Show macOS VNC login attempts

macOS 10.12 introduced ‘unified logging’ with the ‘log show’ command, so VNC (Screen SHaring) login attempts are not stored in /var/log/system.log any more. Use the following commands in Terminal to display recent login attempts.

Show successful VNC logins:

log show | egrep screensharingd | egrep SUCCEEDED