I have many more list of potential brute force attempts currently detected, I want to know about Failed Logons and Failed Mass Logons. when brute force attempts detected for Failed Logons and Failed Mass Logons? What do you mean by Failed Logons and Failed Mass Logons?
The difference between the two is the fact that "Failed Mass Logons" is if a certain IP address attempts multiple usernames. "Failed Logons" is a certain IP address attempting a single username multiple times.