SSH安全防护脚本--自动添加到/etc/hosts.deny

1 修改ssh默认端口

vim /etc/ssh/sshd_config
Port 2***


systemctl restart sshd

2 检查命令

awk '/Failed/{print $(NF-3)}' /var/log/secure|sort|uniq -c|awk '{print $2 "=" $1}'

cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"="$1;}' 

3 编写脚本

vim limit_ssh.sh

# 输入密码错误3次以上，IP自动加入黑名单

#! /bin/bash
#chkconfig:2345 80 90
#decription:limit_ssh autostart
cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"="$1;}' > /root/limit_ssh.txt
DEFINE="3" 
for i in `cat /root/limit_ssh.txt`
do
  IP=`echo $i |awk -F= '{print $1}'&#