find failed ssh logins on centos

علی ذوالفقار
1400/08/14 09:47:26 (239)
cat /var/log/secure | egrep "Failed|Failure"
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c 
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c | sort -nr
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c | sort -nr > fail-ssh-ip.txt
Back