Help Center/ Host Security Service/ User Guide (ME-Abu Dhabi Region)/ FAQs/ Abnormal Logins/ What Can I Do If an Alarm Indicating Successful Login Is Reported?

Updated on 2024-07-12 GMT+08:00

View PDF

What Can I Do If an Alarm Indicating Successful Login Is Reported?

This alarm does not necessarily indicate a security issue. If you have selected Successful Logins in the Real-Time Alarm Notifications area, HSS will send alarms when detecting any successful logins.
If all the accounts on your ECSs are managed by a single administrator, such alarms help them conveniently monitor system accounts.
If the system accounts are managed by multiple administrators, or different servers are managed by different administrators, too many alarms will interrupt O&M personnel. In this case, you are advised to disable the alarm item.
Alarms on this event do not necessarily indicate attacks. Logins from valid IP addresses are not attacks.

Parent topic: Abnormal Logins

Previous topic: How Do I Check the User IP address of a Remote Login?

Next topic: Can I Disable Remote Login Detection?

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.