how do find all failed login attempts via ssh?
- 8 Answers
- 20373 Views
- TCL, I also Faced
- E-Mail Answers
Answers were Sorted based on User's Feedback
Answer / vimal kumar k, technomenace.co
Failed ssh logs are either written in /var/log/messages, or
/var/log/secure (configurable in /etc/syslog.conf). I am
assuming that the failed login attempts are recorded in
/var/log/secure:
grep ' authentication failure' /var/log/secure | sed -e
's/^\(.*\)\(rhost.*\)$/\2/p' | tr -s " " | cut -f2 -d"=" |
cut -f1 -d" " | sort -n | uniq -c
Will show you the count, and the IP/hostname of machines
that tried to access the system via ssh
| Is This Answer Correct ? | 20 Yes | 3 No |
Answer / vineeth joseph abraham
The correct way to find out fail ssh login attempts are
tail -f /var/log/secure | grep Failed
| Is This Answer Correct ? | 16 Yes | 5 No |
Answer / rani
"lastb" is the command to find all failed login attempts
| Is This Answer Correct ? | 11 Yes | 1 No |
Answer / satyadev
tail -f /var/log/secure | grep FAILED
or
lastb
| Is This Answer Correct ? | 8 Yes | 1 No |
Answer / anoop
The command is ,
cat /var/log/messages | grep "Failed password"
it will show all the user which is not able to login.
| Is This Answer Correct ? | 3 Yes | 7 No |
Answer / raj
'who' or 'w' is the command used to find the users who
logged in the system and their attempts, with the help of
some options
| Is This Answer Correct ? | 3 Yes | 19 No |
check network connectivity
check correct ipaddress
ping ipaddress
| Is This Answer Correct ? | 1 Yes | 25 No |
You have a tab delimited file called phonenos and want to change each tab to four spaces. What command can you use to accomplish this?
How to reset root password via command Redhat 5.2
Which command puts a script to sleep untill a signal is recieved?
What is 9 in kill?
What is file and example?
What is the command to change from /etc/passwd file to /etc/shadow file?
What is unix finger command?
How do I stress test my cpu?
You attempt to delete a file called sales.mem using the rm command but the command fails. What could be the problem?
What is the programming language for linux?
If we transfer 100 files by ftp to remote server, how to know the files are successfully transfer or some file are not transferred?
What is command line in unix?
Linux Commands 
