I have only port 29999 open for SSH connections. But in the log file I see entries like this: Accepted password for user1 from 220.127.116.11 port 55805 ssh2 saying that a connection was accepted ...
I want to improve my SSH log. I would like to basically be able to see failed attempts with ip address and the password used. is that possible? Right now I see something like this: Failed password ...
On Linux systems, /var/log/secure (or similar, depending on distro) shows all SSH login activity. Is there a similar log for SCP? If not, what's a good approach to enabling logging of scp activity ...
Request for logs please. So, I had an interesting question posed to me around geographical trends in SSH brute force attempts. The question being "has anybody ever looked into the prevalent SSH ...