Computer is running NT 4.0 server.

In the security log I see the occassional entry for user: Anonymous.
I don't see this user name in the User Manager list. I have the Guest
user account disabled, as well as the accounts associated with the web
and ftp server. I usually see the anonymous user show up in the logs
when ever I restart the system.

However, A few days ago I noticed the following sequence in the log
file (sorry if it's kinda long). What exactly is going on here?
(please post answers as this is a non-functional e-mail)

thanks.

------------
- entries are shown in reverse chronological order

- the real name of the computer in question has been
replaced with "(computer name)". No other changes,
additions, or deletions were made.

- First entry (at the very bottom of this list) shows an object
access, where the Object Name is
"DOMAINS\Account\Users\000003FC". All subsequent entries
are identical except for the \Users\xxxxxxxxx. Only this
line is shown for subsequent entries.

- Third last entry indicated Administrator account lock-out,
followed paradoxically by 2 attempts from an external computer
to perform an administrator login.

Begin log display:

[date] 10:35:34 PM Security Failure Audit Logon/Logoff
NT AUTHORITY\SYSTEM
(Computer Name) Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: R
Logon Type: 3
Logon Process: KSecDD
Authentication Package MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: \\R

[date] 10:35:31 PM Security Failure Audit Logon/Logoff
NT AUTHORITY\SYSTEM
(Computer Name) Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: R
Logon Type: 3
Logon Process: KSecDD
Authentication Package MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: \\R

[date] 10:35:28 PM Security Success Audit Account Management
NT AUTHORITY\SYSTEM
(Computer Name) User Account Locked Out:
Target Account Name: Administrator
Target Account ID: S-1-5-21-2093158801-1590382355-17523355-500
Caller Machine Name: \\R
Caller User Name: SYSTEM
Caller Domain: NT AUTHORITY
Caller Logon ID: (0x0,0x3E7)

[date] 10:35:26 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:26 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\000003F0

[date] 10:35:26 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:25 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\0000043E

[date] 10:35:25 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:25 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\0000042A

[date] 10:35:25 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:24 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000434

[date] 10:35:24 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:23 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\0000040F

[date] 10:35:23 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:23 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\0000040B

[date] 10:35:20 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:20 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\0000043C

[date] 10:35:20 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:19 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\000003EA

[date] 10:35:19 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:19 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\000003FB

[date] 10:35:18 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:18 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\000003EF

[date] 10:35:18 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:17 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000422

[date] 10:35:17 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:17 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000413

[date] 10:35:16 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:16 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000400

[date] 10:35:16 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:15 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000412

[date] 10:35:14 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:13 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000432

[date] 10:35:13 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:35:12 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\00000407

[date] 10:35:12 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:34:08 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\0000043B

[date] 10:34:07 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:34:07 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\000003FE

[date] 10:34:06 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:34:06 PM Security Success Audit Object Access
Object Name: DOMAINS\Account\Users\000003E8

[date] 10:34:06 PM Security Success Audit Object Access
NT AUTHORITY\SYSTEM
(Computer Name) Handle Closed:
Object Server: Security Account Manager
Handle ID: 1433488
Process ID: 2162116224

[date] 10:34:05 PM Security Success Audit Object Access
NT AUTHORITY\ANONYMOUS
LOGON (Computer Name) Object Open:
Object Server: Security Account Manager
Object Type: SAM_USER
Object Name: DOMAINS\Account\Users\000003FC
New Handle ID: 1433488
Operation ID: {0,19778527}
Process ID: 2162116224
Primary User Name: SYSTEM
Primary Domain: NT AUTHORITY
Primary Logon ID: (0x0,0x3E7)
Client User Name:
Client Domain:
Client Logon ID: (0x0,0x2747)
Accesses READ_CONTROL
ReadGeneralInformation
ReadPreferences
ReadLogon
ReadAccount
ListGroups
Privileges -