Most likely a Netscape user sending you mail. Netscape erroneously attempts to login to servers that offer the AUTH command even if the Netscape client was not configured to login to that server in the first place.
----- Original Message ----- From: "Shane S." <[EMAIL PROTECTED]> To: "Exchange Discussions" <[EMAIL PROTECTED]> Sent: Wednesday, March 27, 2002 11:43 AM Subject: smtp event - strange > > > Hi there, > > Running Exchange 5.5 w/ Sp4 on a NT 4.0 w/ Sp6a. > Just noticed a strange log in even viewer. > > EventID: 4184 > Authentication attempt (Auth ntlm) from > xxx.xxx.xxx.xxx failed. HrAccept() call > failed with error: Logon failure: unknown user > name or bad password. > > xxx.xxx.xxx.xxx is an IP address somewhere outside > my network > I couldn't find any KB article on this from MS site. > > Has anyone seen this? What does this mean? being hacked? > Thanks > Shane > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
