$ file /etc/security/failedlogin
/etc/security/failedlogin: data or International Language text

Tobe able to read this file and list failed login attempts, use who -a /etc/security/failedlogin command:

$ who -a /etc/security/failedlogin
root      - ssh         Jan 21 09:43      ?
root      - ssh         Jan 21 13:25      ?
root      - ssh         Jan 21 14:36      ?
root      - ssh         Jan 22 10:35      ?
root      - ssh         Jan 22 14:34      ?
root      - ssh         Jan 22 14:34      ?
root      - ssh         Jan 22 14:34      ?
root      - ssh         Jan 22 16:49      ?
root      - ssh         Jan 22 18:46      ?
root      - ssh         Jan 22 22:36      ?
root      - ssh         Jan 23 11:51      ?
root      - ssh         Jan 23 13:58      ?
root      - ssh         Jan 23 14:13      ?
root      - ssh         Jan 23 14:24      ?
root      - ssh         Jan 23 17:03      ?
root      - ssh         Jan 24 06:35      ?

LEAVE A REPLY

Please enter your comment!
Please enter your name here