Hundreds of failed login attempts

I'm seeing hundreds of failed login attempts for "administrator" on one of
my web servers.

The administrator account has a limit of 20 attempts, then a lockout for 30
minutes.

But the security event log shows these events occurring about 10 per minute
for hours at a time, with no break.

I'm pretty new to server administration, and I'm not sure what else to do to
limit these attempts.

Any suggestions would REALLY be appreciated!

---Selden McCabe


.

Relevant Pages

  • Re: Hundreds of failed login attempts
    ... adm account doesnt get locked. ... Think, I try to log on as administrator and it became locked, how the REAL ... my web servers. ... But the security event log shows these events occurring about 10 per ...
    (microsoft.public.windows.server.security)
  • Re: Hundreds of failed login attempts
    ... Though not default setting it is possible for the administrator account to ... of my web servers. ... But the security event log shows these events occurring about 10 per ...
    (microsoft.public.windows.server.security)
  • Re: Lost Administrator password
    ... the above logs are related to user logons and the ... associated logging being turned on. ... Administrator was blank and the password reset as well (not sure if the ... Domain Password & Lockout Policies ...
    (microsoft.public.windows.server.sbs)
  • Admin Account locked out every hour.
    ... The lockout originates from the domain controller DC1. ... None seem to using the Administrator account. ... Client Address: 127.0.0.1 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Thousands of logon failures in the Security Log
    ... 'Administrator' alone. ... I have set my account lockout thresholds very low (as has been ... a security log reporting thousands of "Unknown user name or bad ... Some routers/firewalls are able to open ports only ...
    (microsoft.public.windows.server.sbs)
Quantcast