排序日志中尝试爆破ssh密码的ip/bin/awk '/Failed/{print $(NF-3)}' /var/log/secure | /bin/sort | /usr/bin/uniq -c | sort -rn统计允许登录的帐号ip(分析是否是自己的)/bin/awk '/Accepted password for/{print $(NF-3)}'

- 阅读全文 -