如何检测谁ssh连接自己的次数最多?
last命令 查看谁都ssh连过自己
last -i 查看并且显示ip
0.0.0.0是主机自己,172网段的才是别人
last -i | grep 0.0.0.0 -v过滤
last -i | grep 0.0.0.0 -v | cut -d " " -f 14 截取只要ip列
last -i | grep 0.0.0.0 -v | awk ‘{print $3}’
last -i | grep -E “0.0.0.0|wtmp” -v | awk ‘{print $3}’
last -i | grep 0.0.0.0 -v | grep wtmp -v
last -i | grep 0.0.0.0 -v | grep wtmp -v | cut -d " " -f 14 | uniq -c | sort -nr -t " " -k 5 | head -n 1
last -i | grep 0.0.0.0 -v | grep wtmp -v | cut -d " " -f 14 | uniq -c | sort -rn | head -n 1