1. #!/bin/bash
2. #Denyhosts SHELL SCRIPT
3. #2013-6-24
4. cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"=" $1;}' >/usr/local/bin/Denyhosts.txt
5. DEFINE="10"
6. for i in `cat /usr/local/bin/Denyhosts.txt`
7. do
8. IP=`echo $i|awk -F= '{print $1}'`
9. NUM=`echo $i|awk -F= '{print $2}'`
10. if [ $NUM -gt $DEFINE ]
11. then
12. grep $IP /etc/hosts.deny >/dev/null
13. if [ $? -gt 0 ];
14. then
15. echo "sshd:$IP" >> /etc/hosts.deny
16. fi
17. fi
18. done
1. 添加到定時(shí)任務(wù)
2. crontab -e
3. 添加定時(shí)任務(wù)
4. */2 * * * * /usr/local/bin/denyhosts.sh
1. 執(zhí)行啟動(dòng)
2. /sbin/service crond start