Users that try and fail to log in to your system leave a record in the system logs. This is how to find out what time this was and which user they attempted to log in as. The /var/log/auth.log file is the one that contains the login records. All successful…
Read MoreReading information about logins on a Linux system is very useful when you are running a Linux machine. The last command will print information about the last logins on a Linux system. ubuntu ~ $ last ubuntu pts/0 ip-10-8-0-6.ap-s Sun Apr 19 10:25 still logged in wtmp begins Sun…
Read MoreThis command will display a count of successful logins to your Linux machine. jason-H55-USB3% grep ‘session opened’ /var/log/auth.log | wc -l 67jason-H55-USB3% grep ‘session opened’ /var/log/auth.log | wc -l 67 This will display a count of failed login attempts to your Linux machine. jason-H55-USB3% grep ‘FAILED LOGIN’ /var/log/auth.log | wc…
Read More