How to display IP of ssh user in message?

Ryan Golhar golharam at umdnj.edu
Fri Apr 15 15:01:33 UTC 2005


Hi all,

I notice in our logs that we get a large amount of failed attempts to
log in.  Short of blocking these domains using iptables, I was wondering
if there is a way to display the IP address of the user logging in, in a
message so they know we have their IP address?  

sshd:
   Invalid Users:
      Unknown Account: 602 Time(s)
   Authentication Failures:
      xfs (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
      root (nitrogen.umdnj.edu ): 1 Time(s)
      root (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
      unknown (138.67-18-71.reverse.theplanet.com ): 595 Time(s)
      unknown (218.153.147.92 ): 6 Time(s)
      daemon (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
      root (218.153.147.92 ): 3 Time(s)
      rpc (138.67-18-71.reverse.theplanet.com ): 1 Time(s)
      unknown (10.136.16.244 ): 1 Time(s)
      smmsp (138.67-18-71.reverse.theplanet.com ): 1 Time(s)






More information about the redhat-list mailing list