Have the IIS server, essentially a (subscription and publishing services), there is also a read-only access the Shared folder
Log in a large number of audit failure, 10 a few per minute, most sources are native, is a small number of other clients, login type are 7
What reason is this excuse me? What's the solution?
log name: Security
Source: Microsoft Windows ws-security - Auditing
Date: 2020/12/9 9:09:01
Event ID: 4625
Task categories: login
Levels: information
Key words: audit failure
Filled by any user:
Computer: hx2017
Description:
Account login failed,
Topic:
Security ID: SYSTEM
Account name: HX2017 $
The account domain: WORKGROUP
Login ID: 0 x3e7
Login type: 7
Account login failure:
Security ID: NULL SID
Account name: Administrator
The account domain: HX2017
Failure information:
The reason for failure: unknown user name or password mistake,
Status: 0 xc000006d
Son: 0 xc000006a
Process information:
The caller process ID: 0 x1b68
The caller process name: C: \ Windows \ System32 \ LogonUI exe
Internet information:
The name of work: HX2017
The source IP address: -
Source port: -
The authentication information in detail:
The login process: Advapi
The authentication packet: Negotiate
Shipping service: -
Packets (NTLM only) : -
The key length: 0
CodePudding user response:
Password mistake, I operation? Not hacking into library?CodePudding user response: