how to find who logged in SSH in the last nite?
someone put ssh brute force files in /var/tmp/ and there is /var/tmp/.bash_history of what they typed in ssh. The owner & group of those files are "apache". I can't find who did it.
someone put ssh brute force files in /var/tmp/ and there is /var/tmp/.bash_history of what they typed in ssh. The owner & group of those files are "apache". I can't find who did it.
