Detect intrusion attacks on Linux on March 12, 2010 Get link Facebook Twitter Pinterest Email Other Apps grep "Invalid" /var/log/auth.log | grep -i ssh | awk '{a[$1$2]++}END{for (i in a){print i " " a[i]}}'Thanks Marco!