https://live.paloaltonetworks.com/t5/general-topics/unknown-login-attempts/m-p/287778#M76743 <DIV>I'm noticing several failed login attempts to our firewall for my domain admin account username.&nbsp; This does not actually exist on our firewall as a user, and as such is being rejected.&nbsp; &nbsp;I only log into our firewall using HTTPS access, i occasional use SSH, but have not for any of the events shown in the screenshot provided.</DIV><DIV>&nbsp;</DIV><DIV>The logins seem to occur just after 9AM, 12PM and 4PM each day.&nbsp; Is it possible that this is a false positive event on the Palo Alto, or that my windows desktop is somehow compromised?</DIV><DIV>&nbsp;</DIV><DIV>how do we check that?</DIV><DIV>&nbsp;</DIV> Fri, 24 Jul 2020 00:41:23 GMT Jatin.Singh 2020-07-24T00:41:23Z https://live.paloaltonetworks.com/t5/general-topics/unknown-login-attempts/m-p/287778#M76743 <DIV>I'm noticing several failed login attempts to our firewall for my domain admin account username.&nbsp; This does not actually exist on our firewall as a user, and as such is being rejected.&nbsp; &nbsp;I only log into our firewall using HTTPS access, i occasional use SSH, but have not for any of the events shown in the screenshot provided.</DIV><DIV>&nbsp;</DIV><DIV>The logins seem to occur just after 9AM, 12PM and 4PM each day.&nbsp; Is it possible that this is a false positive event on the Palo Alto, or that my windows desktop is somehow compromised?</DIV><DIV>&nbsp;</DIV><DIV>how do we check that?</DIV><DIV>&nbsp;</DIV> Fri, 24 Jul 2020 00:41:23 GMT https://live.paloaltonetworks.com/t5/general-topics/unknown-login-attempts/m-p/287778#M76743 Jatin.Singh 2020-07-24T00:41:23Z https://live.paloaltonetworks.com/t5/general-topics/unknown-login-attempts/m-p/287890#M76766 <P>Hello,</P><P>I would say it is not a false positive since its a log, e.g. something the PAN is detecting. DO you have a scanner running using your credentails? I would find that device with that IP address and see why its doing what its doing.</P><P>&nbsp;</P><P>Regards,</P> Wed, 11 Sep 2019 16:23:14 GMT https://live.paloaltonetworks.com/t5/general-topics/unknown-login-attempts/m-p/287890#M76766 OtakarKlier 2019-09-11T16:23:14Z