Tag Archives: failed login

You are here:

Home
Entries tagged with "failed login"

WordPress: Show Last Login Date & Time For WordPress Users

SecurityBy alex December 5, 2010 Leave a comment

Recently there was a 0-day vulnerability posted for WordPress which allows users with edit post capabilities to issue SQL injection attacks against the WordPress site. Depending on the type of site that you run this isn’t a huge deal unless you allow any users that sign up to edit and publish articles on the WordPress site. One of the things that could help assist in this type of scenario is knowing who logins in and when as well as knowing if there are failed logins which could help indicate malicious activity. Below is information on a plugin that can accomplish both of these goals.

How to Read /var/log/btmp, Rotate the btmp Log With Logrotate

InsightsBy alex July 3, 2009 26 Comments

The btmp log keeps track of failed login attempts. I have seen on a default linux setup with logrotate configured where the btmp log is left out of rotation and eventually grows out of hand. So first you want to make sure that the btmp log is rotated using logrotate with the below information.

Log Location:/var/log/btmp

To rotate the btmp log add the below to the logrotate.conf file located in the /etc directory.