Security problem, I have just setup a webserver and its serving fine with ISS 4 for windows NT server. I have just been checking the event logs for this system and find events such as this one. We do not have any systems here on this small network that are named anything like this one. So I assume it is someone trying to get in form the outside. How can I stop this and how did they get to a point where they could try and logon? Thanks Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff Event ID: 529 Date: 3/20/2001 Time: 8:58:17 PM User: NT AUTHORITY\SYSTEM Computer: SERVER Description: Logon Failure: Reason: Unknown user name or bad password User Name: ¦f-+¦µ Domain: WORKGROUP Logon Type: 3 Logon Process: KSecDD Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Workstation Name: \\CLC4