Tons of 4776 successful logins Expand / Collapse
Author
Message
Posted 6/4/2018 5:36:20 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/4/2018 5:31:17 AM
Posts: 1, Visits: 1
Hello all,
I'm getting tons of below successful logins to one of our DCs as below,
How can I reach this host as no IP appears and it's not pingable:




4776
0
Information
Credential Validation
Info
Audit Success

161152123


Security
pc1.mydomain.com


The computer attempted to validate the credentials for an account.

Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon Account: user1
Source Workstation: WORKSTATION
Error Code: 0x0

Post #7478
Posted 6/11/2018 4:09:19 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 206, Visits: 0
Is this ongoing? The host may not be on the domain and attempting to authenticate using NTLM. If they are off the network then they won't be pingable. If they are on the network then we may have to look at something else such as looking at netstat connections or something like that.
Post #7481
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 10:52pm