auditd — Arcivéo · demo.arciveo.com

Auditd — systemgranskning

Cache: 22:49:19 Uppdatera

Detected 7 login attempts from external IPs
Inloggningar idag: 6 | Sudo: 33 | Blockerat: / 7 | Användare: admin

Inloggningar idag

Externa inloggningsförsök

Sudo idag

Log

Externa inloggningsförsök (7)

Tid	Användare	IP / Värd	Terminal	Status
2026-08-13 22:49:19	root	`198.51.100.14`	—	Inte blockerad
2026-08-13 15:22:23	root	`198.51.100.15`	—	Inte blockerad
2026-08-13 14:01:43	root	`198.51.100.19`	—	Inte blockerad
2026-08-13 04:38:40	root	`198.51.100.12`	—	Inte blockerad
2026-08-13 12:39:55	root	`198.51.100.25`	—	Inte blockerad
2026-08-13 15:58:39	root	`198.51.100.25`	—	Inte blockerad
2026-08-12 11:00:25	root	`198.51.100.24`	—	Inte blockerad

Sudo-kommandon idag 33 significant / 33 total

Tid	Användare	Kommando	Resultat
2026-08-13 22:49:19	admin	`/usr/bin/systemctl status fail2ban`	OK
2026-08-13 22:08:12	admin	`/usr/bin/apt update`	OK
2026-08-13 22:09:43	admin	`/usr/sbin/ufw status`	OK
2026-08-13 21:44:37	admin	`/usr/bin/tail -f /var/log/auth.log`	OK
2026-08-13 21:45:43	admin	`/usr/bin/docker ps`	OK
2026-08-13 18:48:29	admin	`/usr/sbin/fail2ban-client status`	OK
2026-08-13 19:06:31	admin	`/usr/bin/systemctl restart nginx`	OK
2026-08-13 18:25:53	admin	`/usr/bin/journalctl -u sshd`	OK
2026-08-13 18:40:23	admin	`/usr/sbin/aa-status`	OK
2026-08-13 18:34:37	admin	`/usr/bin/crontab -l`	OK
2026-08-13 20:02:59	admin	`/usr/sbin/lynis audit system`	OK
2026-08-13 17:35:38	admin	`/usr/bin/cscli decisions list`	OK
2026-08-13 20:13:43	admin	`/usr/bin/systemctl status fail2ban`	OK
2026-08-13 13:36:49	admin	`/usr/bin/apt update`	OK
2026-08-13 14:36:03	admin	`/usr/sbin/ufw status`	OK
2026-08-13 16:43:04	admin	`/usr/bin/tail -f /var/log/auth.log`	OK
2026-08-13 17:19:43	admin	`/usr/bin/docker ps`	OK
2026-08-13 11:30:44	admin	`/usr/sbin/fail2ban-client status`	OK
2026-08-13 14:40:19	admin	`/usr/bin/systemctl restart nginx`	OK
2026-08-13 16:20:46	admin	`/usr/bin/journalctl -u sshd`	OK
2026-08-13 10:35:59	admin	`/usr/sbin/aa-status`	OK
2026-08-13 16:11:22	admin	`/usr/bin/crontab -l`	OK
2026-08-13 10:07:23	admin	`/usr/sbin/lynis audit system`	OK
2026-08-13 05:25:30	admin	`/usr/bin/cscli decisions list`	OK
2026-08-13 11:00:31	admin	`/usr/bin/systemctl status fail2ban`	OK
2026-08-13 11:29:19	admin	`/usr/bin/apt update`	OK
2026-08-13 17:29:31	admin	`/usr/sbin/ufw status`	OK
2026-08-13 17:14:58	admin	`/usr/bin/tail -f /var/log/auth.log`	OK
2026-08-13 11:58:19	admin	`/usr/bin/docker ps`	OK
2026-08-13 11:29:45	admin	`/usr/sbin/fail2ban-client status`	OK
2026-08-13 11:14:19	admin	`/usr/bin/systemctl restart nginx`	OK
2026-08-13 12:49:28	admin	`/usr/bin/journalctl -u sshd`	OK
2026-08-12 22:57:19	admin	`/usr/sbin/aa-status`	OK

Inloggningar / utloggningar idag (6)

Tid	Typ	Användare	IP / Värd	Resultat	Status
2026-08-13 22:49:19	USER_LOGIN	admin	`203.0.113.20`	OK	Inte blockerad
2026-08-13 20:28:42	USER_LOGIN	admin	`203.0.113.20`	OK	Inte blockerad
2026-08-13 12:07:15	USER_LOGIN	admin	`203.0.113.20`	OK	Inte blockerad
2026-08-13 15:55:10	USER_LOGIN	admin	`203.0.113.20`	OK	Inte blockerad
2026-08-13 05:26:11	USER_LOGIN	admin	`203.0.113.20`	OK	Inte blockerad
2026-08-11 18:38:54	USER_LOGIN	admin	`203.0.113.20`	OK	Inte blockerad

/var/log/audit/audit.log

Auditd — systemgranskning

Demoläge