i have a failed login logs extracted from AIX 5 server , the issue is that when the attempt was from FTP the log describe it as FTP and when its Telnet the log describe it as "pts" but the unusual is to have a failed login with root user from an ip address of the following format "10_10_10_10" , i need to help me discover the tool or the way the one was trying to log into the server ...
This topic has been locked.
3 replies Latest Post - 2013-02-24T06:14:37Z by SystemAdmin
Pinned topic Failed Login on AIX 5
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
Updated on 2013-02-24T06:14:37Z at 2013-02-24T06:14:37Z by SystemAdmin
Re: Failed Login on AIX 52013-02-19T05:58:10Z in response to SystemAdminNo Sir ,
i need to check what is the reason behind having failed login record in failed login logs at this format 10_10_10_10 , i mean do the user was trying to use ssh ? or rlogin as example or what ! to have this IP format in the login failed logs ..
i need to investigate a root failed login on my server with an IP address , but i really dont know what exactly the user was used to do that failed login ..