I have a client's Netware 6.5 sp6 server coming up with about 60 logins failed per hour in the remote manager. The user is myself. But there is no address. If my boss sees this he is going to have a fit.

There is no FTP access on this server. There is Groupwise Web access 6.5 sp6. When I bring up apache lately it has ifolder tied into it but it is not active.

How do I figure out where this login is coming from? I thought at first it was because I changed my password and something internal was tried to it. But that was not it. Because I changed it back.

Is this dangerous?