Check log file for interactive SSH logins
# failed attempt grep sshd.\*Failed /var/log/auth.log | less # successful attempts grep sshd.\*Accepted /var/log/auth.log | less
# failed attempt grep sshd.\*Failed /var/log/auth.log | less # successful attempts grep sshd.\*Accepted /var/log/auth.log | less