Skip to content

Instantly share code, notes, and snippets.

@ward
Created April 1, 2015 13:38
Show Gist options
  • Save ward/96ce663b3e1b5758531c to your computer and use it in GitHub Desktop.
Save ward/96ce663b3e1b5758531c to your computer and use it in GitHub Desktop.
List IPs for failed root ssh logins, sorted by the amount of tries
grep 'Failed password for root' auth.log | awk '{print $11}' | sort | uniq -c | sort -n
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment