Failed Login Attempts-Non Existent Accounts

From: JM_Metal (JMMetal_at_discussions.microsoft.com)
Date: 03/24/05

  • Next message: Todd: "Block user from surfing Web" 
    Date: Thu, 24 Mar 2005 13:01:03 -0800

    Hi All,

    We have a W2K3 server getting hit with login attempts to acounts that do not
    exist (ex: admin) on the server (brute force DOS attempts maybe). I can deny
    access when I see the IP address of the offender, but performance is
    degrading during the attack. Is there a util that will report via e-mail or
    pager when an login attempt hits a pre-defined threshold, or shut them out
    immediatly?

     I have policies in place to limit failed login attempts for legit accounts.
    I could not find any native windows functions for this. Any help is greatly
    apprciated.

    Thanks,
    Jeff

  • Next message: Todd: "Block user from surfing Web"

    Relevant Pages

    • Re: Web login problem
      ... Your so-caled colution will work only if the user isnt some twitchy 14 yr old that can hit the button faster than the redirect can happen.. ... the Login page, this means that if they hit Back from the Login page ... When user logs out the cookie is disposed. ... Or specify the time in minutes before a cached page expires: ...
      (microsoft.public.dotnet.languages.vb)
    • RE: Wrong Form Submit
      ... I would venture the best solution is moving away from having the login on ... > search thesite. ... when i enter data into the search and hit ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: running an event when user presses ENTER from a txt box
      ... > We have a form with login and password text boxes. ... > have the system execute the same code as if they had hit the OK button. ... > Private Sub Password_KeyDown ...
      (microsoft.public.access.forms)
    • Intranet Design Question
      ... Management wants ... people to be required to login when they hit the website from either internal ...
      (microsoft.public.inetserver.iis.security)
    • Re: How to redirect any page to Login.aspx? I tried but...
      ... you should be able to hit the page over and over ... RedirectFromLoginPage() in the login.aspx page. ... MCP: +I, SE, SD, DBA ... after I login to the website typing: ...
      (microsoft.public.dotnet.framework.aspnet)