Linux – See all failed SSH login attempts

You need to be the root user or run the commands with sudo

Debian Clones

View all failed login attempts

View all successful logins

RedHat/CentOS Clones

View all failed login attempts

View all successful logins

5 replies
  1. Joe Cooper
    Joe Cooper says:

    This is a better way of getting failed login attempts. Your’s misses out most of the attempts

     

    cat /var/log/secure | grep ‘sshd.*Failed password’

    Reply

Leave a Reply

Want to join the discussion?
Feel free to contribute!

Leave a Reply

Your email address will not be published. Required fields are marked *