Linux 安全信息查看

 

• 终端登录情况

last

• ssh登录情况

cat /var/log/secure | grep -i "accepted password"

• 定时任务

cat /var/log/cron

•  统计尝试入侵的IP

cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"="$1;}' 

 

• 禁用IP

echo sshd:183.40.138.224:deny >> hosts.deny

 

 

crontab -e

/var/spool/cron/crontabs