Auditd — Arcivéo · demo.arciveo.com

auditd — systemaudit

Cache: 22:49:19 Opdatér

Detected 7 login attempts from external IPs
Logins i dag: 6 | Sudo: 33 | Blokeret: / 7 | Bruger: admin

Logins i dag

Eksterne loginforsøg

Sudo i dag

Log

Eksterne loginforsøg (7)

Tid	Bruger	IP / Vært	Terminal	Status
2026-08-13 22:49:19	root	`198.51.100.14`	—	Ikke blokeret
2026-08-13 15:22:23	root	`198.51.100.15`	—	Ikke blokeret
2026-08-13 14:01:43	root	`198.51.100.19`	—	Ikke blokeret
2026-08-13 04:38:40	root	`198.51.100.12`	—	Ikke blokeret
2026-08-13 12:39:55	root	`198.51.100.25`	—	Ikke blokeret
2026-08-13 15:58:39	root	`198.51.100.25`	—	Ikke blokeret
2026-08-12 11:00:25	root	`198.51.100.24`	—	Ikke blokeret

Sudo-kommandoer i dag 33 significant / 33 total

Tid	Bruger	Kommando	Resultat
2026-08-13 22:49:19	admin	`/usr/bin/systemctl status fail2ban`	OK
2026-08-13 22:08:12	admin	`/usr/bin/apt update`	OK
2026-08-13 22:09:43	admin	`/usr/sbin/ufw status`	OK
2026-08-13 21:44:37	admin	`/usr/bin/tail -f /var/log/auth.log`	OK
2026-08-13 21:45:43	admin	`/usr/bin/docker ps`	OK
2026-08-13 18:48:29	admin	`/usr/sbin/fail2ban-client status`	OK
2026-08-13 19:06:31	admin	`/usr/bin/systemctl restart nginx`	OK
2026-08-13 18:25:53	admin	`/usr/bin/journalctl -u sshd`	OK
2026-08-13 18:40:23	admin	`/usr/sbin/aa-status`	OK
2026-08-13 18:34:37	admin	`/usr/bin/crontab -l`	OK
2026-08-13 20:02:59	admin	`/usr/sbin/lynis audit system`	OK
2026-08-13 17:35:38	admin	`/usr/bin/cscli decisions list`	OK
2026-08-13 20:13:43	admin	`/usr/bin/systemctl status fail2ban`	OK
2026-08-13 13:36:49	admin	`/usr/bin/apt update`	OK
2026-08-13 14:36:03	admin	`/usr/sbin/ufw status`	OK
2026-08-13 16:43:04	admin	`/usr/bin/tail -f /var/log/auth.log`	OK
2026-08-13 17:19:43	admin	`/usr/bin/docker ps`	OK
2026-08-13 11:30:44	admin	`/usr/sbin/fail2ban-client status`	OK
2026-08-13 14:40:19	admin	`/usr/bin/systemctl restart nginx`	OK
2026-08-13 16:20:46	admin	`/usr/bin/journalctl -u sshd`	OK
2026-08-13 10:35:59	admin	`/usr/sbin/aa-status`	OK
2026-08-13 16:11:22	admin	`/usr/bin/crontab -l`	OK
2026-08-13 10:07:23	admin	`/usr/sbin/lynis audit system`	OK
2026-08-13 05:25:30	admin	`/usr/bin/cscli decisions list`	OK
2026-08-13 11:00:31	admin	`/usr/bin/systemctl status fail2ban`	OK
2026-08-13 11:29:19	admin	`/usr/bin/apt update`	OK
2026-08-13 17:29:31	admin	`/usr/sbin/ufw status`	OK
2026-08-13 17:14:58	admin	`/usr/bin/tail -f /var/log/auth.log`	OK
2026-08-13 11:58:19	admin	`/usr/bin/docker ps`	OK
2026-08-13 11:29:45	admin	`/usr/sbin/fail2ban-client status`	OK
2026-08-13 11:14:19	admin	`/usr/bin/systemctl restart nginx`	OK
2026-08-13 12:49:28	admin	`/usr/bin/journalctl -u sshd`	OK
2026-08-12 22:57:19	admin	`/usr/sbin/aa-status`	OK

Logins / logouts i dag (6)

Tid	Type	Bruger	IP / Vært	Resultat	Status
2026-08-13 22:49:19	USER_LOGIN	admin	`203.0.113.20`	OK	Ikke blokeret
2026-08-13 20:28:42	USER_LOGIN	admin	`203.0.113.20`	OK	Ikke blokeret
2026-08-13 12:07:15	USER_LOGIN	admin	`203.0.113.20`	OK	Ikke blokeret
2026-08-13 15:55:10	USER_LOGIN	admin	`203.0.113.20`	OK	Ikke blokeret
2026-08-13 05:26:11	USER_LOGIN	admin	`203.0.113.20`	OK	Ikke blokeret
2026-08-11 18:38:54	USER_LOGIN	admin	`203.0.113.20`	OK	Ikke blokeret

/var/log/audit/audit.log

auditd — systemaudit

Demotilstand