Lesson 13

Date: 6/27/2018
Linux Network Security
Linux System Administration


Identifying SSH login attacks in the system logs
Exercise
  • On testub VM, check the lines in log file auth.log and see ssh login attempts to user account jerry: 
    grep jerry /var/log/auth.log  | grep auth
    See the successfull attempt to login: 
    grep jerry /var/log/auth.log  | grep -E -v '(error|[Ff]ail)'

  • On testcent VM, check the lines in log file secure and see ssh login attempts to user account jerry: 
    grep jerry /var/log/secure  | grep auth
    See the successfull attempt to login: 
    grep jerry /var/log/secure  | grep -E -v '(error|[Ff]ail)'



    • Take me to the Course Website