/var/log/secure
telnet, ssh 접속에 대한 유저 로그인 인증 기록
ROOT
[root@zero-mini-server ~]# tail -n 20 /var/log/secure
Dec 26 21:08:38 zero-mini-server sshd[908]: Server listening on 0.0.0.0 port 22.
Dec 26 21:08:38 zero-mini-server sshd[908]: Server listening on :: port 22.
Dec 26 21:08:38 zero-mini-server polkitd[1178]: Loading rules from directory /etc/polkit-1/rules.d
Dec 26 21:08:38 zero-mini-server polkitd[1178]: Loading rules from directory /usr/share/polkit-1/rules.d
Dec 26 21:08:38 zero-mini-server polkitd[1178]: Finished loading, compiling and executing 5 rules
Dec 26 21:08:38 zero-mini-server polkitd[1178]: Acquired the name org.freedesktop.PolicyKit1 on the system bus
Dec 26 21:10:01 zero-mini-server systemd[5861]: pam_unix(systemd-user:session): session opened for user chatbot by (uid=0)
Dec 26 21:10:01 zero-mini-server systemd[5864]: pam_unix(systemd-user:session): session opened for user smartmatch by (uid=0)
Dec 26 21:10:03 zero-mini-server sshd[6003]: error: kex_exchange_identification: client sent invalid protocol identifier “GET / HTTP/1.1”
Dec 26 21:10:03 zero-mini-server sshd[6010]: error: kex_exchange_identification: client sent invalid protocol identifier “GET / HTTP/1.1”
Dec 26 21:17:55 zero-mini-server sshd[6105]: Accepted password for master from 192.168.29.221 port 5844 ssh2
Dec 26 21:17:55 zero-mini-server systemd[6111]: pam_unix(systemd-user:session): session opened for user master by (uid=0)
Dec 26 21:17:56 zero-mini-server sshd[6105]: pam_unix(sshd:session): session opened for user master by (uid=0)
Dec 26 21:24:20 zero-mini-server sudo[6222]: master : TTY=pts/0 ; PWD=/home/master ; USER=root ; COMMAND=/bin/tail /var/log/secure
Dec 26 21:24:20 zero-mini-server sudo[6222]: pam_unix(sudo:session): session opened for user root by master(uid=0)
Dec 26 21:24:20 zero-mini-server sudo[6222]: pam_unix(sudo:session): session closed for user root
Dec 26 21:30:12 zero-mini-server sudo[6290]: master : TTY=pts/0 ; PWD=/home/master ; USER=root ; COMMAND=/bin/tail /var/log/messages
Dec 26 21:30:12 zero-mini-server sudo[6290]: pam_unix(sudo:session): session opened for user root by master(uid=0)
Dec 26 21:30:12 zero-mini-server sudo[6290]: pam_unix(sudo:session): session closed for user root
Dec 26 21:31:53 zero-mini-server su[6296]: pam_unix(su:session): session opened for user root by master(uid=1000)
[root@zero-mini-server ~]#