Jimmy's weblog

Since you are my readers, and I have not been much of a traveller, I will not talk about people a thousand miles off, but come as near home as I can. As the time is short, I will leave out all the flattery, and retain all the criticism. — Henry David Thoreau

Counting failed OSX authentication attempts

Wednesday April 27, 2005 11:10

Wondering just how many failed authentication attempts your OSX machine has been getting? Try…

sudo grep "failed to auth" /var/log/secure.log | sed "s/^.*user \(.*\) for.*$/\1/" | sort | uniq -c

…and you’ll see something like…

14 abpusr01-u
1 ben
1 ben-u
2 billy
3 black
2 blow
2 bogdan
3 cosmin
19 cyrus
12 daemon
...
30 mysql
30 nobody
7 patrick
6 postfix
1530 root
...
24 www

This entry was posted on Wednesday, April 27th, 2005 at 11:34 and is filed under OS X. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

Leave a Reply

XHTML: You can use these tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>