I recently have had multiple brute force attempts on my system on port 22. I see the failed logins via the reports emailed to me every day.
But how do I know if someone has successfully logged in? Even though my system has not been altered, I'm concerned someone could have gained access.
Are there logs of successful logins? I'm still not sure where to find all the system logs (see http://forums.freenas.org/showthread.php?5501-log-files).
But how do I know if someone has successfully logged in? Even though my system has not been altered, I'm concerned someone could have gained access.
Are there logs of successful logins? I'm still not sure where to find all the system logs (see http://forums.freenas.org/showthread.php?5501-log-files).