R
Robban
I get up to 50 logins a day on from all different IPs. Particularly one IP
keeps reoccuring in the list and that computer is (according to the IP, we
got our own network here) a neighbour to me. However, the neighbour IP is
still only accounting for roughly 25% of all 'succesful' logins to the
anonymous account.
Sometimes the IP is shown as logged in for just a minute before logged out
and other times its logged in for up to 30 minutes before the logout event
appears.
I bought Vista in June 2008 and going through my security log shows that
this all started from 5th of October 2008.
The following is Event ID 4624 and in swedish.
-------------------------------------------
En inloggning har skett på ett konto.
Subjekt:
Säkerhets-ID: NULL SID
Kontonamn: -
Kontodomän: -
Inloggnings-ID: 0x0
Inloggningstyp: 3
Ny inloggning:
Säkerhets-ID: ANONYM INLOGGNING
Kontonamn: ANONYM INLOGGNING
Kontodomän: NT INSTANS
Inloggnings-ID: 0x565d250
Inloggnings-GUID: {00000000-0000-0000-0000-000000000000}
Processinformation:
Process-ID: 0x0
Processnamn: -
Nätverksinformation:
Arbetsstationens namn: DITT-7HUK3O9FM5
Källnätverksadress: XXX.XXX.XXX.XXX
....
keeps reoccuring in the list and that computer is (according to the IP, we
got our own network here) a neighbour to me. However, the neighbour IP is
still only accounting for roughly 25% of all 'succesful' logins to the
anonymous account.
Sometimes the IP is shown as logged in for just a minute before logged out
and other times its logged in for up to 30 minutes before the logout event
appears.
I bought Vista in June 2008 and going through my security log shows that
this all started from 5th of October 2008.
The following is Event ID 4624 and in swedish.
-------------------------------------------
En inloggning har skett på ett konto.
Subjekt:
Säkerhets-ID: NULL SID
Kontonamn: -
Kontodomän: -
Inloggnings-ID: 0x0
Inloggningstyp: 3
Ny inloggning:
Säkerhets-ID: ANONYM INLOGGNING
Kontonamn: ANONYM INLOGGNING
Kontodomän: NT INSTANS
Inloggnings-ID: 0x565d250
Inloggnings-GUID: {00000000-0000-0000-0000-000000000000}
Processinformation:
Process-ID: 0x0
Processnamn: -
Nätverksinformation:
Arbetsstationens namn: DITT-7HUK3O9FM5
Källnätverksadress: XXX.XXX.XXX.XXX
....