# Multiple access attempts from one IP

**URL:** <https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478>\
**Category:** Dashboarding\
**Tags:** dynatrace-managed, data-explorer\
**Created:** [June 30, 2023, 2:39pm UTC](https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478 "2023-06-30T14:39:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![gustavodutra](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gustavodutra/32/35020_2.png) [@gustavodutra](https://community.dynatrace.com/u/gustavodutra)\
**Post date:** [June 30, 2023, 2:39pm UTC](https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478/1 "2023-06-30T14:39:12Z")

</div>

Hey, guys.

I would like to know if it is possible to create a metric or dashboard to monitor the number of access attempts in my application.

I’m going through some attempted attacks and would like to make it easier to see and follow.

It’s possible?

---

<div class="post-metadata">

**Author:** ![dannemca](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/dannemca/32/7215_2.png) [@dannemca](https://community.dynatrace.com/u/dannemca)\
**Post date:** [June 30, 2023, 4:51pm UTC](https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478/2 "2023-06-30T16:51:43Z")

</div>

You can create a [Request Attribute](https://www.dynatrace.com/support/help/platform-modules/applications-and-microservices/services/request-attributes) based on the client IP and then, use the [MultiDimensional Analysis](https://www.dynatrace.com/support/help/platform-modules/applications-and-microservices/multidimensional-analysis) to create a metric for it and make it visible in a dashboard.

---

<div class="post-metadata">

**Author:** ![gustavodutra](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gustavodutra/32/35020_2.png) [@gustavodutra](https://community.dynatrace.com/u/gustavodutra)\
**Post date:** [June 30, 2023, 6:15pm UTC](https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478/3 "2023-06-30T18:15:11Z")

</div>

Thanks for the feedback.

But I would like to create this for any IP that tries to access my app repeatedly, not for a specific IP.

It’s possible?

Example: An IP tries to make 500 connections in a period and this appears in a metric for the security team to evaluate.

---

<div class="post-metadata">

**Author:** ![dannemca](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/dannemca/32/7215_2.png) [@dannemca](https://community.dynatrace.com/u/dannemca)\
**Post date:** [June 30, 2023, 6:52pm UTC](https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478/4 "2023-06-30T18:52:36Z")

</div>

Yep, creating a request attribute will captures any Client IP that is making requests to yours systems.

See the example below:

 ![Screenshot 2023-06-30 at 15.48.16.png](https://global.discourse-cdn.com/dynatrace/original/3X/4/8/487286c074fc59216cb43bb6b1c3d4dd4e786598.png)

You can save this view and let your Sec team use it, or create a metric for it, using the Req Attribute as dimension and then you can go crazy, put it in a Dashboard, create a metric event for it, and so on…

---

<div class="post-metadata">

**Author:** ![gustavodutra](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/gustavodutra/32/35020_2.png) [@gustavodutra](https://community.dynatrace.com/u/gustavodutra)\
**Post date:** [July 6, 2023, 12:01pm UTC](https://community.dynatrace.com/t/multiple-access-attempts-from-one-ip/40478/5 "2023-07-06T12:01:49Z")

</div>

Thank you for help.