Solved

Critical error in security log

Posted on 2006-10-24
1
321 Views
Last Modified: 2008-01-09
About once a week I get the following error in my security log:

Logon Failure:
  Reason: Unknown user name or bad password
  User Name: stephen
  Domain: ALWAYSONCS
  Logon Type: 8
  Logon Process: IIS
  Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name: SERVER1
  Caller User Name: SERVER1$
  Caller Domain: ALWAYSONCS
  Caller Logon ID: (0x0,0x3E7)
  Caller Process ID: 1936
  Transited Services: -
  Source Network Address: -
  Source Port: -

The user name changes, usually not even a user on my network.  Is this a hacker trying to gain access to my network, or is it some bug in MS SBS that causes it?  If it is a hacker is there a way for me to trace where it is coming from?

Thanks.
0
Comment
Question by:tmckinney01
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 500 total points
ID: 17875257
It could be... you can use http://www.gfi.com/downloads/downloads.aspx?pid=LANSS&lid=en to see if there are any vulnerabilities.

Also, see:  http:Q_20840915.html  for some good troubleshooting steps.

Jeff
TechSoEasy
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Ready to improve network connectivity? Watch this webinar to learn how SD-WANs and a one-click instant connect tool can boost provisions, deployment, and management of your cloud connection.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question