M
MartinSmith
Guest
Today, while responding to a fellow MediaPortal Forum members reply to one of my current Threads in this forum, my monitor flickered a few times, something its never done while at this forum. After checking my Event Log, Event Viewer, under the Security category, I discovered that the following PCs were attempting to "breach" the security of MY PC . . .
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:38:20 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Leonardo
Domain: LEONARDO-FMC967
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: LEONARDO-FMC967
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:40:35 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Hedwig
Domain: 19HK54
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: 19HK54
For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:40:59 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: User-1
Domain: AELITA
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: AELITA
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:41:31 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Hubbe
Domain: ARSLEBANG
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: ARSLEBANG
For more information, see Help and Support
Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:42:32 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: HNYLAVSVSQ01X
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: HNYLAVSVSQ01X
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:45:28 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: S0028862081
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: S0028862081
For more information, see Help and Support
Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:45:35 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: moi
Domain: PCTEK
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: PCTEK
For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:45:38 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: JHS-O04SIHPBC2A
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:46:09 PM
User: NT AUTHORITY\SYSTEM
Computer: BMANGMAN-AC9EBD
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: pc
Domain: PC-1SGHM6UIV9UC
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: PC-1SGHM6UIV9UC
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:46:53 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Stefan
Domain: SN263000360127
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SN263000360127
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:46:55 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Uğur
Domain: U-ZRPRUQJ95EW9L
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: U-ZRPRUQJ95EW9L
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:48:21 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Irena
Domain: DOM-9B4DE86DE0F
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: DOM-9B4DE86DE0F
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:49:43 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: ANTHONY
Domain: UTILISAT-5NPECQ
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: UTILISAT-5NPECQ
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:50:31 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: s
Domain: D-0Z9H3X12U0H6W
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: D-0Z9H3X12U0H6W
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:50:41 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Gośka
Domain: GOSIK
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: GOSIK
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:51:27 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: UNLIMITED
Domain: UNLIMITE-QQ5IRD
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: UNLIMITE-QQ5IRD
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Prior to posting, I conducted an Advanced Search for each User Name noted above and the MediaPortal Forum results were always the same . . .
The following errors occurred with your search:
1. Please specify some words or valid user names to search on. There were no matches for those that you specified.
Listed alphabetically,
these MediaPortal Forum member PCs include:
User Name: Administrator
Domain: HNYLAVSVSQ01X
User Name: ANTHONY
Domain: UTILISAT-5NPECQ
User Name: Gośka
Domain: GOSIK
User Name: Hedwig
Domain: 19HK54
User Name: Hubbe
Domain: ARSLEBANG
User Name: Irena
Domain: DOM-9B4DE86DE0F
User Name: JHS
Domain: JHS-O04SIHPBC2A
User Name: Leonardo
Domain: LEONARDO-FMC967
User Name: moi
Domain: PCTEK
User Name: Owner
Domain: S0028862081
User Name: pc
Domain: PC-1SGHM6UIV9UC
User Name: s
Domain: D-0Z9H3X12U0H6W
User Name: Stefan
Domain: SN263000360127
User Name: Uğur
Domain: U-ZRPRUQJ95EW9L
User Name: UNLIMITED
Domain: UNLIMITE-QQ5IRD
User Name: User-1
Domain: AELITA
I understand that a User Name associated with a PC does NOT have to correspond with the MediaPortal Forum User Name or ID, but I want to know what the hell is going on here and because Windows XP NT LM Security Support Provider service is clearly WARNING me about these MediaPortal Forum USERS.
Anyone else experiencing same or similar security "breach" attempts in this forum???
Martin
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:38:20 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Leonardo
Domain: LEONARDO-FMC967
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: LEONARDO-FMC967
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:40:35 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Hedwig
Domain: 19HK54
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: 19HK54
For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:40:59 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: User-1
Domain: AELITA
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: AELITA
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:41:31 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Hubbe
Domain: ARSLEBANG
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: ARSLEBANG
For more information, see Help and Support
Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:42:32 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: HNYLAVSVSQ01X
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: HNYLAVSVSQ01X
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:45:28 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: S0028862081
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: S0028862081
For more information, see Help and Support
Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:45:35 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: moi
Domain: PCTEK
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: PCTEK
For more information, see Help and Support Center
at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:45:38 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: JHS-O04SIHPBC2A
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:46:09 PM
User: NT AUTHORITY\SYSTEM
Computer: BMANGMAN-AC9EBD
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: pc
Domain: PC-1SGHM6UIV9UC
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: PC-1SGHM6UIV9UC
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:46:53 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Stefan
Domain: SN263000360127
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: SN263000360127
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:46:55 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Uğur
Domain: U-ZRPRUQJ95EW9L
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: U-ZRPRUQJ95EW9L
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:48:21 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Irena
Domain: DOM-9B4DE86DE0F
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: DOM-9B4DE86DE0F
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:49:43 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: ANTHONY
Domain: UTILISAT-5NPECQ
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: UTILISAT-5NPECQ
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:50:31 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: s
Domain: D-0Z9H3X12U0H6W
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: D-0Z9H3X12U0H6W
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:50:41 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Gośka
Domain: GOSIK
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: GOSIK
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
===
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 10/1/2007
Time: 1:51:27 PM
User: NT AUTHORITY\SYSTEM
Computer: MY PC
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: UNLIMITED
Domain: UNLIMITE-QQ5IRD
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: UNLIMITE-QQ5IRD
For more information, see Help and
Support Center at http://go.microsoft.com/fwlink/events.asp.
===
Prior to posting, I conducted an Advanced Search for each User Name noted above and the MediaPortal Forum results were always the same . . .
The following errors occurred with your search:
1. Please specify some words or valid user names to search on. There were no matches for those that you specified.
Listed alphabetically,
these MediaPortal Forum member PCs include:User Name: Administrator
Domain: HNYLAVSVSQ01X
User Name: ANTHONY
Domain: UTILISAT-5NPECQ
User Name: Gośka
Domain: GOSIK
User Name: Hedwig
Domain: 19HK54
User Name: Hubbe
Domain: ARSLEBANG
User Name: Irena
Domain: DOM-9B4DE86DE0F
User Name: JHS
Domain: JHS-O04SIHPBC2A
User Name: Leonardo
Domain: LEONARDO-FMC967
User Name: moi
Domain: PCTEK
User Name: Owner
Domain: S0028862081
User Name: pc
Domain: PC-1SGHM6UIV9UC
User Name: s
Domain: D-0Z9H3X12U0H6W
User Name: Stefan
Domain: SN263000360127
User Name: Uğur
Domain: U-ZRPRUQJ95EW9L
User Name: UNLIMITED
Domain: UNLIMITE-QQ5IRD
User Name: User-1
Domain: AELITA
I understand that a User Name associated with a PC does NOT have to correspond with the MediaPortal Forum User Name or ID, but I want to know what the hell is going on here and because Windows XP NT LM Security Support Provider service is clearly WARNING me about these MediaPortal Forum USERS.
Anyone else experiencing same or similar security "breach" attempts in this forum???
Martin
Germany
