Prelude correlator "Brute Force attack/Multiple failed login against a single account"

Jaime Ventura <[email protected]> Tue, 16 Mar 2010 10:48:29 +0000
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Hello.
I'm using prelude for over a 1 year, and i've decided to update to 1.0.0
RC releases of the several prelude components.
Everything seams to work fine, except for Prelude correlator.
I notice that Prelude correlator(1.0.0~rc4) is detecting "Brute Force
attack/Multiple failed login against a single account" while all events
are "login successfully".

Can anyone help me you on this?
Thanks.
Jaime

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user
screen.jpg (image/jpeg, 98.7 KB) - not displayed