Viewing Login Attempts
How do I view if login attempts are being made to my server? Also, how do I view the login dates and timestamps for the accounts on my server?
1 Reply
To view the login attempts being made to your server, you can view the "auth.log" or "secure" log files, depending on which distribution that you are running.
less /var/log/auth.log
less /var/log/secure
To view the login dates and timestamps for the accounts on your server, you can run the following commands:
last
lastlog
I also recommend installing and running a security auditing tool called "Lynis" for your server. This tool scans a server for security vulnerabilities and offers suggestions on how to rectify them. We also have a guide in regards to securing your server.
https://www.linode.com/docs/security/securing-your-server/
https://cisofy.com/lynis/