1 vote

What are the common features to identify Brute-Force attack from Apache log file?

You can use this oneliner: awk '/login.php/ {print $1}' access_log | sort | uniq -c | sort -gr | head -10 What each part of the pipeline does: awk '/login.php/ {print $1}' access_log: reads access....
ThoriumBR's user avatar
  • 54k

Only top scored, non community-wiki answers of a minimum length are eligible