Skip to content

Instantly share code, notes, and snippets.

@jazlopez

jazlopez/audit.auth.log.sh

Created January 3, 2021 04:25
Show Gist options
  • Save jazlopez/06fcdbb21f3a9bf905a58545f52e1b20 to your computer and use it in GitHub Desktop.
Save jazlopez/06fcdbb21f3a9bf905a58545f52e1b20 to your computer and use it in GitHub Desktop.
Download ZIP
OS administrtion: filter unauthorized logon attempts
Raw
audit.auth.log.sh
# =========================================================
# OS administrtion: filter unauthorized logon attempts
# Jaziel Lopez
# =========================================================
cat /var/log/auth.log | grep "Disconnected" | awk '{print $10" | "$11" | "$13}'
# <username> | <from> | <attempt port>
# root | 222.187.222.105 | 61297
# root | 221.181.185.68 | 47627
# root | 218.93.207.84 | 19191
# root | 221.131.165.124 | 45904
# root | 218.93.207.94 | 22241
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment