In order to find out who was logged in recently on my server I am using the command:
There were logins from very strange IP addresses e.g.:
username@pc:/home/user$ last
username pts/16 59.224.XX.178.d Sun Aug 2 12:26 - 12:27 (00:00)
(where X was a number).
My question: What does the suffix .d mean? And why are these entries gone when I am using last with the option "-i"?
Best Answer
59.224.XX.178.d
is not an IP-address but a hostname, or rather part of it.Last tries to do a reverse lookup and stores both the resulting hostname and ip-address for the remote host. By default the hostname gets displayed and long ones get truncated to display nice columns.
Try
last -a
to display the hostname on the last column without truncation. orlast -i
to display the ip-address.Compare: