shell安全脚本

将密码输入错误超过4次的IP地址通过firewalld防火墙阻止访问

#!/bin/bash
ip=(`awk '/Failed password/{ array[$(NF-3)]++} END {for(a in array){if(array[a]>4) print a}}' /var/log/secure`)
for i in ${ip[*]}
do
        firewall-cmd  --add-rich-rule="rule family=ipv4 source address=$i/32 service name=ssh reject"
done