One-liners

De Wiki Técnico Rioja. Administra tus sistemas.

Apache

Postfix

Intentos fallidos de login

journalctl --since "4 hour ago" | grep "SASL LOGIN authentication failed:" |  awk '{print $7}'| cut -d [ -f2 | cut -d ] -f1 | sort -n | uniq -c | sort -n | awk '{print $2}'

Mysql

En plesk ver procesos corriendo

 watch -n 0.5 'mysql -uadmin -p`cat /etc/psa/.psa.shadow` -e "show processlist;"'


Autenticaciones

Ver intentos de login a tu servidor vía SSH:

journalctl --since "24 hour ago" | grep -i "Failed password for invalid user" | awk '{print $13}' | sort -n | uniq  

o

 journalctl --since "24 hour ago" | grep -i "Failed password for root " | awk '{print $11}' | sort -n | uniq