Esteve

Hello, In the future we will block access to this server from unknown IP addresses, but now, we want to receive a notification "ONLY" when we receive "5 o more" failed login attempts in RDP and SQL. I try "Pulseway Counters", but don't work...Any idea?

Hello. We have a server with a lot of brute force attacks RDP: 3389 SQL: 1433 We can see in event viewer two repeated events (failed loing attempts) eventID: 4625 Microsoft Windows Security Auditing eventID: 18456 MSSQLSERVER We want to receive a notification when we receive "5 o more" failed login attempts in RDP and SQL. Can we use "Pulseway Counters" or "Pulseway evenlog"? How?