before, but three times this week I've seen this error on one of my smtp servers. The error reported by Microsoft Operations Manager: Severity: Error Status: New Source: MSExchangeIMC Name: Authentication attempt (AUTH %1) from %2 failed: %3() call failed with error: %4 Description: Authentication attempt (AUTH ntlm) from 128.134.25.180 failed: HrAccept() call failed with error: Logon failure: unknown user name or bad password. Has anyone seen this before? Looks to me as though someone's trying to spam. Any thoughts on this. Dot Harris Exchange Administrator William Blair & Company [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]