Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

taalvoel Author

Level 1

9 points

How can I see a list of failed SSH logins?

Is there a bash script I can write to be updated when a failed SSH login takes place and alert me via GeekTook?

I'm using Mountain Lion.

Thank you.

Posted on Dec 8, 2012 4:56 PM

Best reply

BobHarris

Level 9

53,291 points

Posted on Dec 28, 2012 8:09 AM

Look at /var/log/secure.log

The sshd entries will tell you about ssh connection attempts, both successful as well as failures.

View in context

16 replies

BobHarris

Level 9

53,291 points

Jan 4, 2013 3:04 PM in response to taalvoel

If everything you enable is password protected and do have strong passwords, then sure. See the <https://www.grc.com/haystack.htm> web site to see if you have strong passwords.

But you can also open services that do not require a password. That would allow the outside world to see stuff you make available.

By default Mac OS X does not have any open ports so as shipped it does not allow access. As you open things, you are now responsible to make sure you are secure.

How can I see a list of failed SSH logins?