Database security

Can Informix Online Dynamic Server detect and alert you to multiple failed remote login attempts? In other words, if a hacker discovered our servername, hostname and maybe a username, could he run a password dictionary program to try to hack into the database without being detected? If he got a password by this method, he could then get into our UNIX system which would normally detect the multiple failed logins generated by a password dictionary. ... While writing this I discovered that failed logins get written to the message log. Well that answers one question. I posted this anyway becuase this is stuff every DBA should know. (BTW I did RTFM and I didn't find this anywhere). The question now is this: Does anybody have a script for detecting repeated failed login messages in the log file? --Jeff