Auditd
Buy Self-Hosted Protection
Live
Demo
auditd — system audit
Cache: 00:34:33 Refresh
Detected 7 login attempts from external IPs
Logins today: 4  |  Sudo: 31  |  Blocked: / 7  |  User: admin
Logins today
4
External login attempts
7
Sudo today
31
Log
11
External login attempts (7)
TimeUserIP / HostTerminalStatus
2026-08-15 00:34:33 root 198.51.100.19 — Not blocked
2026-08-14 18:56:10 root 198.51.100.35 — Not blocked
2026-08-14 21:04:57 root 198.51.100.29 — Not blocked
2026-08-14 11:40:06 root 198.51.100.17 — Not blocked
2026-08-14 14:42:41 root 198.51.100.17 — Not blocked
2026-08-13 22:05:08 root 198.51.100.34 — Not blocked
2026-08-13 13:20:33 root 198.51.100.18 — Not blocked
Sudo commands today 31 significant / 31 total
TimeUserCommandResult
2026-08-15 00:34:33 admin /usr/bin/systemctl status fail2ban OK
2026-08-15 00:13:28 admin /usr/bin/apt update OK
2026-08-14 23:21:01 admin /usr/sbin/ufw status OK
2026-08-14 22:33:42 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-14 23:51:41 admin /usr/bin/docker ps OK
2026-08-14 20:53:18 admin /usr/sbin/fail2ban-client status OK
2026-08-14 22:06:03 admin /usr/bin/systemctl restart nginx OK
2026-08-14 20:48:41 admin /usr/bin/journalctl -u sshd OK
2026-08-14 20:14:41 admin /usr/sbin/aa-status OK
2026-08-14 21:14:36 admin /usr/bin/crontab -l OK
2026-08-14 16:22:33 admin /usr/sbin/lynis audit system OK
2026-08-14 17:51:13 admin /usr/bin/cscli decisions list OK
2026-08-14 22:28:21 admin /usr/bin/systemctl status fail2ban OK
2026-08-14 16:34:25 admin /usr/bin/apt update OK
2026-08-14 18:19:21 admin /usr/sbin/ufw status OK
2026-08-14 18:49:18 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-14 16:55:21 admin /usr/bin/docker ps OK
2026-08-14 18:54:33 admin /usr/sbin/fail2ban-client status OK
2026-08-14 14:31:33 admin /usr/bin/systemctl restart nginx OK
2026-08-14 18:15:49 admin /usr/bin/journalctl -u sshd OK
2026-08-14 17:02:33 admin /usr/sbin/aa-status OK
2026-08-14 19:02:24 admin /usr/bin/crontab -l OK
2026-08-14 14:30:39 admin /usr/sbin/lynis audit system OK
2026-08-14 20:44:33 admin /usr/bin/cscli decisions list OK
2026-08-14 05:02:57 admin /usr/bin/systemctl status fail2ban OK
2026-08-14 08:10:48 admin /usr/bin/apt update OK
2026-08-14 03:25:45 admin /usr/sbin/ufw status OK
2026-08-14 11:22:33 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-14 14:40:01 admin /usr/bin/docker ps OK
2026-08-14 15:33:13 admin /usr/sbin/fail2ban-client status OK
2026-08-14 09:41:33 admin /usr/bin/systemctl restart nginx OK
Logins / logouts today (4)
TimeTypeUserIP / HostResultStatus
2026-08-15 00:34:33 USER_LOGIN admin 203.0.113.20 OK Not blocked
2026-08-14 20:05:32 USER_LOGIN admin 203.0.113.20 OK Not blocked
2026-08-14 20:32:35 USER_LOGIN admin 203.0.113.20 OK Not blocked
2026-08-13 20:38:48 USER_LOGIN admin 203.0.113.20 OK Not blocked
/var/log/audit/audit.log
Arcivéo - Security Monitor © 2026