[FX.php List] Many [Guest] authentication attempts? (FMS Warnings)

[Joel Shapiro]

Hi all

One of my clients' FMS9 machines recently had three consecutive days  
that saw large amounts of consecutive attempted logins to their  
FX.php solution apparently using a [Guest] account.

The line in the FMS event log is:
2008-11-03 10:06:13.691 -0800	Warning	661	<Server>	Client "[Guest]  
127.0.0.1:0" authentication failed on database "File.fp7" using  
"[Guest] [fmxml]".

There are exactly 60 such lines within 3 seconds (between  
10:06:13.691 and 10:06:16.473).

The [Guest] account is inactive in both the Data file and the Web  
file.  (All user authentication is via External Authentication  
(Active Directory), and continues to work correctly.)

What could be causing this?  Has anybody seen anything like this before?


I can replicate the warning message in the event log by manually  
entering "[Guest]" as the username (and any password) into the site's  
login page (although of course the login fails).

FMS 9.0.3.326
Windows Server 2003 SP2

TIA,
-Joel