Find the IP address of the user who locked a Oracle account
It's been awhile since the last post planning to start again with a small and simple post. OK.. the background, there is a application user account in db, which has " FAILED_LOGIN_ATTEMPTS" set to 3 in the users profile. Now the user is locked because of invalid logins and we need to identify the culprit. Requirments - We need the auditing enabled in the database. Then we can use below queries to get the required details. 1. select account_status, username, LOCK_DATE from dba_users where username like '%USERNAME%'; 2. select AU.userid ,substr(AU.comment$text, 68,21) as "Host / IP_ADDRESS" from sys.aud$ AU where to_char(AU.ntimestamp#, 'DD-MM-YY') IN ('28-04-14') and AU.returncode=1017