Jul 31, 2006
16
0
151
Hi

I own a server that is running on linux and is using cpanel i would like to know how would i check all logins made into my server? since i have a hacker trying to hack one of my sites i need to know the logins to my server to get the ip of the person.

Please post info on how i can get the logins

Thanks
 

tweakservers

Well-Known Member
Mar 30, 2006
379
0
166
type "last" after you have login as root to the SSH, it will show you a list of the SSH users who has succesfully login.

For getting to know if there's any brute force, check on the /var/log log files for the details.

Also, you may install BFD + APF together to your box if you havent.