查看登录失败的IP以及用户名

cat login_filed.sh

!/bin/bash

echo "本机失败连接共cat /var/log/secure|grep -E "Failed password|Invalid user"|wc -l次"
echo "root失败连接前五"
cat /var/log/secure|grep 'Failed password for root from'|awk -F" " '{print $11}'|sort -n|uniq -c|sort -nr|awk -F" " '{print "异常IP "$2,"暴力破解了 "$1" 次"}'|head -n5
echo "非正确用户前五"
cat /var/log/secure|grep "Invalid user"|awk -F" " '{print $8}'|sort -n|uniq -c|sort -nr|awk -F" " '{print "非正确用户 "$2,"SSH连接了 "$1" 次"}'|head -n5