I recently changed the Admin password. This worked well and I/We can login
with the new Admin password.

Only now I see about 157 "Failed logins per hour" showing in NRM.

I see 157 times:

Time: Thursday, 4-10-2007 15:27
User: .CN=admin.O=ACTU.T=TREE_ACTU

How can I find out what service is trying to connect to the server?
Cause I don't see an IP or IPX address.