Check log file for interactive SSH logins

# failed attempt
grep sshd.\*Failed /var/log/auth.log | less

# successful attempts
grep sshd.\*Accepted /var/log/auth.log | less

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.