I am looking for the location of the log file that shows failed + successful ssh logins. I am trying to determine any IP addresses to block.

  • As a heads-up: there are pre-made scripts that might achieve what you're looking for, like sshblack for example.
    – Asmus
    Jun 25 '14 at 21:49

The information will be in /var/log/system.log

In Lion and earlier versions of OS X, the file is /var/log/secure.log

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.