Question : Unauthorized Logins

****************************************************
Logon Failure:
       Reason:            Unknown user name or bad password
       User Name:      aaa
       Domain:            ABC-300RINVAO4N
       Logon Type:      3
       Logon Process:      NtLmSsp
       Authentication Package:      NTLM
       Workstation Name:      ABC-300RINVAO4N
****************************************************
The logon to account: aaa
 by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 from workstation: ABC-300RINVAO4N
 failed. The error code was: 3221225572
****************************************************
Logon Failure:
       Reason:            Unknown user name or bad password
       User Name:      admin
       Domain:            ABC-300RINVAO4N
       Logon Type:      3
       Logon Process:      NtLmSsp
       Authentication Package:      NTLM
       Workstation Name:      ABC-300RINVAO4N
****************************************************
The logon to account: admin
 by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 from workstation: ABC-300RINVAO4N
 failed. The error code was: 3221225572
****************************************************

Hi everyone,

Those are some cases of my Event Viewer Security Log, its repeating for ever, with some variations, when I check the date and time of the events, I can say average 3 events per second, which lead me to think it's a program attacking my server.

So if you please, I need an explanation and how would I stop it, case it's really annoying knowing that someone is trying to hack me even if he/she didn't succeed yet. ( assuming they didn't..!!! )

Kindest Regards.

Answer : Unauthorized Logins

"If I was you"......but then, I'm not, but all the same,  you have a great (and expensive!) resource in the ISA software.  Why not spend a little time learning to use it?   And now you come to the really hard part....trying to decied how to divvy up them 20 points.  "Never have so few gotten so much from so many for so little"  or something like that :-)