過去10回以上SSLログインに失敗しているアカウント名を調べてみた

# grep 'Illegal user' /var/log/secure* | awk '{print $8;}' | sort | uniq -c | awk '{if ($1 > 9) print;}'

自宅サーバ(vine linux)の/var/log/secure* の中のSSHログインに失敗しているアカウント名をsortして回数付きでuniqして、回数が10回以上のユーザ名を表示してます。

OSによっては、secureの出力形式が違うかも。

結果(回数とアカウント名)

特に理由が無ければ、hitしちゃうようなアカウントを作らない方がいいです。

10	aaliyah
27	aaron
13	abbey
28	abby
17	abigail
19	account
10	ace
55	adam
17	adi
18	adine
598	admin
125	administrator
52	admins
30	adrian
14	agent
17	ahmed
57	alan
31	albert
36	alberto
94	alex

17	alexander
18	alexandra
10	alexandru
13	alexis
24	alfred
18	ali
52	alias
26	alice
22	alin
39	allan
10	allison
12	alvin
12	alyson
10	alyssa
89	amanda
20	amaude
25	amavis
14	amavisd
10	amber
10	american
18	amie
21	ana
16	andre
26	andrea
15	andreea
13	andrei
18	andres
40	andrew
16	andy
47	angel
45	angela
20	angelo
15	angie
17	anita
42	ann
29	anna
14	anonymous
20	anouk
25	anthony
20	antoinette
12	apache2
20	apple
14	appowner
17	appserver
22	april
12	aptproxy
10	arianna
30	arnold
21	aron
18	arthur
20	arun
32	ashley
21	astrid
20	aurelie
21	aurora
20	aurore
13	austin
10	ava
10	avery
71	backup
14	bailey
30	barbara
12	bart
11	bear
48	ben
10	beny
20	bernadette
12	bernard
40	bill
17	bind
10	bird
19	black
33	bob
15	bobby
13	bogdan
20	brad
12	bret
45	brett
44	brian
10	brianna
20	brigitte
10	brooke
37	bruce
24	bryan
20	camille
20	capucine
12	cara
11	carl
19	carlos
12	carol
35	caroline
12	carolyn
27	catherine
20	cecile
24	cecilia
19	cesar
20	chantal
23	charles
22	charlotte
12	chloe
28	chris
20	christelle
20	christiane
34	christine
43	claire
50	clamav
23	clara
17	clark
20	claudine
20	clemence
10	client
16	clint
18	clinton
10	clock
14	cody
20	colet
20	colette
14	connie
20	constance
11	control
10	cora
21	core
20	corinne
18	cpanel
26	craig
10	cristi
11	cruz
50	cvs
12	cycle
82	cyrus
13	cyrusimap
41	dan
21	dana
28	daniel
11	daniela
69	danny
77	data
29	dave
66	david
21	dawn
17	dean
15	deborah
28	demo
29	denise
42	dennis
65	desktop
13	destiny
16	dexter
28	diane
10	dick
13	divine
10	doctor
20	dominique
24	don
10	donald
20	dorotheee
23	dorothy
16	doug
44	down
47	download
13	drive
13	duke
38	ed
26	eddie
10	edgar
24	edith
13	edward
22	eleanor
11	elena
20	eleonore
13	eleve
20	elise
26	elizabeth
12	ella
26	ellen
20	elodie
10	emanuela
22	emilie
27	emily
30	emma
24	engineer
13	eppc
46	eric
14	erik
15	erin
12	ernest
10	escape
11	ethan
11	eugen
17	eva
16	exim
10	fabian
13	faith
36	fax
11	felix
15	filip
13	florence
11	flower
10	fluffy
18	fran
11	frances
22	francis
10	francoise
44	frank
35	fred
10	frederique
111	ftpuser
14	gabriel
11	gabriella
12	gabrielle
16	garry
28	gary
23	gast
11	gdm
11	genevieve
55	george
12	girl
16	glenn
21	gnats
10	gold
20	grace
23	greg
14	gregg
23	gregory
44	group
252	guest
33	guset
10	guy
15	hack
17	hacker
12	hailey
10	harold
10	harrison
18	harry
12	harrypotter
29	helen
10	helene
49	help
45	helpdesk
11	henriette
10	hera
12	holly
10	hortense
37	http
61	httpd
12	ian
26	ident
20	identd
50	image
10	ines
10	inez
141	info
10	informix
11	ingres
19	internet
10	ionut
52	irc
13	ircd
12	iris
13	isabella
24	isabelle
14	jabber
22	jack
26	jacob
57	james
17	jan
15	jared
12	jasmine
55	jason
36	jean
10	jeanne
44	jeff
16	jeffrey
12	jenifer
12	jenna
24	jeremy
33	jerry
22	jessica
11	jesus
