security log Event Viewer-a, komentari
izvinjavam se na ovolikom postu pogledajet samo ono sto je crveno:)
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 27.5.2008
Time: 17:25:53
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: TZERO1 moj komp
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x23DEA4)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: BRANEZOID to je komp u mome LAN-u
Logon GUID: {00000000-0000-0000-0000-000000000000}
============================================================
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 27.5.2008
Time: 20:59:54
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: TZERO1
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x403B63)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: HOD sta je sad ovo, kao neko se logovao s ove masine!!!
Logon GUID: {00000000-0000-0000-0000-000000000000}
==============================================================
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 27.5.2008
Time: 17:20:11
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: TZERO1
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x223BBB)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: WWW-A6DAC9F3F24 opet ista stvar
Logon GUID: {00000000-0000-0000-0000-000000000000}
==============================================================
Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 25.5.2008
Time: 17:44:20
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Guest
Source Workstation: \\80.139.209.180
Error Code: 0x0
===============================================================
Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 27.5.2008
Time: 17:21:08
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Guest
Source Workstation: WWW-A6DAC9F3F24
Error Code: 0x0
===============================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 27.5.2008
Time: 19:32:07
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator obratite kako se User Name: Administrator mijenja
Administrador, pa u Administratour, pa u Administrat0r, nemam njemacki:)
Domain: ADMINTEST
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: TEST isto neka masina...
======================================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 27.5.2008
Time: 19:32:37
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrador hm:)
Domain: ADMINTEST
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: TEST
======================================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 27.5.2008
Time: 19:33:17
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrateur <------
Domain: ADMINTEST
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: TEST
======================================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 27.5.2008
Time: 19:33:58
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administratör <----
Domain: ADMINTEST
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: TEST
======================================================================
sad sam iskljucio Guest account, u registry-u sam zabranio anonimnu sesiju, iskljucen mi je file sharing na mreznoj koja mi ide na internet i vidim ovakve stvari............??????????
vec cetiri dana nemam nikakav firewall...moja greska...
evo upravo vidim uspostavljenu konekciju moja javna IP adresa koju vidite na ES-u:local port 445 sa tamo neka IP, tamo neki port...nevjerovatno, odmah pogledam u Event viewr a tamo tona ovoga:
=============================================================
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 27.5.2008
Time: 22:56:10
User: NT AUTHORITY\SYSTEM
Computer: TZERO1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Administrator
Domain: HP-43D555DB4668
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: HP-43D555DB4668
==============================================================
instaliracu surta firewall, cisto me zanima
hvala
[Ovu poruku je menjao tionisal dana 27.05.2008. u 23:14 GMT+1]
 |  |
 |
