How can I audit users and access attempts to SSH on my server?
- by RadiantHex
I've had a few security problems with a server of mine, a few SSH users have been setting up fires aka giving problems.
I would like to:
Track user logins and logouts
Track activity of these SSH, in order to discover any malicious activity
Prevent users from deleting logs
I am not much of a sys admin and I am quite inexperienced in this matter, so any kind of advice would be very welcome and very helpful. :)