failed to log on to unknown using a wrong password

Copper Contributor

Jan 23 2023 01:15 PM

Hello

I am trying to identify the source of multiple bad password attempts and I am seeing this in MDI: "failed to log on to unknown using a wrong password." I understand that it may be from a device that name resolution is failing, but cant we at least see an IP address? Is there a way we can leverage MDE to achieve this? Any ideas or pointers will be greatly appreciated.

 

Thank you

1 Reply
I'm pretty sure that "Network Name resolution" doesn't use authentication. Isn't it your Directory Service Account for MDI which you set a bad password for in the portal?