Check the host security situation

1. who view the current logged-on user
2. last logged-on user to view the history
3. history View history execute the command
4. cat / var / log / secure | grep -i "accepted password" to see successful login information is recorded
5. cat / var / log / secure | grep -i "failed password " | wc -l Views are blasting 

Guess you like

Origin www.cnblogs.com/hark0623/p/11962547.html