#!/bin/bash
date=`date +%Y%m%d_%H%M`
for i in `cat /var/log/secure |awk '/Failed/{print $(NF-3)}'|sort |uniq -c|sort -nr|awk '{print $2"="$1}'`
do
IP=`echo $i|awk -F"=" '{print $1}'`
NUM=`echo $i |awk -F"=" '{print $2}'`
if [ ${NUM} -gt 2000 ];
then
ipExist=`grep ${IP} /etc/hosts.deny|grep -v grep|wc -l`
if
[ ${ipExist} -lt 1 ];
then
echo "sshd:$IP:deny" >> /etc/hosts.deny
echo "Date: ${date} IP: ${IP} Num: ${NUM}" >> /tmp/deny_ip.log
fi
fi
done
限制暴力破解
最新推荐文章于 2025-06-19 21:50:49 发布