Add IP address to Login Audit script
Add the IP address of the device from the Failed login event in the Login Audit script.
5
votes

-
Diskel Support commented
I was with N-Able, their failed login's show the Ip address with number of times it failed to login then a list of usernames with the number of times each user has failed to log in. This is handy as I could then block these IP addresses. or the entire subnet.