Updated on 2024-07-12 GMT+08:00

How Do I Know Whether an Intrusion Succeeded?

  • If you have enabled alarm notifications for intrusion detection, you will be notified immediately when an account is cracked or may be cracked.
  • You can also check whether attack IP addresses are blocked on the Detection page.
  • For more details, view logs in the /var/log/secure and /var/log/message on the Linux server, or run the last command to check for abnormal login records.