Check log file for interactive SSH logins

# failed attempt
grep sshd.\*Failed /var/log/auth.log | less

# successful attempts
grep sshd.\*Accepted /var/log/auth.log | less

Leave a Reply