ssh登录日志

Ubuntu 日志文件为/var/log/auth.log

尝试IP和尝试的用户名

cat /var/log/auth.log | grep ‘Invalid’ | awk ‘{print $10 “\t” $8}’ | sort

用户名次数统计

cat /var/log/auth.log | grep ‘Invalid’ | awk ‘{print $8}’ | sort | uniq -c | sort -bn

CentOS日志文件为/var/log/secure

文章永久链接：https://tech.souyunku.com/42065