#!

/bin/bash

#This script looks through logs for failed ssh logins

#And creates sperate text files containing invalid and valid failed logins

#Fetches failed user logins with time, date, user, and IP

grep -i failed /var/log/secure | grep ssh |

awk '{ print $1, $2" ", $3" ", $9" ", $11 }' > failed-logins.txt

#Splits failed-logins in INVALID & VALID

cat failed-logins.txt | grep -i invalid > invalid-failed-logins.txt

cat failed-logins.txt | grep -v invalid > valid-failed-logins.txt

file:///C/Users/Alyssa/Documents/UAT/SIP404/Evans_Portfolio/Objective3/NTS370_AEvans_Final.txt[2/11/2018 4:50:08 PM]