Originally Posted by
scorp123
Failed local logins would be visible too on this log if there had been any of those.
Can you check what output you get on your laptop?
I have checked last and was able to find several logs of logins from many months that looked normal. lastb didn't produce much just 1 entry that it begins on the 14th, I even tested putting the wrong password with sudo and on the lock login screen and didnt find any records anywhere of failed login attempts. Checking faillog only give me a long wall of text with "^@^@^@^@^@^@^@^@^@^@^@".
This is what I got running lastb command
Code:
root pts/0 Wed Apr 14 18:54 - 18:54 (00:00)
btmp begins Wed Apr 14 18:54:11 2021
And this is what I get running faillog -a
Code:
Login Failures Maximum Latest On
root 0 0 12/31/69 18:00:00 -0600
daemon 0 0 12/31/69 18:00:00 -0600
bin 0 0 12/31/69 18:00:00 -0600
sys 0 0 12/31/69 18:00:00 -0600
sync 0 0 12/31/69 18:00:00 -0600
games 0 0 12/31/69 18:00:00 -0600
man 0 0 12/31/69 18:00:00 -0600
lp 0 0 12/31/69 18:00:00 -0600
mail 0 0 12/31/69 18:00:00 -0600
news 0 0 12/31/69 18:00:00 -0600
uucp 0 0 12/31/69 18:00:00 -0600
proxy 0 0 12/31/69 18:00:00 -0600
www-data 0 0 12/31/69 18:00:00 -0600
backup 0 0 12/31/69 18:00:00 -0600
list 0 0 12/31/69 18:00:00 -0600
irc 0 0 12/31/69 18:00:00 -0600
gnats 0 0 12/31/69 18:00:00 -0600
nobody 0 0 12/31/69 18:00:00 -0600
systemd-network 0 0 12/31/69 18:00:00 -0600
systemd-resolve 0 0 12/31/69 18:00:00 -0600
systemd-timesync 0 0 12/31/69 18:00:00 -0600
messagebus 0 0 12/31/69 18:00:00 -0600
syslog 0 0 12/31/69 18:00:00 -0600
_apt 0 0 12/31/69 18:00:00 -0600
tss 0 0 12/31/69 18:00:00 -0600
uuidd 0 0 12/31/69 18:00:00 -0600
tcpdump 0 0 12/31/69 18:00:00 -0600
avahi-autoipd 0 0 12/31/69 18:00:00 -0600
usbmux 0 0 12/31/69 18:00:00 -0600
rtkit 0 0 12/31/69 18:00:00 -0600
dnsmasq 0 0 12/31/69 18:00:00 -0600
cups-pk-helper 0 0 12/31/69 18:00:00 -0600
speech-dispatcher 0 0 12/31/69 18:00:00 -0600
avahi 0 0 12/31/69 18:00:00 -0600
kernoops 0 0 12/31/69 18:00:00 -0600
saned 0 0 12/31/69 18:00:00 -0600
nm-openvpn 0 0 12/31/69 18:00:00 -0600
hplip 0 0 12/31/69 18:00:00 -0600
whoopsie 0 0 12/31/69 18:00:00 -0600
colord 0 0 12/31/69 18:00:00 -0600
geoclue 0 0 12/31/69 18:00:00 -0600
pulse 0 0 12/31/69 18:00:00 -0600
gnome-initial-setup 0 0 12/31/69 18:00:00 -0600
gdm 0 0 12/31/69 18:00:00 -0600
s 0 0 12/31/69 18:00:00 -0600
systemd-coredump 0 0 12/31/69 18:00:00 -0600
clamav 0 0 12/31/69 18:00:00 -0600
This is what I get running faillog -u (username)
Code:
Login Failures Maximum Latest On
Jeff 0 0 12/31/69 18:00:00 -0600
Bookmarks