I am looking for the location of the log file that shows failed + successful ssh logins. I am trying to determine any IP addresses to block.

  • As a heads-up: there are pre-made scripts that might achieve what you're looking for, like sshblack for example. – Asmus Jun 25 '14 at 21:49

The information will be in /var/log/system.log

In Lion and earlier versions of OS X, the file is /var/log/secure.log

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.