Excessive Logon Failures

  • Thread starter Thread starter MarkG
  • Start date Start date
M

MarkG

Recently there were approximately 5000 entries in the security log associated
to event 680, error code = 0xC000006A. The message indicated that the 'user
name is correct, password is wrong'. This seems odd as it did not trigger an
account lockout. The events were recorded over a period of an hour and a
half. Source host was a network pc and the destination host was DC.

Any suggestions as to what might be the source of these would be helpful.
 
Back
Top