Highlighted
Absent Member.
Absent Member.
1241 views

Failed Logins Alarm in NoRM

I'm getting a number of failed logins on different (unrelated) servers with this recurring content:

[INDENT]Time: Wednesday, 4-22-2009 8:23 am
Address:
User: Unknown (ID=-1387086512)

Time: Wednesday, 4-22-2009 8:12 am
Address:
User: Unknown (ID=-1385051696)

Time: Wednesday, 4-22-2009 7:13 am
Address:
User: Unknown (ID=-1383904080)
[/INDENT]
Note that the Address is blank, so that's not helpfule, and the User is "Unknown" withe a negative ID number, that is different each time. I'd sure like to be able to track this down and clean up these failed logins, but with only the unusual ID= number, it doesn't give me much to go on.
Labels (1)
Tags (3)
0 Likes
3 Replies
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Failed Logins Alarm in NoRM

bkeadle wrote:

>
> I'm getting a number of failed logins on different (unrelated) servers
> with this recurring content:
>
> Time: Wednesday, 4-22-2009 8:23 am
> Address:
> User: Unknown (ID=-1387086512)
>
> Time: Wednesday, 4-22-2009 8:12 am
> Address:
> User: Unknown (ID=-1385051696)
>
> Time: Wednesday, 4-22-2009 7:13 am
> Address:
> User: Unknown (ID=-1383904080)
>
> Note that the Address is blank, so that's not helpfule, and the User
> is "Unknown" withe a negative ID number, that is different each time.
> I'd sure like to be able to track this down and clean up these failed
> logins, but with only the unusual ID= number, it doesn't give me much
> to go on.


do you have cifs loaded on your server ? If so and you are not using it
unload it (cifsstop.ncf). See if that helps.

--
Cheers,
Edward
0 Likes
Highlighted
Absent Member.
Absent Member.

Re: Failed Logins Alarm in NoRM

Thanks for your reply.

No, CIFS is not loaded. Any more ideas?
0 Likes
Highlighted
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Failed Logins Alarm in NoRM

bkeadle wrote:

>
> Thanks for your reply.
>
> No, CIFS is not loaded. Any more ideas?


AFP ? FTP ?

--
Cheers,
Edward
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.