Status 0xc000006d FailureReason %%2313 SubStatus 0xc000006a LogonType 3 LogonProcessName NtLmSsp AuthenticationPackageName NTLM WorkstationName TransmittedServices - LmPackageName - KeyLength 0 ProcessId 0x0 ProcessName - IpAddress - IpPort - 尝试NTLM登录,对于这种**登录,我们只需要关闭相应安全策略...
Logon Failure:Reason: Unknown user name or bad passwordUser Name: printeraccountDomain: server1Logon Type: 3Logon Process: NtLmSsp Authentication Package: NTLMWorkstation Name: server1Caller User Name: -Caller Domain: -Caller Logon ID: -...
服务器出现⼤批量登录审核失败NtLmSsp攻击问题：服务器出现⼤批量登录审核失败 详细信息：---重点红⾊标注 ⽇志名称: Security 来源: Microsoft-Windows-Security-Auditing ⽇期: 2020/7/28 16:47:37 事件 ID: 4625 任务类别: 登录 级别: 信息 关键字: 审核失败 ⽤户: 暂缺 计算机: VM82 描述:帐户...
<Data Name="TargetUserSid">S-1-0-0</Data> <Data Name="TargetUserName">ADMINISTRATOR</Data> <Data Name="TargetDomainName"> </Data> <Data Name="Status">0xc000006d</Data> <Data Name="FailureReason">%%2313</Data> <Data Name="SubStatus">0xc000006a</Data> <Data Name="LogonType">3...
<Data Name="SubjectLogonId">0x0</Data> <Data Name="TargetUserSid">S-1-0-0</Data> <Data Name="TargetUserName">ADMINISTRATOR</Data> <Data Name="TargetDomainName"> </Data> <Data Name="Status">0xc000006d</Data> <Data Name="FailureReason">%%2313</Data> ...
Logon Failure:Reason: Unknown user name or bad passwordUser Name: printeraccountDomain: server1Logon Type: 3Logon Process: NtLmSsp Authentication Package: NTLMWorkstation Name: server1Caller User Name: -Caller Domain: -Caller Logon ID: -...
<Data Name="SubjectLogonId">0x0</Data> <Data Name="TargetUserSid">S-1-0-0</Data> <Data Name="TargetUserName">ADMINISTRATOR</Data> <Data Name="TargetDomainName"> </Data> <Data Name="Status">0xc000006d</Data> <Data Name="FailureReason">%%2313</Data> ...
<Data Name="SubjectLogonId">0x0</Data> <Data Name="TargetUserSid">S-1-0-0</Data> <Data Name="TargetUserName">ADMINISTRATOR</Data> <Data Name="TargetDomainName"> </Data> <Data Name="Status">0xc000006d</Data> <Data Name="FailureReason">%%2313</Data> ...
Status 0xc000006d FailureReason %%2313 SubStatus 0xc0000064 LogonType 3 LogonProcessName NtLmSsp AuthenticationPackageName NTLM WorkstationName lQPxf2ISQgEV1bGK TransmittedServices - LmPackageName - KeyLength 0 ProcessId 0x0 ProcessName - IpAddress 180.244.171.195 IpPort 11535Thanks...
FailureReason %%2313 SubStatus 0xc0000064 LogonType 3 LogonProcessName NtLmSsp AuthenticationPackageName NTLM WorkstationName lQPxf2ISQgEV1bGK TransmittedServices - LmPackageName - KeyLength 0 ProcessId 0x0 ProcessName - IpAddress 180.244.171.195 IpPort 11535 Thanks All replies (2) Monday, June...