查看登录失败的IP以及用户名

cat login_filed.sh

!/bin/bash

echo "本机失败连接共cat /var/log/secure|grep -E "Failed password|Invalid user"|wc -l次"
echo "root失败连接前五"
cat /var/log/secure|grep 'Failed password for root from'|awk -F" " '{print $11}'|sort -n|uniq -c|sort -nr|awk -F" " '{print "异常IP "$2,"\mathrm{暴}\mathrm{力}\mathrm{破}\mathrm{解}\mathrm{了}"$1" 次"}'|head -n5
echo "非正确用户前五"
cat /var/log/secure|grep "Invalid user"|awk -F" " '{print $8}'|sort -n|uniq -c|sort -nr|awk -F" " '{print "非正确用户 "$2,"SSH\mathrm{连}\mathrm{接}\mathrm{了}"$1" 次"}'|head -n5