Checking which account is getting excessive login attempts

E

emmanuel

Verified User
Joined
Mar 26, 2007
Messages
88
DA will block the IP after X attempts. But in the security log, it only indicates something along the lines of this

2011:04:27-13:56:11: 121.7.68.91 has tried to log in 30 times, unsuccessfully, this time into (null)'s account ***
2011:04:27-13:56:11: Adding 121.7.68.91 to the blacklist file: /usr/local/directadmin/data/admin/ip_blacklist

Is there any way to tell what account was the IP attempting to log into? Or is null really account being attempted?
 
It could just mean they hit the submit button without filling the form. If it really was an account it should list which account.
 
You must log in or register to reply here.
Back
Top