linux如何统计每天尝试登陆系统失败和成功的ip地址和次数?
网友回复
linux错误登录密码次数及ip地址命令:
grep -i "failed password" /var/log/secure | awk '{if($11 ~ /^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$/) print $11; else print $13}' | sort -nr -k1 | uniq -clinux成功登录密码次数及ip地址命令:
grep -i "accepted password" /var/log/secure | awk '{if($11 ~ /^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$/) print $11; else print $13}' | sort -nr -k1 | uniq -c