Do Linode have last login history?
Im wondering if Linode have a last login activity like Google does? It's a feature which logs all login information such a IP Address, location, time, etc.
I do get notification when I added my other devices to trusted device list, but I don't get a notification saying there was a new login, so Im wondering if this feature is implemented on Linode?
4 Replies
✓ Best Answer
This is the only login information regarding "Linode accounts themselves". If you're talking about login history to https://cloud.linode.com, you'll have to consult the docs for the platform API and see what's available.
If you're talking about login history to some website you've created/deployed, that is proprietary to you, those are not Linux logins. Those are logins to your web app. You have to keep the history.
— sw
I do get notification when I added my other devices to trusted device list, but I don't get a notification saying there was a new login, so Im wondering if this feature is implemented on Linode?
A Linode by itself doesn't have anything except what you put on it. A Linux distro may keep the information you're looking for…
Logins (remote and local) are noted in /var/log/wtmp. Authorization events are noted in /var/log/auth.log. The content of the two of these together probably give you what you want.
You need to keep in mind, though, that authorization events are not restricted to interactive sessions so all kinds of things perform them -- cron(8) jobs and any command run with sudo(1) being the most notable. For an authorization event, the IP address is not stored (this is authorization only…not connection). Also, since both /var/log/auth.log and /var/log/wtmp contains sensitive information, you need to have elevated privileges to even read them.
Here's a series of self-help articles from DO regarding Debian/Ubuntu that may be useful:
IMHO, Part 3 is probably the most relevant to your question. It explains how to use the information in /var/log/wtmp. /var/log/wtmp is not a text file so you need to understand it's format.
-- sw
I'm not talking about the server on Linode, but the Linode accounts themselves, Google does have a logs whether you login from different devices.
Yes, I mean login to Linode dashboard. I already added some of my devices to trusted list, just wondering what can I do to make my account more secure.
Thanks for your answer