Auditd
购买 Self-Hosted Protection
Live
Demo
auditd — 系统审计
缓存: 22:49:19 刷新
Detected 7 login attempts from external IPs
今日登录次数: 6  |  Sudo: 33  |  已拦截: / 7  |  用户: admin
今日登录次数
6
外部登录尝试
7
今日 Sudo 次数
33
Log
13
外部登录尝试 (7)
时间用户IP / 主机终端状态
2026-08-13 22:49:19 root 198.51.100.14 — 未封禁
2026-08-13 15:22:23 root 198.51.100.15 — 未封禁
2026-08-13 14:01:43 root 198.51.100.19 — 未封禁
2026-08-13 04:38:40 root 198.51.100.12 — 未封禁
2026-08-13 12:39:55 root 198.51.100.25 — 未封禁
2026-08-13 15:58:39 root 198.51.100.25 — 未封禁
2026-08-12 11:00:25 root 198.51.100.24 — 未封禁
今日 Sudo 命令数 33 significant / 33 total
时间用户命令结果
2026-08-13 22:49:19 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 22:08:12 admin /usr/bin/apt update OK
2026-08-13 22:09:43 admin /usr/sbin/ufw status OK
2026-08-13 21:44:37 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 21:45:43 admin /usr/bin/docker ps OK
2026-08-13 18:48:29 admin /usr/sbin/fail2ban-client status OK
2026-08-13 19:06:31 admin /usr/bin/systemctl restart nginx OK
2026-08-13 18:25:53 admin /usr/bin/journalctl -u sshd OK
2026-08-13 18:40:23 admin /usr/sbin/aa-status OK
2026-08-13 18:34:37 admin /usr/bin/crontab -l OK
2026-08-13 20:02:59 admin /usr/sbin/lynis audit system OK
2026-08-13 17:35:38 admin /usr/bin/cscli decisions list OK
2026-08-13 20:13:43 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 13:36:49 admin /usr/bin/apt update OK
2026-08-13 14:36:03 admin /usr/sbin/ufw status OK
2026-08-13 16:43:04 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 17:19:43 admin /usr/bin/docker ps OK
2026-08-13 11:30:44 admin /usr/sbin/fail2ban-client status OK
2026-08-13 14:40:19 admin /usr/bin/systemctl restart nginx OK
2026-08-13 16:20:46 admin /usr/bin/journalctl -u sshd OK
2026-08-13 10:35:59 admin /usr/sbin/aa-status OK
2026-08-13 16:11:22 admin /usr/bin/crontab -l OK
2026-08-13 10:07:23 admin /usr/sbin/lynis audit system OK
2026-08-13 05:25:30 admin /usr/bin/cscli decisions list OK
2026-08-13 11:00:31 admin /usr/bin/systemctl status fail2ban OK
2026-08-13 11:29:19 admin /usr/bin/apt update OK
2026-08-13 17:29:31 admin /usr/sbin/ufw status OK
2026-08-13 17:14:58 admin /usr/bin/tail -f /var/log/auth.log OK
2026-08-13 11:58:19 admin /usr/bin/docker ps OK
2026-08-13 11:29:45 admin /usr/sbin/fail2ban-client status OK
2026-08-13 11:14:19 admin /usr/bin/systemctl restart nginx OK
2026-08-13 12:49:28 admin /usr/bin/journalctl -u sshd OK
2026-08-12 22:57:19 admin /usr/sbin/aa-status OK
今日登录 / 登出 (6)
时间类型用户IP / 主机结果状态
2026-08-13 22:49:19 USER_LOGIN admin 203.0.113.20 OK 未封禁
2026-08-13 20:28:42 USER_LOGIN admin 203.0.113.20 OK 未封禁
2026-08-13 12:07:15 USER_LOGIN admin 203.0.113.20 OK 未封禁
2026-08-13 15:55:10 USER_LOGIN admin 203.0.113.20 OK 未封禁
2026-08-13 05:26:11 USER_LOGIN admin 203.0.113.20 OK 未封禁
2026-08-11 18:38:54 USER_LOGIN admin 203.0.113.20 OK 未封禁
/var/log/audit/audit.log
Arcivéo - Security Monitor © 2026