Check Failed Password Attempts

I recently tried out a handy software that specializes in parsing through the /var/log/secure.log file in search of failed authorization attempts. What stands out about this application is its ease of use and efficient presentation. With just a few clicks, it provides a summary of the total number of failed attempts and successes per user.

What I found particularly helpful was the ability to toggle additional features like displaying the full log listing of each failed attempt, successful attempt, and SSH information from the /var/log/system.log. The preferences make it easy to switch on or off these options to fit your needs.

When launching the application, it prompts you for your administrative password if your secure.log file isn't empty. This authentication is necessary for the application to read the secure.log file which is protected by system ownership and generally not accessible to regular users. It's important to note that the password isn't stored anywhere and the application doesn't make any modifications to your system's files or settings. It's purely used to grant access to the protected log.

Overall, I highly recommend this software for anyone looking for a simple and efficient way to parse through their secure.log file and gain more insight into failed authorization attempts.