Bad Hyper-V Username Logon Attempt

KB ID: 2359
Product: Veeam ONE
Version: 9.x
Last Modified: 2017-10-12


Veeam ONE raises the following event-based alarm: Bad Hyper-V username logon attempt.


The Bad Host Username alert suggests that someone is attempting to access the host with an invalid username or password.


Veeam ONE raises the Bad Hyper-V username logon attempt alarm based on the Hyper-V event that is received from the MS Hyper-V host:

4625 Microsoft-Windows-Security-Auditing

The further issue troubleshooting should be performed on the MS Hyper-V server side.

If you would like to find out the root cause of the event, investigate the Security log on your Hyper-V host > Computer Management > Event Viewer > Windows Logs. Find the event record mentioned above and see the details.

More Information

In case you cannot find the event record or the record details refer to Veeam ONE server, please contact Veeam Support for further assistance.

Please be aware that starting from September 2018 downloading updates will require an active contract for the corresponding product.


Rate the quality of this KB article: 
2.6 out of 5 based on 6 ratings

Couldn't find what you were looking for?

Below you can submit an idea for a new knowledge base article.

Request new content

Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Orphus system