Auditd
auditd — system audit
Cache: 21:55:46 Refresh
Detected 2 login attempts from external IPs
Logins today: 3  |  Sudo: 47  |  Blocked: / 2  |  User: admin
Logins today
3
External login attempts
2
Sudo today
47
Log
5
External login attempts (2)
TimeUserIP / HostTerminalStatus
2026-08-13 21:55:46 root 198.51.100.24 Not blocked
2026-08-13 19:08:20 root 198.51.100.22 Not blocked
Sudo commands today 47 significant / 47 total
TimeUserCommandResult
2026-08-13 21:55:46 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 21:18:13 admin /usr/bin/apt update OK
2026-08-13 21:04:34 admin /usr/sbin/ufw status OK
2026-08-13 19:29:43 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 19:53:02 admin /usr/bin/docker ps OK
2026-08-13 18:54:51 admin /usr/sbin/fail2ban-client status OK
2026-08-13 18:45:04 admin /usr/bin/systemctl restart nginx OK
2026-08-13 18:21:48 admin /usr/bin/journalctl -u sshd OK
2026-08-13 18:04:10 admin /usr/sbin/aa-status OK
2026-08-13 18:47:58 admin /usr/bin/crontab -l OK
2026-08-13 14:08:56 admin /usr/sbin/lynis audit system OK
2026-08-13 16:59:52 admin /usr/bin/cscli decisions list OK
2026-08-13 12:58:10 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 14:42:26 admin /usr/bin/apt update OK
2026-08-13 15:22:36 admin /usr/sbin/ufw status OK
2026-08-13 19:19:46 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 13:50:42 admin /usr/bin/docker ps OK
2026-08-13 17:47:34 admin /usr/sbin/fail2ban-client status OK
2026-08-13 09:35:22 admin /usr/bin/systemctl restart nginx OK
2026-08-13 13:27:50 admin /usr/bin/journalctl -u sshd OK
2026-08-13 12:04:46 admin /usr/sbin/aa-status OK
2026-08-13 18:10:43 admin /usr/bin/crontab -l OK
2026-08-13 09:44:16 admin /usr/sbin/lynis audit system OK
2026-08-13 13:49:42 admin /usr/bin/cscli decisions list OK
2026-08-13 17:24:34 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 08:17:51 admin /usr/bin/apt update OK
2026-08-13 02:57:50 admin /usr/sbin/ufw status OK
2026-08-13 12:37:19 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 13:38:46 admin /usr/bin/docker ps OK
2026-08-13 13:22:57 admin /usr/sbin/fail2ban-client status OK
2026-08-13 04:01:46 admin /usr/bin/systemctl restart nginx OK
2026-08-12 22:19:04 admin /usr/bin/journalctl -u sshd OK
2026-08-12 21:30:42 admin /usr/sbin/aa-status OK
2026-08-13 03:37:58 admin /usr/bin/crontab -l OK
2026-08-13 04:26:52 admin /usr/sbin/lynis audit system OK
2026-08-12 21:56:06 admin /usr/bin/cscli decisions list OK
2026-08-13 00:49:46 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 00:57:46 admin /usr/bin/apt update OK
2026-08-13 04:21:54 admin /usr/sbin/ufw status OK
2026-08-13 03:29:28 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-12 19:20:26 admin /usr/bin/docker ps OK
2026-08-13 06:29:10 admin /usr/sbin/fail2ban-client status OK
2026-08-12 16:12:10 admin /usr/bin/systemctl restart nginx OK
2026-08-13 02:36:55 admin /usr/bin/journalctl -u sshd OK
2026-08-13 06:54:30 admin /usr/sbin/aa-status OK
2026-08-13 08:55:46 admin /usr/bin/crontab -l OK
2026-08-12 23:25:40 admin /usr/sbin/lynis audit system OK
Logins / logouts today (3)
TimeTypeUserIP / HostResultStatus
2026-08-13 21:55:46 USER_LOGIN admin 203.0.113.20 OK Not blocked
2026-08-13 16:19:24 USER_LOGIN admin 203.0.113.20 OK Not blocked
2026-08-13 15:32:00 USER_LOGIN admin 203.0.113.20 OK Not blocked
/var/log/audit/audit.log
Arcivéo - Security Monitor © 2026