I had a script that tried to determine the failed login attempts for the last 5 min (+5 sec) like this:
# diff <(sudo lastb -Fw -t $(date -d "305 sec ago" +%Y%m%d%H%M%S)) <(sudo lastb -Fw) | grep "^>" Now, I am using the following alternative (which does not require `root` user): $ journalctl --since "305 sec ago" /*bin/sshd /*bin/login --grep "(FAILED|Invalid user)" 2>/dev/null Any suggestions or improvements are welcome. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to util-linux in Ubuntu. https://bugs.launchpad.net/bugs/2084854 Title: last and lastb missing in 24.10 Status in util-linux package in Ubuntu: Confirmed Bug description: The last and lastb commands have disappeared from util-linux at 24.10! This is odd, as the binaries from 24.04 actually run on 24.10, so the data is clearly still being collected and in the same format. Ubuntu: 24.10 (Oracular Oriole). Package: util-linux Version: 2.40.2-1ubuntu1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/2084854/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
