Lesson 13

Date: 6/28/2017
Linux Network Security
Linux System Administration


Identifying SSH login attacks in the system logs
Exercise
  • On testub VM, check the lines in log file auth.log and see ssh login attempts to user account jerry:
    grep jerry /var/log/auth.log  | grep auth
    
    See the successfull attempt to login:
    grep jerry /var/log/auth.log  | grep -E -v '(error|[Ff]ail)'
    

  • On testcent VM, check the lines in log file secure and see ssh login attempts to user account jerry:
    grep jerry /var/log/secure  | grep auth
    
    See the successfull attempt to login:
    grep jerry /var/log/secure  | grep -E -v '(error|[Ff]ail)'
    




  • Take me to the Course Website