The event viewer on my Windows 2k Server shows someone trying to logon every day for the past ten days. It seems the attempts occur every few seconds for about ten minutes. A few usernames are used and the error message given refers to an invalid username or password. If anyone is familiar with this kind of attack please post a reply. Thanks
examples: The logon to account: TsInternetUser by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 from workstation: KUNG-73E1LAGTCD failed. The error code was: 3221225578
The logon to account: IWAM_IXIQANBM by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 from workstation: KUNG-73E1LAGTCD failed. The error code was: 3221225578
