You are on page 1of 8

Event_Category Event_Name Source_IP:Por Destination_IP: Username

t Port

Failure Audit: An account


User Login Failure failed to log on 172.30.10.4:0 172.30.10.4:0 NULL

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 soportecsp
account

Failure Audit: The domain


controller failed to validate fortinet_fss
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 o
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 jsardon
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 phohagen
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 lmachicado
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 bhernandez
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 NULL
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 ccaballero
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 vjarama
account
Failure Audit: The domain
controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 acastillom
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 rtorres
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 tws_user
account

Failure Audit: The domain


controller failed to validate
General Authentication Failed the credentials for an 172.30.10.4:0 172.30.10.4:0 ralbujar
account

Failure Audit: An account


User Login Failure 172.30.10.4:0 172.30.10.4:0 tws_user
failed to log on

Failure Audit: An account


User Login Failure 172.30.10.4:0 172.30.10.4:0 uatagnt
failed to log on
Failure Audit: An account
User Login Failure 172.30.10.4:0 172.30.10.4:0 ibmxuser
failed to log on

Failure Audit: The domain


controller failed to validate 172.30.10.4:0
General Authentication Failed 172.30.10.4:0 falegre
the credentials for an
account
Log_Source Log_Source_Type Event_Count

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 262

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 248

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 147

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 69

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 67

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 43

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 43

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 40

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 29

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 13
WindowsAuthServer@ BRECA AD Microsoft Windows
172.30.10.4 - CEN-SO-WIN-43 Security Event Log 4

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 2

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 1

WindowsAuthServer@ BRECA AD Microsoft Windows


172.30.10.4 - CEN-SO-WIN-43 Security Event Log 1

WindowsAuthServer@ BRECA AD Microsoft Windows


1
172.30.10.4 - CEN-SO-WIN-43 Security Event Log

WindowsAuthServer@ BRECA AD Microsoft Windows


1
172.30.10.4 - CEN-SO-WIN-43 Security Event Log
WindowsAuthServer@ BRECA AD Microsoft Windows
1
172.30.10.4 - CEN-SO-WIN-43 Security Event Log

WindowsAuthServer@ BRECA AD Microsoft Windows


1
172.30.10.4 - CEN-SO-WIN-43 Security Event Log
Comentarios

El usuario null se pudo haber originado por un error al logearse y no completo la acción.

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida


No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

No se encontraron eventos de auntenticación fallida

La cuenta de servicio no existe en el domino de Breca, pero aún se encuentra metada de la cuenta en
los servicios del servidor SDC02BRE intentando autenticar.

La cuenta de servicio no existe en el domino de Breca, pero aún se encuentra metada de la cuenta en
los servicios del servidor SDC02BRE intentando autenticar.
La cuenta de servicio no existe en el domino de Breca, pero aún se encuentra metada de la cuenta en
los servicios del servidor SDC02BRE intentando autenticar.

No se encontraron eventos de auntenticación fallida

You might also like