Jan 312010
How to check failed login attempt in Ubuntu
Answer:
Every login attempts are logged in the file /var/log/auth.log in Ubuntu.
To check failed login attempt(s),
E.g.
# grep 'Failed password' /var/log/auth.log
Jan 31 14:00:27 localhost sshd[16141]: Failed password...
Jan 31 14:00:46 localhost sshd[16141]: Failed password...
Jan 31 14:00:49 localhost sshd[16141]: Failed password...