(SSH) 접속로그 확인

ssh 포트를 통해 들어온 로그를 확인 해 보는 법

1. 접속 로그 

[root@korx3 ~]# last

root     pts/8        61.75.69.130     Thu Dec 29 14:18   still logged in

root     pts/8        223.33.164.6     Thu Dec 29 13:45 - 13:50  (00:05)

root     pts/7        61.75.69.130     Thu Dec 29 13:19   still logged in

root     pts/4        61.75.69.130     Thu Dec 29 12:55   still logged in

root     pts/1        61.75.69.130     Thu Dec 29 12:47   still logged in

root     pts/1        61.75.69.130     Thu Dec 29 10:13 - 12:29  (02:16)

root     pts/1        14.38.69.30      Wed Dec 28 20:48 - 21:59  (01:10)

root     pts/4        61.75.69.130     Wed Dec 28 11:01 - 21:44  (10:43)

2. 접속 실패 로그

[root@korx3 ~]# last -f /var/log/btmp

root     ssh:notty    61.75.69.130     Thu Dec 29 12:55   still logged in

root     ssh:notty    61.75.69.130     Thu Dec 29 10:13 - 12:55  (02:41)

root     ssh:notty    61.75.69.130     Wed Dec 28 10:32 - 10:13  (23:41)

root     ssh:notty    219.251.48.26    Tue Dec 27 17:39 - 10:32  (16:53)

root     ssh:notty    61.75.69.130     Mon Dec 26 16:21 - 17:39 (1+01:17)

root     ssh:notty    61.75.69.130     Mon Dec 26 15:15 - 16:21  (01:05)

root     ssh:notty    61.75.69.130     Fri Dec 23 15:06 - 15:15 (3+00:09)

root     ssh:notty    61.75.69.130     Fri Dec 23 12:54 - 15:06  (02:11)

root     ssh:notty    61.75.69.130     Fri Dec 23 11:01 - 12:54  (01:53)

root     ssh:notty    61.75.69.130     Fri Dec 23 10:36 - 11:01  (00:25)

root     ssh:notty    61.75.69.130     Fri Dec 23 10:35 - 10:36  (00:00)

root     ssh:notty    61.75.69.130     Thu Dec 22 14:36 - 10:35  (19:59)

root     ssh:notty    61.75.69.130     Thu Dec 22 14:35 - 14:36  (00:01)