counting failed login attempts group by ip address Posted on 14/05/2014 by admin cat /var/log/auth.log|grep fail|awk '{ print $14}'|sort|uniq --count|sort -nrcat /var/log/auth.log|grep fail|awk '{ print $14}'|sort|uniq --count|sort -nr