ssh登录日志 lcb8816 2020-07-06 377 阅读1分钟 Ubuntu 日志文件为/var/log/auth.log 尝试IP和尝试的用户名 cat /var/log/auth.log | grep 'Invalid' | awk '{print $10 "\t" $8}' | sort 用户名次数统计 cat /var/log/auth.log | grep 'Invalid' | awk '{print $8}' | sort | uniq -c | sort -bn CentOS日志文件为/var/log/secure
