SSH – See login attempts

Folder-ssh-iconThe SSH log file is located here (on Debian based systems): /var/log/auth.log
And to view it, just type (need root or sudo):
cat /var/log/auth.log

This file most likely contains a lot of information. At least if it’s connected to the internet. All commands run through sudo will also show in this log. Here is a few examples to grab some of the useful information out from it.

See attempts to login at non existing users (often from simple “hack” scripts)
cat /var/log/auth.log | grep ‘sshd.* Invalid’
Note the capital I in Invalid.

See attempts to login at root user
cat /var/log/auth.log | grep ‘sshd.* Failed.* root’
Note the capital F in Failed.

See successful logins
cat /var/log/auth.log | grep ‘sshd.* opened’

The grep command is a text search function. If you want to know more about how to use grep, have a look here.

Happy investigating!

About Author

Related Posts

php8 gd

PHP8 gd Activate after installation

PHP8 GD activate after installation. GD doesn’t get activated by default. Not even a reboot after installation will activate it. So how do we do it? In…

Debian 12: linux-image-6.1.0-10amd64

Troubleshooting dependency issues in Debian 12: Resolving linux-image-6.1.0-10amd64 package dependency problems. If you installed the Debian 12 from the live image the issue is the raspi-firmware. Even…

4 Best Free Nas Software That Is Open Source

Free NAS software or operating systems that are free to use and will turn a computer into a NAS more advanced than the dedicated boxes sold. What…

Raspbian default password

Raspbian default password

Looking for the Raspbian default password? It is the most essential username and password that you will need for your raspberry. At least if you are running…

OpenMediaVault default password

OpenMediaVault default password

OpenMediaVault default password is printed in the documentation. I did not see it the first time I installed it either. So I had to do some detective…

Debian change dns

Debian change DNS settings to a new DNS

Debian change DNS settings for speed improvement or privacy. It is really easy to do. So let us see how it’s done and get to it. The…

Leave a Reply