Once in a while audit events for failed logon with bad username or password occur on Hyper V hosts and in Veeam Backup & Replication environment. The events appear to be initiated by Veeam ONE service account.
The behavior is described in this Microsoft KB article.
Behavior by Microsoft design.
Please be aware that we’re making changes which will restrict access to product updates for users without an active contract.