Linux Ask!

Linux Ask! is a Q & A web site specific for Linux related questions. Questions are collected, answered and audited by experienced Linux users.

Jan 312010
 

How to check failed login attempt in Ubuntu

Answer:

Every login attempts are logged in the file /var/log/auth.log in Ubuntu.

To check failed login attempt(s),

E.g.

# grep 'Failed password' /var/log/auth.log

Jan 31 14:00:27 localhost sshd[16141]: Failed password...
Jan 31 14:00:46 localhost sshd[16141]: Failed password...
Jan 31 14:00:49 localhost sshd[16141]: Failed password...