Ssh failed logins /var/log/btmp

Securityssh

On a VPS where I host some blogs /var/log/btmp file is fairly old – but is at 6.2 gigs.

I assume this means a lot of failed login attempts?
Is this common over the course of a year ? Bots trying to get server access?

Best Answer

If you would like to rotate that log every month you can try add the below code to /etc/logrotate.conf

/var/log/btmp {
monthly
minsize 1M
create 0600 root utmp
rotate 1
}