Auditd
구매 Self-Hosted Protection
Live
Demo
auditd — 시스템 감사
캐시: 22:44:12 새로고침
Detected 6 login attempts from external IPs
오늘 로그인 수: 3  |  Sudo: 35  |  차단됨: / 6  |  사용자: admin
오늘 로그인 수
3
외부 로그인 시도
6
오늘 Sudo 수
35
Log
9
외부 로그인 시도 (6)
시간사용자IP / 호스트터미널상태
2026-08-13 22:44:12 root 198.51.100.17 — 차단 안 됨
2026-08-13 21:38:21 root 198.51.100.14 — 차단 안 됨
2026-08-13 13:51:22 root 198.51.100.26 — 차단 안 됨
2026-08-13 14:20:39 root 198.51.100.27 — 차단 안 됨
2026-08-13 03:32:40 root 198.51.100.30 — 차단 안 됨
2026-08-13 07:28:37 root 198.51.100.32 — 차단 안 됨
오늘 Sudo 명령 35 significant / 35 total
시간사용자명령결과
2026-08-13 22:44:12 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 22:03:47 admin /usr/bin/apt update OK
2026-08-13 22:05:18 admin /usr/sbin/ufw status OK
2026-08-13 20:16:21 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 20:02:12 admin /usr/bin/docker ps OK
2026-08-13 21:34:32 admin /usr/sbin/fail2ban-client status OK
2026-08-13 19:52:36 admin /usr/bin/systemctl restart nginx OK
2026-08-13 21:28:01 admin /usr/bin/journalctl -u sshd OK
2026-08-13 20:35:56 admin /usr/sbin/aa-status OK
2026-08-13 16:07:18 admin /usr/bin/crontab -l OK
2026-08-13 16:22:52 admin /usr/sbin/lynis audit system OK
2026-08-13 18:48:15 admin /usr/bin/cscli decisions list OK
2026-08-13 17:48:24 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 14:00:05 admin /usr/bin/apt update OK
2026-08-13 12:12:06 admin /usr/sbin/ufw status OK
2026-08-13 16:20:57 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 18:35:24 admin /usr/bin/docker ps OK
2026-08-13 12:53:10 admin /usr/sbin/fail2ban-client status OK
2026-08-13 10:04:00 admin /usr/bin/systemctl restart nginx OK
2026-08-13 17:32:17 admin /usr/bin/journalctl -u sshd OK
2026-08-13 08:59:52 admin /usr/sbin/aa-status OK
2026-08-13 17:59:18 admin /usr/bin/crontab -l OK
2026-08-13 12:59:44 admin /usr/sbin/lynis audit system OK
2026-08-13 18:25:27 admin /usr/bin/cscli decisions list OK
2026-08-13 10:23:00 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 07:50:27 admin /usr/bin/apt update OK
2026-08-13 09:49:24 admin /usr/sbin/ufw status OK
2026-08-13 13:56:48 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 17:39:00 admin /usr/bin/docker ps OK
2026-08-13 00:23:26 admin /usr/sbin/fail2ban-client status OK
2026-08-13 04:13:42 admin /usr/bin/systemctl restart nginx OK
2026-08-13 08:54:26 admin /usr/bin/journalctl -u sshd OK
2026-08-12 20:10:36 admin /usr/sbin/aa-status OK
2026-08-13 00:49:09 admin /usr/bin/crontab -l OK
2026-08-12 20:27:44 admin /usr/sbin/lynis audit system OK
오늘 로그인 / 로그아웃 (3)
시간유형사용자IP / 호스트결과상태
2026-08-13 22:44:12 USER_LOGIN admin 203.0.113.20 OK 차단 안 됨
2026-08-13 16:37:01 USER_LOGIN admin 203.0.113.20 OK 차단 안 됨
2026-08-13 20:43:14 USER_LOGIN admin 203.0.113.20 OK 차단 안 됨
/var/log/audit/audit.log
Arcivéo - Security Monitor © 2026