cat /var/log/secure | egrep "Failed|Failure"
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c | sort -nr
cat /var/log/secure | egrep "Failed|Failure" | awk '{print $11}' | uniq -c | sort -nr > fail-ssh-ip.txt