Invalid Code for Multi-Factor Authentication Entered

Sent when a user enters an invalid confirmation code for multi-factor authentication. For more information, see Multi-Factor Authentication.

General Information

Event ID: 40205

Event message details: Invalid MFA code has been entered for <User>

Severity: Info

Parameters

Parameter Name

Description

Example

UserName

Name of the user who performed an operation.

UserName="TECH\user1"

Endpoint

 

Endpoint="[::1]:52182"

SID

User security identifier.

SID="S-1-5-21-670747961-1840839389-3357612639-1134"

Version

Event version (service parameter).

Version="1"

Description

Event message details.

Description="Invalid MFA code has been entered for TECH\user1"

Syslog Message Example

<14>1 2023-10-23T20:47:53.940195+02:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=40205 UserName="TECH\user1" Endpoint="[::1]:52182" SID="S-1-5-21-670747961-1840839389-3357612639-1134" Version="1" Description="Invalid MFA code has been entered for TECH\user1"]

Page updated 5/22/2024

Page content applies to build 12.1.2.172