23	jill
33	jim
26	jimmy
14	joan
16	joanne
23	joey
71	john
16	johnny
15	jordan
18	jorge
10	josette
21	josh
20	joshua
17	juan
13	julia
14	julio
17	justin
12	kaitlyn
15	karen
30	kate
11	katherine
18	katie
12	kay
23	kayla
10	kaylee
10	keith
27	kelly
18	ken
37	kevin
10	kim
16	klaus
12	kristen
10	kylie
10	laetitia
12	lance
25	larry
10	latitia
22	laura
10	laure
24	lauren
10	laurie
11	lawrence
13	ldap
12	leah
10	lee
12	leonel
14	leslie
12	leticia
39	library
12	lily
24	linda
54	linux
31	lisa
27	list
13	lorena
10	lorraine
18	louise
12	love
10	luce
10	lucie
16	lukas
14	lynda
10	mackenzie
10	madeline
19	madison
10	magic
53	mailman
28	mailnull
17	mailtest
24	majordom
30	majordomo
10	makayla
16	man
33	manager
10	manon
11	marc
10	marcelle
18	marco
10	marcus
10	marcy
16	margaret
10	margaud
10	margaux
32	maria
10	marian
19	marie
10	marine
24	mario
41	mark
34	marketing
10	marquerite
15	martha
10	marthe
14	martin
10	martine
12	marvin
24	mary
10	maryse
61	master
12	mathilda
10	mathilde
39	matt
19	matthew
34	max
10	maya
10	mckenna
12	megan
22	melody
18	mia
78	michael
10	miguel
10	mihai
16	mikael
69	mike
10	molly
25	monica
17	monique
13	morgan
24	mp3
11	music
14	myndy
174	mysql
18	nagios
20	nancy
13	naomi
11	nasa
13	natalie
10	nath
10	nathalie
17	nathan
13	navy
10	neo
16	netdump
24	newsletter
19	nfsnobody
13	nicholas
29	nick
41	nicole
11	noel
10	normi
10	oceance
10	odette
67	office
10	oliver
20	olivia
162	oracle
13	orange
12	paige
10	paintball1
23	party
11	pascal
12	password
13	patricia
38	patrick
12	patsy
73	paul
10	paulette
10	pauline
16	pcap
17	perry
12	pete
22	peter
52	pgsql
17	philip
10	philippine
29	pop
18	popa3d
117	postgres
39	postmaster
11	pp
44	pr
31	proxy
45	pub
33	public
12	purple
15	pvm
13	qtss
11	quest
13	rachel
12	radiomail
13	rebecca
31	recruit
12	renee
12	resin
31	rich
67	richard
12	riley
24	rob
44	robert
14	robin
39	ronald
10	root2
10	router
10	roy
37	rpm
16	russ
13	ryan
10	sabine
97	sales
23	sam
16	samantha
51	samba
10	sammy
13	samuel
10	sandra
27	sara
33	sarah
28	sasha
10	savannah
12	scan
22	scott
10	sea
34	sean
24	search
10	seascape
11	sebastian
15	securityagent
28	server
38	service
24	sgi
11	share
21	sharon
10	shaun
10	sheila
54	shell
41	shop
23	simon
44	siteadm
10	skylar
39	smmsp
11	snoopy
12	snort
19	sophia
16	sophie
38	spam
12	spider
18	squid
11	squirrelmail
41	ssh
34	staff
14	stephanie
40	stephen
33	steve
42	steven
14	stuart
72	student
45	students
32	sunny
22	super
49	support
30	susan
15	suva
12	sybase
12	sydney
10	sylvia
21	sys
51	sysadmin
19	sysop
10	system
13	taylor
22	telnetd
83	temp
20	temporary
399	test
34	test1
16	test12
20	test123
26	test2
128	tester
76	testing
23	testuser
11	theo
28	thomas
11	tiffany
24	tim
12	timothy
12	tina
29	tmp
10	todd
14	tokend
16	tom
93	tomcat
43	tony
71	toor
49	transfer
21	trinity
20	unix
20	unknown
71	upload
211	user
48	user1
61	username
24	users
12	valerie
17	vcsa
22	vic
36	victor
35	victoria
22	viktor
14	viper
28	virus
20	visitor
14	vpopmail
11	vscan
10	walker
20	walter
15	wang
11	wayne
147	web
46	webadmin
108	webmaster
29	webpop
17	webster
12	webuser
16	white
20	will
12	willie
13	win
13	windows
16	windowserver
53	word
12	workshop
107	www
80	www-data
35	wwwrun
14	xgridagent
14	xgridcontroller
11	xxx
12	zoe
13	zzz

長くてごめんなさい。。