I have a machine running Windows Server 2003 that is connected to the Internet, and I've noticed several events in the event log that state the following:
The server was unable to logon the Windows NT account 'Administrator' due to the following error: Logon failure: unknown user name or bad password.
The source for this event is MSFTPSVC, and the same event occured about 3 times every second from midnight to 6:30am. It's kind of ridiculous that our server allowed so many attempts. Is there a way to keep someone from attempting to log on after the first few unsuccessful tries?