Masses of 529 Errors!

Giganews Newsgroups
Subject: Masses of 529 Errors!
Posted by:  Bill Glidden (billyg19…@hotmail.com)
Date: Sat, 12 May 2007

I have often seen these errors in the security log at the rate of up to
hundreds in a 24 hour period, but in the last 24 hours I had 107,710 of
them. Is this something I should be worrying about? Obviously the fact that
I know about it means that who/whatever is doing this is unsuccessful. Below
is pasted one of the events:

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date:  11/05/2007
Time:  10:20:37 PM
User:  NT AUTHORITY\SYSTEM
Computer: <my sbs server>
Description:
Logon Failure:
  Reason:  Unknown user name or bad password
  User Name: anonymous
  Domain:
  Logon Type: 3
  Logon Process: Advapi
  Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name: <my sbs server>
  User Name: <my sbs server>
  Caller Domain: <my domain>
  Caller Logon ID: (0x0,0x3E7)
  Caller Process ID: 1216
  Transited Services: -
  Source Network Address: -
  Source Port: -

Advice most welcome, please.

Bill

Replies