What's the meaning of data.srcip=::1 ???

265 views

Skip to first unread message

unread,

Jan 12, 2021, 6:23:41 AM1/12/21

to Wazuh mailing list

Hi,

I found many logon failed log on my server , but the data.srcip=::1 ,that is not a real ip address, What's the meaning of data.srcip=::1 ?

where the logon attempt from ?

unread,

Jan 12, 2021, 8:31:38 AM1/12/21

to Wazuh mailing list

Hello lida.xp!

::1 is the loopback address in IPv6. Think of it as the IPv6 version of 127.0.0.1.

Therefore, it seems that those logon attempts come from your local machine, can you confirm that they are yours?

I hope I was helpful.

Best regards,

Alfonso Ruiz-Bravo

Reply all

Reply to author

Forward

0 new messages