How to display IP of ssh user in message?
Burke, Thomas G.
tg.burke at ngc.com
Wed Apr 27 15:38:51 UTC 2005
Probably won't matter, as most of them are scripts...
-Tom
-----Original Message-----
From: redhat-list-bounces at redhat.com [mailto:redhat-list-bounces at redhat.com]On Behalf Of Ryan Golhar
Sent: Friday, April 15, 2005 11:28 AM
To: Burke, Thomas G.; 'General Red Hat Linux discussion list'
Subject: RE: How to display IP of ssh user in message?
My message might have been a bit confusing. When a user logs in via
ssh, a message can be displayed. I forget what file this is in. I want
to add their IP address to the message so they know that we know where
they are coming from...
-----Original Message-----
From: Burke, Thomas G. [ mailto:tg.burke at ngc.com]
Sent: Friday, April 15, 2005 11:15 AM
To: golharam at umdnj.edu; General Red Hat Linux discussion list
Subject: RE: How to display IP of ssh user in message?
This data shows up in one of the other logs - not sure which off the top
of my head, tho.
-Tom
-----Original Message-----
From: redhat-list-bounces at redhat.com
[ mailto:redhat-list-bounces at redhat.com]On Behalf Of Ryan Golhar
Sent: Friday, April 15, 2005 11:02 AM
To: 'General Red Hat Linux discussion list'
Subject: How to display IP of ssh user in message?
Hi all,
I notice in our logs that we get a large amount of failed attempts to
log in. Short of blocking these domains using iptables, I was wondering
if there is a way to display the IP address of the user logging in, in a
message so they know we have their IP address?
sshd:
Invalid Users:
Unknown Account: 602 Time(s)
Authentication Failures:
xfs (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
root (nitrogen.umdnj.edu ): 1 Time(s)
root (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
unknown (138.67-18-71.reverse.theplanet.com ): 595 Time(s)
unknown (218.153.147.92 ): 6 Time(s)
daemon (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
root (218.153.147.92 ): 3 Time(s)
rpc (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
unknown (10.136.16.244 ): 1 Time(s)
smmsp (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
More information about the redhat-list
mailing list