Need to see who logged in...

wazza all,
I just logged into my server and I saw the last login was from:

24.19.30.224

and that is not my ip address, and I'm the only one who has the CURRENT root pass, but I gave my root pass to a friend to fix something and he did, and I didn't change the pass from the default so I changed it.

How can I see WHO this was, what time the logged in and out and what they did?

I checked the .bash_history and didn't see anything new, it was the last stuff I did.

"w" doesn't show them online right now either.

How can I see the logs for root and everything?

Thanks,
Mouse

 

 

 

 

Top