Logon 3 Errors.... Advapi

Tech-Archive recommends: Speed Up your PC by fixing your registry

I am seeing alot of bad logon failure at many of my clients,

Logon Failure:
Reason: Unknown user name or bad password
User Name: data
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SERVER1
Caller User Name: SERVER1$
Caller Domain: XXXXXXX
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 936
Transited Services: -
Source Network Address: -
Source Port: -

Could it be hackers are now attacking RWW ports ?

I am assuming this due to the, Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
and this is to do with IIS and therefore RWW.??

Could I be wrong, any advice greatly appreciated.






.

Relevant Pages

  • Re: KDC Event ID 7 and Wins startup errors.
    ... Event Type: Information ... Event Source: USER32 ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)
  • Re: KDC Event ID 7 and Wins startup errors.
    ... Scheduled reboot was done to ensure that no services/tasks are failing ... Event Type: Information ... Logon Failure: ... Caller User Name: $ ...
    (microsoft.public.windows.server.sbs)
  • Re: You are not authorized to view this page
    ... Here is the record from the Sytem Log for Kerberos ... AUTHORITY\SYSTEM BAY18 "Logon Failure: ... Logon Process: Kerberos ... Caller User Name: - ...
    (microsoft.public.inetserver.iis.security)
  • Re: You are not authorized to view this page
    ... IIS and Kerberos Part 2 - What are Service Principal Names? ... on logon session ... 30/04/2007 12:04:47 PM Security Failure Audit Logon/Logoff 529 NT AUTHORITY\SYSTEM BAY18 "Logon Failure: ... Caller User Name: - ...
    (microsoft.public.inetserver.iis.security)
  • Re: You are not authorized to view this page
    ... AUTHORITY\SYSTEM BAY18 "Logon Failure: ... Logon Process: Kerberos ... Caller User Name: - ...
    (microsoft.public.inetserver.iis.security)