The latest articles on DEV Community by Nikhil Yadav (@heynik27). https://dev.to/heynik27 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F432772%2F2aed7d5f-ab08-4f5f-b0a3-aa0ae75aa85f.jpg https://dev.to/heynik27 en Nikhil Yadav Thu, 23 Jul 2020 07:03:05 +0000 https://dev.to/heynik27/day-10-insufficient-logging-and-monitoring-tryhackme-owasp-top-10-challenge-1252 https://dev.to/heynik27/day-10-insufficient-logging-and-monitoring-tryhackme-owasp-top-10-challenge-1252 <p>[Task 31] [Day 10] Insufficient Logging and Monitoring </p> <h1> 1 What IP address is the attacker using? </h1> <p>Answer&gt; 49.99.13.16</p> <h1> 2 What kind of attack is being carried out? </h1> <p>Answer&gt; brute force</p> <p>Explanation:</p> <p>As you see in the given login log file status-code is client-side error code (401) Unauthorised attempting with this IP address 49.99.13.16 and continuously attempting for user login in a short sequence of time which means some automated tools (like brute-force) Trying combinations of usernames and passwords to gain access to users’ accounts.</p> tryhackme