Win2008 system log constantly appears to resolve the failure of the solution

[phenomenon]

View the windows log today, in-safe - found that there are constantly messages, display - audit failed - event ID is 4624 records About 8 messages per minute (as shown)

[Personal judgment]

There may be constant trial logins, trying to keep going in a short time. The account security test cracks the login account and breaks into the server remote control.

[Logging Detailed Log]

[Processing/Solution]

1. Using a Firewall to Restrict a Specified IP Cannot Access

2. In the log "Network Information" source network address: 58.211.7.237 Found to try to log in IP

3. Use firewall to limit this IP

[Details]

1. Open the Service Manager "Advanced Security Windows Firewall" such as station rules

2. Right click, create new inbound rules

3. Define rules

Solutions!