Last

last list logins on the system

File: /var/log/wtmp

last
last -x or --system Display the system shutdown entries and run level changes.

Related commands

• netstat -nt | grep 22
• uptime
• Sep 23 18:24:57 SERVER systemd-logind[916]: New session 5 of user XXXX

See also

• /var/log/auth.log
• uptime, last, who, pts, tty, journalctl --list-boots, systeminfo , tuptime
• who
• acct: lastcomm
• lsof

http://man7.org/linux/man-pages/man1/last.1.html