linux查看上次登录用户
- /var/log/wtmp
记录每个用户的登录次数和持续时间等信息
可以用last命令输出当中内容:
debian:/var/log# last
debian pts/9 221.215.176.148 Thu Oct 17 10:15 still logged in
debian pts/8 221.215.176.148 Thu Oct 17 09:56 still logged in
debian pts/7 221.215.176.148 Thu Oct 17 09:32 - 10:44 (01:12)
root pts/5 114.255.31.253 Thu Oct 17 09:30 - 10:20 (00:50)
root pts/4 114.255.31.253 Thu Oct 17 09:30 - 10:20 (00:50)
- /var/log/btmp
记录的登入系统失败的用户名单
可以用lastb命令输出当中内容:
[root@localhost ~]# lastb -n 10
root ssh:notty 43.226.153.168 Wed Feb 3 16:12 - 16:12 (00:00)
root ssh:notty 43.226.73.164 Wed Feb 3 16:11 - 16:11 (00:00)
root ssh:notty 43.226.153.168 Wed Feb 3 16:11 - 16:11 (00:00)
root ssh:notty 43.226.153.168 Wed Feb 3 16:09 - 16:09 (00:00)
root ssh:notty 43.226.73.164 Wed Feb 3 16:09 - 16:09 (00:00)
root ssh:notty 43.226.153.168 Wed Feb 3 16:08 - 16:08 (00:00)
root ssh:notty 43.226.153.168 Wed Feb 3 16:07 - 16:07 (00:00)
root ssh:notty 43.226.73.164 Wed Feb 3 16:07 - 16:07 (00:00)
root ssh:notty 43.226.153.168 Wed Feb 3 16:06 - 16:06 (00:00)
root ssh:notty 43.226.153.168 Wed Feb 3 16:05 - 16:05 (00:00)
转载请注明来源,欢迎对文章中的引用来源进行考证,欢迎指出任何有错误或不够清晰的表达。可以在下面评论区评论,也可以邮件至 wind.kaisa@gmail.com