(on 02/20/2020 at 9:03pm mountain time, Ed said)
> I don't know how you've gone about identifying "hack attempts".
I was looking at journalctl output for something else; I don't recall
what. It was years ago. I happened to notice many entries reporting
login attempts to root and other login names coming from various ip
addresses. Someone in the fedora users list at that time noted that
there was an interesting assortment of countries from which those
attempts were originating.
I tried "last" and "lastb". Those look useful. Thank-you, Ed. I
believe those are what I am looking for.
Back to John's suggestions.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx