找到了：ubuntu查看尝试登录服务器的ip，一般用来查看攻击ip来源：
grep "Failed password for root" /var/log/auth.log | awk '{print $11}' | sort | uniq -c | sort -nr | more
相关文档：https://www.niaoyun.com/docs/16500.html/?utm_source=tbc-1203
grep "Failed password for root" /var/log/auth.log | awk '{print $11}' | sort | uniq -c | sort -nr | more
相关文档：https://www.niaoyun.com/docs/16500.html/?utm_source=tbc-1203
