cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Multiple access attempts from one IP

gustavodutra
Helper

Hey, guys.

I would like to know if it is possible to create a metric or dashboard to monitor the number of access attempts in my application.

I'm going through some attempted attacks and would like to make it easier to see and follow.

It's possible?

4 REPLIES 4

dannemca
DynaMight Guru
DynaMight Guru

You can create a Request Attribute based on the client IP and then, use the MultiDimensional Analysis to create a metric for it and make it visible in a dashboard.

Site Reliability Engineer @ Kyndryl

Thanks for the feedback.

But I would like to create this for any IP that tries to access my app repeatedly, not for a specific IP.

It's possible?

Example: An IP tries to make 500 connections in a period and this appears in a metric for the security team to evaluate.

Yep, creating a request attribute will captures any Client IP that is making requests to yours systems.

See the example below:

Screenshot 2023-06-30 at 15.48.16.png

You can save this view and let your Sec team use it, or create a metric for it, using the Req Attribute as dimension and then you can go crazy, put it in a Dashboard, create a metric event for it, and so on...

Site Reliability Engineer @ Kyndryl

Thank you for help.

Featured Posts