{"id":50754,"date":"2025-02-12T11:43:42","date_gmt":"2025-02-12T11:43:42","guid":{"rendered":"https:\/\/accuweb.cloud\/resource\/?post_type=faq&p=50754"},"modified":"2026-02-17T13:21:43","modified_gmt":"2026-02-17T13:21:43","slug":"monitor-system-authentication-logs-on-ubuntu","status":"publish","type":"faq","link":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu","title":{"rendered":"How To Monitor System Authentication Logs on Ubuntu?"},"content":{"rendered":"

How To Monitor System Authentication Logs on Ubuntu?<\/h2>\n

Authentication logs are an essential component of server protection. Every remote login attempt on your server, including the username, date, and timestamp, can be fully listed if you suspect a breach. Each prompt that requests a user password, such as the sudo command, is likewise reported, along with the success or failure of the authentication. An important line of security against data breaches and other vulnerabilities within your system is monitoring. Authentication management monitors the system once you configure the users.<\/p>\n

Log in to your AccuWeb.Cloud dashboard, select your environment, navigate to the Elastic VPS section, and click on the Web SSH icon.<\/p>\n

\"Elastic<\/a><\/p>\n

\"Web<\/a><\/p>\n

Examine the authentication attempts:<\/strong><\/p>\n

In current Linux systems, every authentication attempt is stored in a distinct file. The location is \/var\/log\/auth.log. The command to view this file is as follows.<\/p>\n

