LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-25-2005, 10:17 AM   #1
matrixcubed
LQ Newbie
 
Registered: May 2004
Location: Gatineau, QC
Distribution: Ubuntu 6.10
Posts: 25

Rep: Reputation: 15
Failed login reporting


Hi all,

The main amount of activity I see on my server is login attempts on SSH, and always has to do with password attempts.

I'm investigating different software I can use to effectively report such activity to providers. I guess this elusive program's features would include a log analyzer, nslookup parser, intrusion reporting to ISP, and firewall-rule appending for repeated offenses.

Can anyone recommend a cron-able script or program which handles this sort of activity?

Thanks!
 
Old 06-25-2005, 02:15 PM   #2
nixcraft
Member
 
Registered: Nov 2004
Location: BIOS
Distribution: RHEL3.0, FreeBSD 5.x, Debian 3.x, Soaris x86 v10
Posts: 379

Rep: Reputation: 30
You can use grep as shown here http://www.cyberciti.biz/nixcraft/vi...led-login.html but better way is use logwatch the which can send an email and has lot of ther features too see http://www2.logwatch.org:81/

Hope this helps!

Last edited by nixcraft; 06-25-2005 at 02:16 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Mandriva - login failed smagee12 Linux - Newbie 5 10-23-2005 03:24 PM
Login Failed abulafiar Linux - General 3 08-15-2004 09:23 PM
root login failed ! marudhu Linux - General 5 07-02-2003 12:27 PM
Login Failed gmiles Linux - Newbie 6 08-23-2002 03:16 PM
login failed! clodur Linux - Software 1 08-17-2001 03:37 PM


All times are GMT -5. The time now is 02:35 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration