Differences

This shows you the differences between two versions of the page.

--- computing:miscadmin [2024/01/28 20:32] – oemb1905
+++ computing:miscadmin [2024/02/09 10:56] – oemb1905
@@ Line 292: / Line 292: @@
   sudo systemctl status unattended-upgrades
-Next ...
+Next ... ssh failed attempts
+  grep "Failed password" /var/log/auth.log
+  journalctl _SYSTEMD_UNIT=ssh.service | egrep "Failed|Failure"
+  faillock --user <user>
+  grep "authentication failure" /var/log/auth.log | awk '{ print $14 }' | cut -b7-  | sort | uniq -c
  --- //[[jonathan@haacksnetworking.org|oemb1905]] 2024/01/28 20:31//

Haack's Wiki