Solved

Critical error in security log

Posted on 2006-10-24
1
318 Views
Last Modified: 2008-01-09
About once a week I get the following error in my security log:

Logon Failure:
  Reason: Unknown user name or bad password
  User Name: stephen
  Domain: ALWAYSONCS
  Logon Type: 8
  Logon Process: IIS
  Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name: SERVER1
  Caller User Name: SERVER1$
  Caller Domain: ALWAYSONCS
  Caller Logon ID: (0x0,0x3E7)
  Caller Process ID: 1936
  Transited Services: -
  Source Network Address: -
  Source Port: -

The user name changes, usually not even a user on my network.  Is this a hacker trying to gain access to my network, or is it some bug in MS SBS that causes it?  If it is a hacker is there a way for me to trace where it is coming from?

Thanks.
0
Comment
Question by:tmckinney01
1 Comment
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 500 total points
ID: 17875257
It could be... you can use http://www.gfi.com/downloads/downloads.aspx?pid=LANSS&lid=en to see if there are any vulnerabilities.

Also, see:  http:Q_20840915.html  for some good troubleshooting steps.

Jeff
TechSoEasy
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question