892
技术社区[云栖]
Denyhosts shell script
#!/bin/sh
#Denyhosts shell script
cat /var/log/secure | awk '/Failed/{print $(NF-3)}' | sort | uniq -c | awk '{print $2"="$1;}' > /root/blacklist.txt
DEFINE="5"
for i in `cat /root/blacklist.txt`
do
IP=`echo $i | awk -F= '{print $1}'`
NUM=`echo $i | awk -F= '{print $2}'`
if [ $NUM -gt $DEFINE ];
then grep $IP /etc/hosts.deny > /dev/null
if [ $? -gt 0 ];
then echo "sshd:$IP" >> /etc/hosts.deny
fi
fi
done
* */1 * * * sh /root/shell/deny-ssh.sh
最后更新：2017-08-21 10:32:46