What does "100 logons failed since last start of PRTG" in the log mean?

Votes:

0

Your Vote:

Up

Down

In my log (Main menu=>Logs=>System Events=>Status Messages) I can see these three messages:

9/26/2011 9:20:59 AM 
   Starting Core Server: PRTG Network Monitor 9.1.0.1548 PRTG Network Monitor 500

9/26/2011 9:22:01 AM 
   Logon attempts slowed down due to failed logon margin exceeded in a short amount of time

9/26/2011 10:21:24 AM 
   100 logons failed since last start of PRTG

At the same time I notice that logging into the web interface takes a few seconds and most actions inside the Enterprise Console also take a few seconds.

What is going on?

login prtg slow web-server

Created on Sep 27, 2011 12:49:42 PM by Dirk Paessler [Paessler Support] (9,613) ●3 ●3



3 Replies

Accepted Answer

Votes:

0

Your Vote:

Up

Down

Too many failed logins have triggered PRTG's overload protection.

In the log sample shown in the question above it took 2 minutes after the start of the PRTG server to initiate the protection mode. Then it took about one hour to gather 100 more incorrect logins.

See What is Overload Protection?

Created on Sep 27, 2011 1:13:09 PM by Dirk Paessler [Paessler Support] (9,613) ●3 ●3

Last change on Sep 28, 2011 3:41:27 PM by Dirk Paessler [Paessler Support] (9,613) ●3 ●3



Votes:

0

Your Vote:

Up

Down

Is there any place that would show where the failed logons are coming from? I have had a look through the logs on the PRTG web interface and I do not see where the failed logons are coming from???

Created on Oct 25, 2011 7:26:40 PM by Patrick Brennan (0) ●1



Votes:

0

Your Vote:

Up

Down

Patrick, please see the "How can I find these rogue systems?"-part in the article linked by Dirk: What is Overload Protection?

Note: Please install the latest PRTG version so the login attempts are actually written into the log.

Created on Oct 26, 2011 11:39:41 AM by Torsten Lindner [Paessler Support] (15,450) ●3 ●1

Last change on Oct 26, 2011 11:44:33 AM by Daniel Zobel [Paessler Support] (21,383) ●3 ●3



Please log in or register to enter your reply.


Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.

Back to www.paessler.com

PRTG
Network Monitor
Intuitive to Use.
Easy to manage.

150.000 administrators have chosen PRTG to monitor their network. Find out how you can reduce cost, increase QoS and ease planning, as well.

Visit
www.paessler.com

What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general. You are invited to get involved by asking and answering questions!

Learn more

Top Tags


View all Tags