What does this mean??? Event Log Scan

From: Chance Orr (karismau_at_yahoo.com)
Date: 07/31/03

  • Next message: Edward Rustin: "Re: IP address allocation" 
    Date: 31 Jul 2003 04:41:15 -0000
To: security-basics@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    07/30/2003 23:49:02 612 Audit Policy Change Success audit Critical
    Security SYSTEM xxxxxxxxxx
    07/30/2003 23:49:02 540 Successful Network Logon Success audit Critical
    Security ANONYMOUS LOGON xxxxxxxxxx
    07/30/2003 23:49:24 680 Account Used for Logon Failure audit Critical
    Security SYSTEM xxxxxxxxxx
    07/30/2003 23:49:24 529 LF: Bad user name/password Failure audit
    Critical Security SYSTEM xxxxxxxxxx
    07/30/2003 23:49:33 680 Account Used for Logon Success audit Critical
    Security SYSTEM xxxxxxxxxx

    This appears in my event log everytime I start my pc. I am using a
    firewall & XP-Home

    thanx

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------

  • Next message: Edward Rustin: "Re: IP address allocation"

    Relevant Pages

    • RE: What does this mean??? Event Log Scan
      ... have you done pen-testing on your PC to see if your firewall is ... Security SYSTEM ... 07/30/2003 23:49:02 540 Successful Network Logon Success audit Critical ... 07/30/2003 23:49:24 680 Account Used for Logon Failure audit Critical ...
      (Security-Basics)
    • Re: To: BO RAXO
      ... this is Usenet not some board or blogsite. ... ramblings are indicative of "no life, ... use to access the security system that I have set up in my home. ... See if you can get an account with Panix.com. ...
      (alt.true-crime)
    • Re: To: BO RAXO
      ... this is Usenet not some board or blogsite. ... ramblings are indicative of "no life, ... use to access the security system that I have set up in my home. ... See if you can get an account with Panix.com. ...
      (alt.true-crime)
    • RE: Event ID 40960 and 40961 lsasrv
      ... The account operators have their XP Pro ... > Event Source: LSASRV ... > server HTTP/Mmaserver. ... > The Security System could not establish a secured connection with the ...
      (microsoft.public.windows.server.active_directory)
    • Re: Is this genuine?
      ... Before Octomber 1st all our clients should activate new account protection system. ... You have been randomly chosen for the final testing of the account protection system. ... Please note that on and after September 1st you will have to use the new security system, otherwise your account will be blocked until your identity is proven. ...
      (uk.people.silversurfers)