B.16. Lab B.16: View Failed Login Attempts

This lab requires a Linux workstation.

One of the signs that an attacker might be attempting to break into a system will be failed login attempts. The /var/log/faillog file keeps track of failed authentication attempts. Follow these steps to view this information on a workstation:

  1. As root, from the desktop, choose Programs Accessories Terminal.

    NOTE

    Your menu choices might differ slightly based upon the Linux distribution that you are using.

  2. Type the command faillog. The list that appears, if any, will ...

Get CompTIA Security+™ Deluxe: Study Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial