logs for unauthorized ssh logins

dinakumar12 · 07-02-2010, 01:44 AM

Hi everyone,

can any one please tell me where we can find the sshlogin details with ip addresses. Do we have any logfile for that.

Please its urgent.

Thanks in advance,
Dinesh.

acid_kewpie · 07-02-2010, 01:45 AM

usually in /var/log/secure.

dinakumar12 · 07-02-2010, 03:46 AM

Hi,

Any other log files other than this.

vikas027 · 07-02-2010, 05:22 AM

/var/log/faillog has Failed Login Attempts of users.

This file can be read by faillog command.

dinakumar12 · 07-02-2010, 07:13 AM

Hi,

i tried to read the /var/log/faillog file using faillog command but nothing opened, do we have any special way of executing this command.

vap16oct1984 · 07-02-2010, 07:16 AM

Yes you can read this just go to the path and read it by using commands less cat etc..

vikas027 · 07-02-2010, 07:21 AM

Quote:

Originally Posted by dinakumar12

Hi,

i tried to read the /var/log/faillog file using faillog command but nothing opened, do we have any special way of executing this command.

What is the size of your /var/log/faillog . Post output of

Code:

du -sk /var/log/faillog

.

dinakumar12 · 07-02-2010, 07:58 AM

hi,

i got the output as 8

vikas027 · 07-16-2010, 12:37 AM

Quote:

Originally Posted by dinakumar12

hi,

i got the output as 8

Sorry, for long delay

Pls give output of

Code:

faillog -p