Viewing Login Attempts
How do I view if login attempts are being made to my server? Also, how do I view the login dates and timestamps for the accounts on my server?
To view the login attempts being made to your server, you can view the "auth.log" or "secure" log files, depending on which distribution that you are running.
less /var/log/auth.log less /var/log/secure
To view the login dates and timestamps for the accounts on your server, you can run the following commands:
I also recommend installing and running a security auditing tool called "Lynis" for your server. This tool scans a server for security vulnerabilities and offers suggestions on how to rectify them. We also have a guide in regards to securing your server.