Skip to content

Instantly share code, notes, and snippets.

@Ignition

Ignition/did-it-work.sh

Created April 13, 2011 10:31
Download ZIP

Revisions

  1. Ignition revised this gist Apr 13, 2011. 1 changed file with 19 additions and 16 deletions.
    35 changes: 19 additions & 16 deletions did-it-work.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -1,21 +1,24 @@
    #!/bin/sh
    zcat -f /var/log/auth.log* | grep 'Failed password' | grep sshd | awk '{print $1,$2}' | sort -k 1,1M -k 2n | uniq -c
    zcat -f /var/log/auth.log* | grep -f bad-phrases | awk '{print $1,$2}' | sort -k 1,1M -k 2n | grep -vf white-list | uniq -c

    ## Output
    #
    # 952 Mar 13
    # 1418 Mar 14
    # 1781 Mar 15
    # 1365 Mar 16
    # 953 Mar 13
    # 1420 Mar 14
    # 1783 Mar 15
    # 1366 Mar 16
    # 4572 Mar 17
    # 765 Mar 18
    # 725 Mar 19
    # 1075 Mar 20
    # 505 Mar 21
    # 2895 Mar 22
    # 368 Mar 24
    # 248 Mar 25
    # 942 Mar 27
    # 192 Mar 28
    # 5 Mar 29
    # 8 Mar 30
    # 767 Mar 18
    # 728 Mar 19
    # 1078 Mar 20
    # 514 Mar 21
    # 2896 Mar 22
    # 1 Mar 23
    # 370 Mar 24
    # 250 Mar 25
    # 3 Mar 26
    # 946 Mar 27
    # 194 Mar 28
    # 11 Mar 29
    # 9 Mar 30
    # 1 Apr 1
  2. Ignition created this gist Apr 13, 2011.
    21 changes: 21 additions & 0 deletions did-it-work.sh
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,21 @@
    #!/bin/sh
    zcat -f /var/log/auth.log* | grep 'Failed password' | grep sshd | awk '{print $1,$2}' | sort -k 1,1M -k 2n | uniq -c

    ## Output
    #
    # 952 Mar 13
    # 1418 Mar 14
    # 1781 Mar 15
    # 1365 Mar 16
    # 4572 Mar 17
    # 765 Mar 18
    # 725 Mar 19
    # 1075 Mar 20
    # 505 Mar 21
    # 2895 Mar 22
    # 368 Mar 24
    # 248 Mar 25
    # 942 Mar 27
    # 192 Mar 28
    # 5 Mar 29
    # 8 Mar 30