What log do I check for failed login attempts?

**Turnip** · November 23rd, 2007, 7:41 PM

Hey guys/gals -

A client of mine failed at webmail login five consecutive times last week, and my server banned his IP. Understandable.

This afternoon, I was setting up an external blog editor (Mars Edit 2), and I'm guessing that my pwd was wrong...and why my server subsequently banned MY IP. I'm cool with that, I think.

I added my IP to the whitelist manually (csf -a), but I'd love to know where to check to find little tidbits that show me WHY a person was blacklisted. What log does that show up in?

Thanks for the help...

r/T

**removed** · November 24th, 2007, 2:18 AM

grep ipaddress /var/log/messages should be able to show you what the problematic request was.

snide · November 27th, 2007, 12:48 PM

CSF and LFD will automatically email those attempts to you once installed and configured.

November 23rd, 2007, 7:41 PM	#1 (permalink)
Turnip Surpass Fan Seasoned Poster Joined in Sep 2004 32 posts Gave thanks: 2 Thanked 3 times	What log do I check for failed login attempts? Hey guys/gals - A client of mine failed at webmail login five consecutive times last week, and my server banned his IP. Understandable. This afternoon, I was setting up an external blog editor (Mars Edit 2), and I'm guessing that my pwd was wrong...and why my server subsequently banned MY IP. I'm cool with that, I think. I added my IP to the whitelist manually (csf -a), but I'd love to know where to check to find little tidbits that show me WHY a person was blacklisted. What log does that show up in? Thanks for the help... r/T __________________ Tim "Turnip" Glinatsis Dedicated Server of Turnips turnipnetwork.com

November 24th, 2007, 2:18 AM	#2 (permalink)
removed Surpass Abuse Admin Super #1 Joined in Mar 2005 Lives in Houston, TX 7,574 posts Gave thanks: 10 Thanked 263 times	grep ipaddress /var/log/messages should be able to show you what the problematic request was. __________________ Surpass Abuse & Security unofficial IRC chat: #surpass irc.blessed.net (efnet)

November 27th, 2007, 12:48 PM	#3 (permalink)
snide Registered User Super #1 Joined in Jul 2003 Lives in So. NJ 1,557 posts Gave thanks: 0 Thanked 9 times	CSF and LFD will automatically email those attempts to you once installed and configured. __________________ Dime13 \| Pass17

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)