過去10回以上SSLログインに失敗しているアカウント名を調べてみた

# grep 'Illegal user' /var/log/secure* | awk '{print $8;}' | sort | uniq -c | awk '{if ($1 > 9) print;}'

自宅サーバ(vine linux)の/var/log/secure* の中のSSHログインに失敗しているアカウント名をsortして回数付きでuniqして、回数が10回以上のユーザ名を表示してます。

OSによっては、secureの出力形式が違うかも。

結果(回数とアカウント名)

特に理由が無ければ、hitしちゃうようなアカウントを作らない方がいいです。

10  aaliyah
27  aaron
13  abbey
28  abby
17  abigail
19  account
10  ace
55  adam
17  adi
18  adine
598 admin
125 administrator
52  admins
30  adrian
14  agent
17  ahmed
57  alan
31  albert
36  alberto
94  alex

17  alexander
18  alexandra
10  alexandru
13  alexis
24  alfred
18  ali
52  alias
26  alice
22  alin
39  allan
10  allison
12  alvin
12  alyson
10  alyssa
89  amanda
20  amaude
25  amavis
14  amavisd
10  amber
10  american
18  amie
21  ana
16  andre
26  andrea
15  andreea
13  andrei
18  andres
40  andrew
16  andy
47  angel
45  angela
20  angelo
15  angie
17  anita
42  ann
29  anna
14  anonymous
20  anouk
25  anthony
20  antoinette
12  apache2
20  apple
14  appowner
17  appserver
22  april
12  aptproxy
10  arianna
30  arnold
21  aron
18  arthur
20  arun
32  ashley
21  astrid
20  aurelie
21  aurora
20  aurore
13  austin
10  ava
10  avery
71  backup
14  bailey
30  barbara
12  bart
11  bear
48  ben
10  beny
20  bernadette
12  bernard
40  bill
17  bind
10  bird
19  black
33  bob
15  bobby
13  bogdan
20  brad
12  bret
45  brett
44  brian
10  brianna
20  brigitte
10  brooke
37  bruce
24  bryan
20  camille
20  capucine
12  cara
11  carl
19  carlos
12  carol
35  caroline
12  carolyn
27  catherine
20  cecile
24  cecilia
19  cesar
20  chantal
23  charles
22  charlotte
12  chloe
28  chris
20  christelle
20  christiane
34  christine
43  claire
50  clamav
23  clara
17  clark
20  claudine
20  clemence
10  client
16  clint
18  clinton
10  clock
14  cody
20  colet
20  colette
14  connie
20  constance
11  control
10  cora
21  core
20  corinne
18  cpanel
26  craig
10  cristi
11  cruz
50  cvs
12  cycle
82  cyrus
13  cyrusimap
41  dan
21  dana
28  daniel
11  daniela
69  danny
77  data
29  dave
66  david
21  dawn
17  dean
15  deborah
28  demo
29  denise
42  dennis
65  desktop
13  destiny
16  dexter
28  diane
10  dick
13  divine
10  doctor
20  dominique
24  don
10  donald
20  dorotheee
23  dorothy
16  doug
44  down
47  download
13  drive
13  duke
38  ed
26  eddie
10  edgar
24  edith
13  edward
22  eleanor
11  elena
20  eleonore
13  eleve
20  elise
26  elizabeth
12  ella
26  ellen
20  elodie
10  emanuela
22  emilie
27  emily
30  emma
24  engineer
13  eppc
46  eric
14  erik
15  erin
12  ernest
10  escape
11  ethan
11  eugen
17  eva
16  exim
10  fabian
13  faith
36  fax
11  felix
15  filip
13  florence
11  flower
10  fluffy
18  fran
11  frances
22  francis
10  francoise
44  frank
35  fred
10  frederique
111 ftpuser
14  gabriel
11  gabriella
12  gabrielle
16  garry
28  gary
23  gast
11  gdm
11  genevieve
55  george
12  girl
16  glenn
21  gnats
10  gold
20  grace
23  greg
14  gregg
23  gregory
44  group
252 guest
33  guset
10  guy
15  hack
17  hacker
12  hailey
10  harold
10  harrison
18  harry
12  harrypotter
29  helen
10  helene
49  help
45  helpdesk
11  henriette
10  hera
12  holly
10  hortense
37  http
61  httpd
12  ian
26  ident
20  identd
50  image
10  ines
10  inez
141 info
10  informix
11  ingres
19  internet
10  ionut
52  irc
13  ircd
12  iris
13  isabella
24  isabelle
14  jabber
22  jack
26  jacob
57  james
17  jan
15  jared
12  jasmine
55  jason
36  jean
10  jeanne
44  jeff
16  jeffrey
12  jenifer
12  jenna
24  jeremy
33  jerry
22  jessica
11  jesus
23  jill
