Linux How do I display failed login attempt?
/var/log/faillog is a log file for failed login attempts. This file maintains a count of login failures and the limits for each account. The file is fixed length record, indexed by numerical ID. Each record contains the count of login failures since the last successful login; the maximum number of failures before the account is disabled; the line the last login failure occurred on; and the date the last login failure occurred. Since data is in binary format you need to use faillog command to display failed login attempt.
How do I use faillog?
To display failed login attempt for user root with following command:
$ faillog -u root
Output:
Login Failures Maximum Latest On root 0 0 02/17/06 14:49:52 +0530 tty1
To display all failed login attempt try:
$ faillog -a
Output:
Login Failures Maximum Latest On root 0 0 02/17/06 14:49:52 +0530 tty1 rocky 0 0 02/27/06 22:05:03 +0530 tty1 usr1 2 0 02/16/06 15:05:01 +0530 tty2
See also:
Continue reading rest of the Linux pam_tally - login counter Configuration series.
Contents
- How to: Configure Linux to track and log failed login attempt recoreds
- Linux How do I display failed login attempt?
- Linux Failed Login Control: Lock and Unlock User Accounts Using PAM
E-mail this to a Friend
Printable Version
Linux Powered Asus EEE Laptop PC From $299
You may also be interested in other helpful articles:
- How to: Configure Linux to track and log failed login attempt recoreds
- Howto: Protect account against a password cracking attack
- Linux > how do I find out all failed login attempts via ssh/telnet?
- Protecting Linux against automated attackers
- Linux Failed Login Control: Lock and Unlock User Accounts Using PAM
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Tags: binary format, check the failed login attempts in log file, faillog command, how to get information about failure logs in linux, linux login log, login attempts, login failure, maximum number, pam track failed logins, ssh login, suse login attempts logfile
Recent Comments
Today ~ 3 Comments
Today ~ 22 Comments
Today ~ 3 Comments
Today ~ 7 Comments
Today ~ 1 Comment