Issue 1:
A significant number of authentication or authorization failures have occurred on messages for the account user@contoso.com and the first attempt was from the IP address Edge Server. 30 failures have been identified in the last 0 minutes. There have been
30 errors in total. Note: the user uri might have been truncated to 64 characters.
Resolution:
It is recommended that this IP address be examined to determine if it should be blocked at the firewall to prevent password guessing attacks. This account may also be worth blocking with a script on the Access Edge Server to prevent continued attacks against
it.
- Log Name: Lync Server
- Source: LS Protocol Stack
- Event ID: 14498
- Level: Error
- User: N/A