Solved

Critical error in security log

Posted on 2006-10-24
1
316 Views
Last Modified: 2008-01-09
About once a week I get the following error in my security log:

Logon Failure:
  Reason: Unknown user name or bad password
  User Name: stephen
  Domain: ALWAYSONCS
  Logon Type: 8
  Logon Process: IIS
  Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name: SERVER1
  Caller User Name: SERVER1$
  Caller Domain: ALWAYSONCS
  Caller Logon ID: (0x0,0x3E7)
  Caller Process ID: 1936
  Transited Services: -
  Source Network Address: -
  Source Port: -

The user name changes, usually not even a user on my network.  Is this a hacker trying to gain access to my network, or is it some bug in MS SBS that causes it?  If it is a hacker is there a way for me to trace where it is coming from?

Thanks.
0
Comment
Question by:tmckinney01
1 Comment
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 500 total points
ID: 17875257
It could be... you can use http://www.gfi.com/downloads/downloads.aspx?pid=LANSS&lid=en to see if there are any vulnerabilities.

Also, see:  http:Q_20840915.html  for some good troubleshooting steps.

Jeff
TechSoEasy
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now