NW6.5 Sp6, XP SP2, NWC4.91 SP4, Zen 7 sp1 ir3a.

One of our servers is getting several thousand failed logins per hour from workstations, not users, but workstation objects. We are using ldap but the server already has a replica on it.

Any thoughts?

thanks
Mike