How to check who/when logged in via SSH

Issue :

How to check successful and failed SSH logins to the server ?

Solution :

Use the following commands (as root) to achieve this :

last | less

This captures data from /var/log/wtmp and shows you the successful logins.

lastb | less

This captures data from /var/log/btmp and shows you the failed attempts.

Source : WHT