I’m constantly getting this error from our SBS 2003:
Source Event ID Last Occurrence Total Occurrences
Security
529 22-06-2007 03:51 62 *
Logon Failure:
Reason: Unknown user name or bad password
User Name: ?Username?
Domain: ?Domain?
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: ?Computer name?
Caller User Name: –
Caller Domain: –
Caller Logon ID: –
Caller Process ID: –
Transited Services: –
Source Network Address: 192.168.1.40
Source Port: 3122
Is someone trying to do a dictionary attack on our network or?
