Topic
3 replies Latest Post - ‏2013-02-24T06:14:37Z by SystemAdmin
SystemAdmin
SystemAdmin
6902 Posts
ACCEPTED ANSWER

Pinned topic Failed Login on AIX 5

‏2013-02-18T12:36:34Z |
Dears ,
i have a failed login logs extracted from AIX 5 server , the issue is that when the attempt was from FTP the log describe it as FTP and when its Telnet the log describe it as "pts" but the unusual is to have a failed login with root user from an ip address of the following format "10_10_10_10" , i need to help me discover the tool or the way the one was trying to log into the server ...

Best Regards
Hiba Karmi
Updated on 2013-02-24T06:14:37Z at 2013-02-24T06:14:37Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    6902 Posts
    ACCEPTED ANSWER

    Re: Failed Login on AIX 5

    ‏2013-02-18T22:39:51Z  in response to SystemAdmin
    So what I got is that you can`t access to your AIX machine thru SSH,right?
    • SystemAdmin
      SystemAdmin
      6902 Posts
      ACCEPTED ANSWER

      Re: Failed Login on AIX 5

      ‏2013-02-19T05:58:10Z  in response to SystemAdmin
      No Sir ,
      i need to check what is the reason behind having failed login record in failed login logs at this format 10_10_10_10 , i mean do the user was trying to use ssh ? or rlogin as example or what ! to have this IP format in the login failed logs ..

      i need to investigate a root failed login on my server with an IP address , but i really dont know what exactly the user was used to do that failed login ..

      Best Regards