← All labs
LogsIntermediate~6 min
Trace the failed logins
/var/log/auth.log recorded a failed SSH login from an unknown host. Find the offending line and save the attacker's IP address into ~/breach.txt for the incident report.
Your mission
- Capture the failed-login source IP into `~/breach.txt`
Everything here is simulated and safe — break things freely. Your progress is tracked on the right and saved in this browser.
player@shellquest — find-the-breach