Sunday, 19 July 2009

To check SSH attack

To  check  Attack just fire the command below.
cat /var/log/secure | grep Failed | cut -d: -f7 | cut -d’ ‘ -f1 | sort| uniq -c

From the above command you will get attackers Ip then go ahead and block it.

No comments:

Post a Comment