事件 ID 为 4625 的大量事件 win 2012 server

事件 ID 为 4625 的大量事件 win 2012 server

我在 Win 2012 服务器中收到大量 4625 事件。以下是事件详细信息。帐户名称和工作站名称相同,并且是我收到“帐户登录失败”事件的计算机的主机名。有人能帮我解决这个问题吗?

Log Name:   Security
Source:     Microsoft-Windows-Security-Auditing
Date:        05/01/2017 6:47:08 AM
Event ID:   4625
Task Category: Logon
Level:       Information
Keywords:   Audit Failure
User:       N/A
Computer:   http://(ServerHostname).example.com

Description:
An account failed to log on.

Subject:
                Security ID:                       NULL SID
                Account Name:               -
                Account Domain:                           -
                Logon ID:                           0x0

Logon Type:                                     3


Account For Which Logon Failed:               Security ID:                       NULL SID
                Account Name:               ServerHostname
                Account Domain:                           example

Failure Information:
                Failure Reason:               Unknown user name or bad password.
                Status:                               0xC000006D
                Sub Status:                       0xC0000064

Process Information:
                Caller Process ID:           0x0
                Caller Process Name:   -

Network Information:
                Workstation Name:     ServerHostname
                Source Network Address:         ::1
                Source Port:                     50364

Detailed Authentication Information:
                Logon Process:               NtLmSsp
                Authentication Package:             NTLM
                Transited Services:       -
                Package Name (NTLM only):     -
                Key Length:                     0

相关内容