Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've just bought a new VPS (its operating system is CentOS).
As this is my first experience with VPS, I don't know everything about managing and ...
One of my customers told me his website is not working like before. JavaScript files could not be loaded. When I checked the files on his hosting package, I saw 3 different unknown file (one cgi, one perl and one htaccess file).
I don't know how this files have been uploaded on his hosting space.
So I need to see last FTP logins attempts occurred on this account in 15 days ago.
How can I see this log through SSH ?

share|improve this question

I would start with /var/log/syslog and /var/log/auth.log (not sure if auth.log catches FTP logins) (all these files/path are for Ubuntu so you might want find equivalent for your system). Basically, look in /var/log directory that is where all the logs are. Hope this helps.

share|improve this answer
For CentOS, check /var/log/{messages|secure|loginlog} – mveroone Jan 19 '14 at 10:32
I could find messages and secure, but loginlog was not there. Also, logs were not complate. Both of secure and messages showed just about 10 lines ... – Mohammad Bagher Saberi Jan 19 '14 at 11:44
check the /var/log directory. Older logs might have been logrotated – APZ Jan 19 '14 at 11:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.