i have a failed login logs extracted from AIX 5 server , the issue is that when the attempt was from FTP the log describe it as FTP and when its Telnet the log describe it as "pts" but the unusual is to have a failed login with root user from an ip address of the following format "10_10_10_10" , i need to help me discover the tool or the way the one was trying to log into the server ...
Re: Failed Login on AIX 52013-02-19T05:58:10ZThis is the accepted answer. This is the accepted answer.
- SystemAdmin 110000D4XK
i need to check what is the reason behind having failed login record in failed login logs at this format 10_10_10_10 , i mean do the user was trying to use ssh ? or rlogin as example or what ! to have this IP format in the login failed logs ..
i need to investigate a root failed login on my server with an IP address , but i really dont know what exactly the user was used to do that failed login ..