33  jim
26  jimmy
14  joan
16  joanne
23  joey
71  john
16  johnny
15  jordan
18  jorge
10  josette
21  josh
20  joshua
17  juan
13  julia
14  julio
17  justin
12  kaitlyn
15  karen
30  kate
11  katherine
18  katie
12  kay
23  kayla
10  kaylee
10  keith
27  kelly
18  ken
37  kevin
10  kim
16  klaus
12  kristen
10  kylie
10  laetitia
12  lance
25  larry
10  latitia
22  laura
10  laure
24  lauren
10  laurie
11  lawrence
13  ldap
12  leah
10  lee
12  leonel
14  leslie
12  leticia
39  library
12  lily
24  linda
54  linux
31  lisa
27  list
13  lorena
10  lorraine
18  louise
12  love
10  luce
10  lucie
16  lukas
14  lynda
10  mackenzie
10  madeline
19  madison
10  magic
53  mailman
28  mailnull
17  mailtest
24  majordom
30  majordomo
10  makayla
16  man
33  manager
10  manon
11  marc
10  marcelle
18  marco
10  marcus
10  marcy
16  margaret
10  margaud
10  margaux
32  maria
10  marian
19  marie
10  marine
24  mario
41  mark
34  marketing
10  marquerite
15  martha
10  marthe
14  martin
10  martine
12  marvin
24  mary
10  maryse
61  master
12  mathilda
10  mathilde
39  matt
19  matthew
34  max
10  maya
10  mckenna
12  megan
22  melody
18  mia
78  michael
10  miguel
10  mihai
16  mikael
69  mike
10  molly
25  monica
17  monique
13  morgan
24  mp3
11  music
14  myndy
174 mysql
18  nagios
20  nancy
13  naomi
11  nasa
13  natalie
10  nath
10  nathalie
17  nathan
13  navy
10  neo
16  netdump
24  newsletter
19  nfsnobody
13  nicholas
29  nick
41  nicole
11  noel
10  normi
10  oceance
10  odette
67  office
10  oliver
20  olivia
162 oracle
13  orange
12  paige
10  paintball1
23  party
11  pascal
12  password
13  patricia
38  patrick
12  patsy
73  paul
10  paulette
10  pauline
16  pcap
17  perry
12  pete
22  peter
52  pgsql
17  philip
10  philippine
29  pop
18  popa3d
117 postgres
39  postmaster
11  pp
44  pr
31  proxy
45  pub
33  public
12  purple
15  pvm
13  qtss
11  quest
13  rachel
12  radiomail
13  rebecca
31  recruit
12  renee
12  resin
31  rich
67  richard
12  riley
24  rob
44  robert
14  robin
39  ronald
10  root2
10  router
10  roy
37  rpm
16  russ
13  ryan
10  sabine
97  sales
23  sam
16  samantha
51  samba
10  sammy
13  samuel
10  sandra
27  sara
33  sarah
28  sasha
10  savannah
12  scan
22  scott
10  sea
34  sean
24  search
10  seascape
11  sebastian
15  securityagent
28  server
38  service
24  sgi
11  share
21  sharon
10  shaun
10  sheila
54  shell
41  shop
23  simon
44  siteadm
10  skylar
39  smmsp
11  snoopy
12  snort
19  sophia
16  sophie
38  spam
12  spider
18  squid
11  squirrelmail
41  ssh
34  staff
14  stephanie
40  stephen
33  steve
42  steven
14  stuart
72  student
45  students
32  sunny
22  super
49  support
30  susan
15  suva
12  sybase
12  sydney
10  sylvia
21  sys
51  sysadmin
19  sysop
10  system
13  taylor
22  telnetd
83  temp
20  temporary
399 test
34  test1
16  test12
20  test123
26  test2
128 tester
76  testing
23  testuser
11  theo
28  thomas
11  tiffany
24  tim
12  timothy
12  tina
29  tmp
10  todd
14  tokend
16  tom
93  tomcat
43  tony
71  toor
49  transfer
21  trinity
20  unix
20  unknown
71  upload
211 user
48  user1
61  username
24  users
12  valerie
17  vcsa
22  vic
36  victor
35  victoria
22  viktor
14  viper
28  virus
20  visitor
14  vpopmail
11  vscan
10  walker
20  walter
15  wang
11  wayne
147 web
46  webadmin
108 webmaster
29  webpop
17  webster
12  webuser
16  white
20  will
12  willie
13  win
13  windows
16  windowserver
53  word
12  workshop
107 www
80  www-data
35  wwwrun
14  xgridagent
14  xgridcontroller
11  xxx
12  zoe
13  zzz

長くてごめんなさい。。