3070=Maximum number of login attempts reached for user root

[shwork]

hi

i check the oxe have below log, how can i check what ip try to connect the root account. thanks.


30/08/17 08:04:10 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 08:20:16 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 08:26:26 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 08:27:23 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 08:43:39 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 09:00:30 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 09:20:28 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 09:21:58 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 09:45:33 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 09:46:48 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 09:51:03 000001M|--WARNING---| INCIDENTS FLOW HAS BEEN REDIRECTED TO THE OUTFALL QUEUE
30/08/17 09:53:21 000001M|--WARNING---| INCIDENTS FLOW HAS BEEN REDIRECTED TO THE OUTFALL QUEUE
30/08/17 10:27:34 000001M|--WARNING---| INCIDENTS FLOW HAS BEEN REDIRECTED TO THE OUTFALL QUEUE
30/08/17 11:39:14 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 12:12:15 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 12:42:54 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root
30/08/17 13:10:27 000001M|---/--/-/---|=3:3070=Maximum number of login attempts reached for user root

[sadim]

Hi,

Check the file secure under /var/log

Regards

[giovanni.attolini]

/var/log/auth.log