tomcat -- An attempt was made to authenticate the locked user

iteye_10289

于 2013-04-03 11:47:48 发布

阅读量400

点赞数

CC 4.0 BY-SA版权

分类专栏： javaweb应用问题解决文章标签： java

本文链接：https://blog.youkuaiyun.com/iteye_10289/article/details/82485545

javaweb应用问题解决专栏收录该内容

98 篇文章

订阅专栏

本文讨论了针对Manager应用的暴力破解尝试及LockOutRealm如何通过锁定用户来阻止此类攻击。建议在网络层面尽早封锁攻击来源IP。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

<date> org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "admin"



That looks like a brute force attack against the Manager application. The LockoutRealm has done its job and locked the user to prevent the attack from being successful. However, it does mean the legitimate user won't be able to log in either. Assuming the attacks are coming from a single IP, block that IP as early as you can in your network and move on.