c2 failed login correlation to an origination IP/host ?

Discussion in 'Scripting' started by Simo Sentissi, Jun 22, 2005.

  1. hey there

    I wanted to know how people correlate a failed login attempt from within sql
    logs or c2 logs and the origination address. I am thinking maybe people
    looks at the events logs, but do those say what are the connections from
    wich the failed loging started ??

    I am in a dillema !
     
    Simo Sentissi, Jun 22, 2005
    #1
    1. Advertisements

  2. Simo Sentissi

    John Bell Guest

    Hi

    A guess... but can you link this into your firewall logs somethow?

    John
     
    John Bell, Jun 23, 2005
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.