我的服务器是不是被攻击了。

fjpcjq · 发表于 2008-9-22 11:58:54

windows2003 事件查看器，安全性日志

类型日期时间来源分类事件用户计算机
审核成功 2008-9-22 10:50:58 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:50:48 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:50:24 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:50:14 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:50:13 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:50:03 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:48:28 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:48:19 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:48:18 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:48:08 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:47:56 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:47:52 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:47:46 Security 登录/注销 540 Administrator OA
审核成功 2008-9-22 10:47:46 Security 登录/注销 576 Administrator OA
审核成功 2008-9-22 10:47:46 Security 帐户登录 680 Administrator OA
审核成功 2008-9-22 10:39:54 Security 登录/注销 538 Administrator OA
审核成功 2008-9-22 10:39:54 Security 登录/注销 682 SYSTEM OA
审核成功 2008-9-22 10:39:54 Security 登录/注销 576 Administrator OA
审核成功 2008-9-22 10:39:54 Security 登录/注销 528 Administrator OA
审核成功 2008-9-22 10:39:54 Security 登录/注销 552 SYSTEM OA
审核成功 2008-9-22 10:39:54 Security 帐户登录 680 Administrator OA
审核成功 2008-9-22 10:19:15 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:19:06 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:19:06 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:19:06 Security 登录/注销 540 Administrator OA
审核成功 2008-9-22 10:19:06 Security 登录/注销 576 Administrator OA
审核成功 2008-9-22 10:19:06 Security 帐户登录 680 Administrator OA
审核成功 2008-9-22 10:19:04 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:17:11 Security 登录/注销 538 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:17:00 Security 登录/注销 540 ANONYMOUS LOGON OA
审核成功 2008-9-22 10:12:49 Security 登录/注销 538 Administrator OA

fjpcjq · 发表于 2008-9-22 11:59:39

为什么这个帐户ANONYMOUS LOGON

经常登入呢！！

高手们帮忙解答一下。

it1988.com · 发表于 2008-9-22 12:32:16

不一定是攻击，有时正常的也是这样子的。

xiaoyuwxz · 发表于 2008-9-22 13:54:51

这是帐户审核,打开网页,你的IIS帐户就会登录,审核通过才能打开.

fjpcjq · 发表于 2008-9-22 14:20:06

谢谢！两位回答。
不是攻击就好。

zdszf · 发表于 2008-9-22 22:01:10

恩，不一定

服务器安全网 · 发表于 2008-9-22 22:45:17

提示: 作者被禁止或删除内容自动屏蔽

順⒎自嘫 · 发表于 2008-9-23 10:20:30

(::22::) (::22::) (::22::)

不一定是攻击。。

		自动登录	找回密码
密码			立即注册