Editing Sshd logs

<code>[[sshd]]</code><ref>https://man.cx/sshd(1)</ref> secure shell daemon.


== Logs: [[journalctl]] -u ssh ==

Authentication related messages:
 error: maximum authentication attempts exceeded for root from 10.10.10.110 port 40314 ssh2 [preauth]

 Failed password for invalid user USER_NAME from 91.191.76.22 port 43522 ssh2

 Dec 01 07:01:05 SERVER sshd[15647]: PAM service(sshd) ignoring max retries; 5 > 3 sshd[15647]: PAM service(sshd) ignoring max retries; 5 > 3
 See: <code>[[MaxAuthTries]]</code> in <code>[[sshd_config]]</code>

 Dec 11 09:29:36 SERVER sshd[5506]: Received disconnect from 103.217.11.10 port 43200:11: Bye Bye [preauth]

== See also ==
* {{OpenSSH}}
* <code>/var/log/[[auth.log]]</code>
* {{journalctl}}
* {{PAM}}
* {{fail2ban}}

[[Category:ssh]]
[[Categoy:security]]