我每天都会收到来自本地网络中同一台计算机的数千个登录和注销请求。似乎计算机每次都从不同的端口连接。
这可能是什么原因,是否危险?
两台计算机都使用 Windows 7 Pro SP1。
事件日志示例:
An account was successfully logged on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0
Logon Type: 3
New Logon:
Security ID: ANONYMOUS LOGON
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0x77f9286b
Logon GUID: {00000000-0000-0000-0000-000000000000}
Process Information:
Process ID: 0x0
Process Name: -
Network Information:
Workstation Name: <name>
Source Network Address: <ip>
Source Port: 5436
Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM …Run Code Online (Sandbox Code Playgroud)