Discussion Locked

Numerous Anonymous Logon

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

The question. Have recently begin to Audit succesful/unsuccesful logons. Since this change numerous audits for anonymous are being recorded
averaging one every minute. Monitoring the network traffic to this server for a 24hr period reveals nothing unusual. Yet, I can't reason why this occurs.
Here is the recorded event :
Source : Security Catagory: Logon/Logoff
Type: Success Event ID: 538
User Logoff:
User Name: Anonymous Logon
Domian: NT Authority
Logon ID: (0x0,0x4fdf38)
Logon type: 3

Operating System : Win2000 5.0 service pack 4 Terminal server

Thanks in advance, to any responders.

2 replies

by legion_96

Webusers record as Iusr_Dt7pnb22 when accessing the server via IIS anonymously. In addision, I failed to mention that no Logon event is recorded. Just the succesful logoff.

This discussion is closed to new replies.