Threat Level: green Handler on Duty: Mark Baggett

SANS ISC: Multiple "failed logon" attempts - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Multiple "failed logon" attempts
Log/Event console picking up an unusual amount of “failed attempts” ID4776. Traced one external IP and blocked on firewall. Login attempts with various usernames still coming in. Traced some IPs to cameras inside our network. Turned cameras off but attempts are still coming in. Looks like it’s inside our network. So far, no real accounts have been compromise but this might not be for long. Anyone dealt with this type of attack before? Best approach, tools, etc.? Advise appreciated. William

1 Posts

Sign Up for Free or Log In to start participating in the conversation!