login failed

[j773303]

The user1 try to login, so it could be found many login failed message in the syslog.log; Is it possible to know the ip-address of user1 login machine? Thanks.

[V.Tamilvanan · Accepted solution]

Hi,

#last -R
#lastb -R -----This will work for u.
#who -u

[Robert-Jan Goossens]

Hi,

# lastb -R
# who -a /var/adm/wtmp | grep user1

Hope this helps,
Robert-Jan

[Bharat Katkar]

Yes you can:

For active user (Currently logged in)

# who -R

For data in the History

# lastb -R

All the best