Tagged Questions
0
votes
1answer
109 views
SSH Log: “Accepted password for user…”
I have only port 29999 open for SSH connections. But in the log file I see entries like this:
Accepted password for user1 from 190.101.200.100 port 55805 ssh2
saying that a connection was accepted ...
0
votes
2answers
117 views
Improve SSH logs
I want to improve my SSH log. I would like to basically be able to see failed attempts with ip address and the password used. is that possible?
Right now I see something like this:
Failed password ...
2
votes
2answers
2k views
Is there an easy way to see a log of SCP activity on a server (ala /var/log/secure for ssh login)?
On Linux systems, /var/log/secure (or similar, depending on distro) shows all SSH login activity. Is there a similar log for SCP? If not, what's a good approach to enabling logging of scp activity ...
7
votes
1answer
322 views
SSH Brute Force Dictionaries
Request for logs please.
So, I had an interesting question posed to me around geographical trends in SSH brute force attempts. The question being "has anybody ever looked into the prevalent SSH ...
