Failed Login on ArcGIS Server in Log Files

Kristofer

Hi All,

I hope you all are doing well !!

I noticed a failed login attempt continuously on the ArcGIS Server hosting machine with the following details:

Timestamp: xyzx
Machine: Server hosting machine
User ID Attempted: d85e3121-0c8c-466f-ba3c-2bf8e5d987af
Error Message: Invalid username or password

Server Log - <Msg time="xyzxy" type="WARNING" code="7716" source="Admin" process="2300" thread="1" methodName="" machine="hosting server" user="" elapsed="0.0" requestID="d12d8cca-7d68-4ca5-9dbd-149524dd1ee7">Failed to log in. Invalid username 'd85e3121-0c8c-466f-ba3c-2bf8e5d987af' or password specified.</Msg>

The username appears to be a GUID, which suggests an authentication issue. Could you please help me trace the actual username (in alphabetical format) instead of the GUID? This will allow me to identify and fix the authentication issue.

Best regards,
Kristofer

D_McRitchie

Hey Kristofer,

That sounds potentially worrying, it is worth confirming exactly how often this occurring. Is it are random continuous intervals or something more regularised? (i.e. every 5min)

 

If its regularised then something automated must be causing it. The following Community forum might be helpful as it discusses that the issue can be caused by disabling the Primary Site Admin account.

In the worst case this could be someone trying to access the Enterprise so I would flag this with your IT/IS team.

Hopefully that helps,

David