12 Event Id 676 in a row

From: Ed Kipp (ekipp_at_ucsd.edu)
Date: 04/30/03 

Date: Wed, 30 Apr 2003 14:14:23 -0700

>-----Original Message-----
>I am seeing 12 Event id 676 in a row over a few seconds
fo
>the same user, I am fairly sure the is no way someone
>could fail to login 12 times in 2 seconds. Does any one
>have any info on this
>.
>
If the error code is 6, then the username does not
exist. Probably a brute force password guessing attack
(but with only 12 attempts not all that forceful). You
probably want to tweak your logging to try and identify
the usernames they are trying and the domain they are
coming from, to ensure it's not someone inside your
network.

Relevant Pages

  • Re: Stange access problem
    ... Logging in to the domain. ... The guy's not logging in properly so all network ... account, the internet, or any other server resource, even after logging ... it asks for his username and password. ...
    (microsoft.public.backoffice.smallbiz)
  • RE: new password not accepted..
    ... My research shows that the error code you're getting means either your ... username or password is being rejected. ... Did you use your full gmail e-mail ... MVP - Outlook ...
    (microsoft.public.outlook.installation)
  • Re: Cannot login to Win2000, but username/pass werent changed...
    ... Problem is that I bought this laptop from my university's surplus ... so I can't connect to a network in any way at all and the IT ... Now Windows won't recognize my password and says that my username and ... But I can't change my domain without logging ...
    (microsoft.public.win2000.security)
  • Re: Administrator Password
    ... Connecting over a network or logging into the computer? ... Connecting over a network, add a user to the XP machine using the same ... username and password used to log into the "other" machine and give this ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 85010008 - The proxy server you have specified is incompatible...
    ... see anywhere in the settings/options for IE on here to set a username ... Error code 85010008 ... "The proxy server you have specified is incompatible with your ... Specify the correct proxy server in your connection ...
    (microsoft.public.pocketpc.activesync)