Phil's Notes

Get Bad Login Attempts in Oracle

oraclepl/sql

If you want to audit your database to see when and where bad login attempts are happening, you can run the query below:

select *
from dba_audit_trail
where returncode = 1017;

Here are a few other return codes you can check for:

Return Codes

Return Code Description
0 Success
1017 Bad login attempt
28000 Account is locked