wmi query for failed logons logon errors per second. This could indicate a password cracking attempt

SOLVED: File Server Errors Logon The host {SERVER} Is Now In State Warn As It Has X logon Errors Per Second. This Could Indicate a Password Cracking Attempt

Yesterday we were troubleshooting an error we found in our server monitoring tools that uses WMI queries to detect problems. It was reporting: File Server Errors LogonThe host {Server} is now in state warn as it has 1.2067 logon errors per second. This could indicate a password cracking attempt. The Read more…