find failed ssh logins on centos
علی ذوالفقار
1400/08/14 09:47:26 (573)
cat /var/log/secure | egrep "Failed|Failure"
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c | sort -nr
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c | sort -nr > fail-ssh-ip.txt