Originally posted by: SystemAdmin

Dears ,
i have a failed login logs extracted from AIX 5 server , the issue is that when the attempt was from FTP the log describe it as FTP and when its Telnet the log describe it as "pts" but the unusual is to have a failed login with root user from an ip address of the following format "10_10_10_10" , i need to help me discover the tool or the way the one was trying to log into the server ...

Best Regards
Hiba Karmi
#AIX-Forum

Originally posted by: SystemAdmin

So what I got is that you can`t access to your AIX machine thru SSH,right?
#AIX-Forum

Originally posted by: SystemAdmin

No Sir ,
i need to check what is the reason behind having failed login record in failed login logs at this format 10_10_10_10 , i mean do the user was trying to use ssh ? or rlogin as example or what ! to have this IP format in the login failed logs ..

i need to investigate a root failed login on my server with an IP address , but i really dont know what exactly the user was used to do that failed login ..

Best Regards
#AIX-Forum

Originally posted by: SystemAdmin

Please ,
help me in this issue
#AIX-Forum