Displaying posts tagged: users

Detecting SSH logon attempts Ubuntu 9.10

2009-12-22 17:26:56 No Comments

I've been running a SSH server on my Ubuntu box for several years. Lets see who has been trying to get in.
awk 'gsub(".*sshd.*Failed password for (invalid user )?", "") {print $1}' /var/log/auth.log* | sort | uniq -c | sort -rn | head -10