I am new to managing a hosted Windows vps and in the past 4 days my security event log shows about 35,000 Events as: Audit Failure "An account failed to log on." These appear to be recurring attempts to gain access using a variety of user names. This is a Win 2008 R2 vps.
A few questions: 1 - Is this normal to receive this level of login attempts? 2 - Is there any way to block this? 3 - What is the best way to prevent one of these attempts from gaining access and taking over my server?
Any suggestions welcomed - thanks.