sudo less auth.log\/var\/log\/auth.log<\/b><\/code><\/pre>\n
\"Examine<\/a><\/p>\n
Use q to quit once you are done viewing the file.<\/p>\n
To check authentication logs in real-time, use:<\/strong><\/p>\n
sudo tail -f \/var\/log\/auth.log<\/b><\/code><\/pre>\n
\"To<\/a><\/p>\n
<\/div>\n\t\t
\n\t\t\t        
\n            \n                        
\n                    
\n        
\n                    \n        \t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\n        <\/div>\n                    <\/div>\n        <\/section>\n        \t\t<\/div>\n\t\t\n
<\/div>\n
To view the entire log file:<\/strong><\/p>\n
sudo cat \/var\/log\/auth.log<\/b><\/code><\/pre>\n
\"To<\/a><\/p>\n
Using last command<\/b><\/p>\n
When it comes to reviewing login attempts, you can review the most recent by using the last command.<\/p>\n
The last command provides how and when they logged in and out.<\/p>\n
last<\/b><\/code><\/pre>\n
\"last<\/a><\/p>\n
Using the “lastlog” Command<\/b><\/p>\n
The lastlog command can also be used to find out when each user last logged in. The user’s username, port, and most recent login time are displayed. You can get this information by opening \/etc\/log\/lastlog. It is then sorted by entries in the \/etc\/passwd file:<\/p>\n
lastlog<\/b><\/code><\/pre>\n
\"lastlog<\/a><\/p>\n
To check failed login attempts:<\/b><\/p>\n
In Linux, the lastb command shows details about unsuccessful login attempts on a system.<\/u><\/b><\/p>\n
lastb<\/b><\/code><\/pre>\n
\"lastb<\/a><\/p>\n
Conclusion:<\/h2>\n
By following these steps, you can effectively monitor system authentication logs on your Ubuntu server within the AccuWeb.Cloud environment, enhancing your system’s security<\/a> and performance<\/a>.<\/p>\n
<\/div>\n\t\t
\n\t\t\t        
\n            \n                        
\n                    
\n        
\n                    \n        \t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t            <\/div>\n        <\/div>\n                    <\/div>\n        <\/section>\n        \t\t<\/div>\n\t\t\n
<\/div>\n","protected":false},"author":1,"featured_media":52879,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","class_list":["post-50754","faq","type-faq","status-publish","has-post-thumbnail","hentry","faq_topics-kb","faq_topics-monitor-system-authentication-logs","faq_topics-product-documentation","faq_topics-ubuntu"],"yoast_head":"\nHow To Monitor System Authentication Logs on Ubuntu? - AccuWeb Cloud<\/title>\n<meta name=\"description\" content=\"Learn how to monitor system authentication logs on Ubuntu to track login attempts, enhance security, and detect suspicious activity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How To Monitor System Authentication Logs on Ubuntu?\" \/>\n<meta property=\"og:description\" content=\"Learn how to monitor system authentication logs on Ubuntu to track login attempts, enhance security, and detect suspicious activity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\" \/>\n<meta property=\"og:site_name\" content=\"AccuWeb Cloud\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-17T13:21:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#article\",\"isPartOf\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\"},\"author\":{\"name\":\"Jilesh Patadiya\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58\"},\"headline\":\"How To Monitor System Authentication Logs on Ubuntu?\",\"datePublished\":\"2025-02-12T11:43:42+00:00\",\"dateModified\":\"2026-02-17T13:21:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\"},\"wordCount\":314,\"publisher\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#organization\"},\"image\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage\"},\"thumbnailUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\",\"url\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\",\"name\":\"How To Monitor System Authentication Logs on Ubuntu? - AccuWeb Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage\"},\"image\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage\"},\"thumbnailUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"datePublished\":\"2025-02-12T11:43:42+00:00\",\"dateModified\":\"2026-02-17T13:21:43+00:00\",\"description\":\"Learn how to monitor system authentication logs on Ubuntu to track login attempts, enhance security, and detect suspicious activity.\",\"breadcrumb\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage\",\"url\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"contentUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg\",\"width\":1280,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/accuweb.cloud\/resource\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How To Monitor System Authentication Logs on Ubuntu?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#website\",\"url\":\"https:\/\/accuweb.cloud\/resource\/\",\"name\":\"AccuWeb Cloud\",\"description\":\"Cutting Edge Cloud Computing\",\"publisher\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/accuweb.cloud\/resource\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#organization\",\"name\":\"AccuWeb.Cloud\",\"url\":\"https:\/\/accuweb.cloud\/resource\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg\",\"contentUrl\":\"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg\",\"width\":156,\"height\":87,\"caption\":\"AccuWeb.Cloud\"},\"image\":{\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58\",\"name\":\"Jilesh Patadiya\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g\",\"caption\":\"Jilesh Patadiya\"},\"description\":\"Jilesh Patadiya, the visionary Co-Founder and Chief Technology Officer (CTO) behind AccuWeb.Cloud. Founder & CTO at AccuWebHosting.com. He shares his web hosting insights on the AccuWeb.Cloud blog. He mostly writes on the latest web hosting trends, WordPress, storage technologies, and Windows and Linux hosting platforms.\",\"sameAs\":[\"https:\/\/accuweb.cloud\/resource\",\"https:\/\/www.facebook.com\/accuwebhosting\",\"https:\/\/www.instagram.com\/accuwebhosting\/\",\"https:\/\/www.linkedin.com\/company\/accuwebhosting\/\",\"https:\/\/x.com\/accuwebhosting\",\"https:\/\/www.youtube.com\/c\/Accuwebhosting\"],\"url\":\"https:\/\/accuweb.cloud\/resource\/author\/accuwebadmin\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How To Monitor System Authentication Logs on Ubuntu? - AccuWeb Cloud","description":"Learn how to monitor system authentication logs on Ubuntu to track login attempts, enhance security, and detect suspicious activity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu","og_locale":"en_US","og_type":"article","og_title":"How To Monitor System Authentication Logs on Ubuntu?","og_description":"Learn how to monitor system authentication logs on Ubuntu to track login attempts, enhance security, and detect suspicious activity.","og_url":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu","og_site_name":"AccuWeb Cloud","article_modified_time":"2026-02-17T13:21:43+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#article","isPartOf":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu"},"author":{"name":"Jilesh Patadiya","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58"},"headline":"How To Monitor System Authentication Logs on Ubuntu?","datePublished":"2025-02-12T11:43:42+00:00","dateModified":"2026-02-17T13:21:43+00:00","mainEntityOfPage":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu"},"wordCount":314,"publisher":{"@id":"https:\/\/accuweb.cloud\/resource\/#organization"},"image":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage"},"thumbnailUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","inLanguage":"en-US"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu","url":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu","name":"How To Monitor System Authentication Logs on Ubuntu? - AccuWeb Cloud","isPartOf":{"@id":"https:\/\/accuweb.cloud\/resource\/#website"},"primaryImageOfPage":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage"},"image":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage"},"thumbnailUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","datePublished":"2025-02-12T11:43:42+00:00","dateModified":"2026-02-17T13:21:43+00:00","description":"Learn how to monitor system authentication logs on Ubuntu to track login attempts, enhance security, and detect suspicious activity.","breadcrumb":{"@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#primaryimage","url":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","contentUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/07\/NEW-OG-IMAGE-URL.jpg","width":1280,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/accuweb.cloud\/resource\/articles\/monitor-system-authentication-logs-on-ubuntu#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/accuweb.cloud\/resource\/"},{"@type":"ListItem","position":2,"name":"How To Monitor System Authentication Logs on Ubuntu?"}]},{"@type":"WebSite","@id":"https:\/\/accuweb.cloud\/resource\/#website","url":"https:\/\/accuweb.cloud\/resource\/","name":"AccuWeb Cloud","description":"Cutting Edge Cloud Computing","publisher":{"@id":"https:\/\/accuweb.cloud\/resource\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/accuweb.cloud\/resource\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/accuweb.cloud\/resource\/#organization","name":"AccuWeb.Cloud","url":"https:\/\/accuweb.cloud\/resource\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/","url":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg","contentUrl":"https:\/\/accuweb.cloud\/resource\/wp-content\/uploads\/2024\/04\/accuwebcloud_logo_black_tagline.jpg","width":156,"height":87,"caption":"AccuWeb.Cloud"},"image":{"@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/a7a4cbe8405202b537509c757b588c58","name":"Jilesh Patadiya","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/accuweb.cloud\/resource\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2cea2bdb5bbabb771ee67e96acad7396f25cb1a0c360b9bc4a9ac40cea9cd8b2?s=96&d=mm&r=g","caption":"Jilesh Patadiya"},"description":"Jilesh Patadiya, the visionary Co-Founder and Chief Technology Officer (CTO) behind AccuWeb.Cloud. Founder & CTO at AccuWebHosting.com. He shares his web hosting insights on the AccuWeb.Cloud blog. He mostly writes on the latest web hosting trends, WordPress, storage technologies, and Windows and Linux hosting platforms.","sameAs":["https:\/\/accuweb.cloud\/resource","https:\/\/www.facebook.com\/accuwebhosting","https:\/\/www.instagram.com\/accuwebhosting\/","https:\/\/www.linkedin.com\/company\/accuwebhosting\/","https:\/\/x.com\/accuwebhosting","https:\/\/www.youtube.com\/c\/Accuwebhosting"],"url":"https:\/\/accuweb.cloud\/resource\/author\/accuwebadmin"}]}},"_links":{"self":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq\/50754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq"}],"about":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/types\/faq"}],"author":[{"embeddable":true,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/comments?post=50754"}],"version-history":[{"count":6,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq\/50754\/revisions"}],"predecessor-version":[{"id":52944,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/faq\/50754\/revisions\/52944"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/media\/52879"}],"wp:attachment":[{"href":"https:\/\/accuweb.cloud\/resource\/wp-json\/wp\/v2\/media?parent=50754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}