黑榜如下：

root@VM:~# journalctl -u ssh | grep 'Failed password' | awk '{for(i=1;i<=NF;i++) if ($i=="from") print $(i+1)}' | sort | uniq -c | sort -nr | head -7    250 8.222.190.129     81 179.43.189.98     22 45.95.174.164     16 76.221.186.131      8 195.178.110.211      5 195.178.110.160      4 92.118.39.62
root@VM5EF:~# journalctl -u ssh | grep 'Failed password' | awk '{for(i=1;i<=NF;i++) if ($i=="from") print $(i+1)}' | sort | uniq -c | sort -nr | head -20     31 181.209.63.113      5 195.178.110.160      2 37.67.186.19      2 176.65.148.61      1 78.128.112.74

大合集：

181.209.63.113195.178.110.16037.67.186.19176.65.148.6178.128.112.748.222.190.129179.43.189.9845.95.174.16476.221.186.131195.178.110.211195.178.110.22492.118.39.6278.128.112.74

这个IP 居然出现两次 195.178.110.160，求击落！！！

我都是高位端口了，你还来，就是故意的