答：可以通过tcp_wrapper拉黑某个IP地址：首先在配置文件“/etc/vsftpd.conf”中启用参数tcp_wrapper，即“tcp_wrapper=YES”；然后将要拉黑的IP地址添加到文件“/etc/host.deny”中。 打开”/etc/hosts.deny”文件。 $ vi /etc/hosts.deny 将要拉黑的IP地址添加到文件的最后。

hosts.deny This file contains access rules which are used to

deny connections to network services that either use

the tcp_wrappers library or that have been

started through a tcp_wrappers-enabled xinetd.

The rules in this file can also be set up in

/etc/hosts.allow with a 'deny' option instead.

See 'man 5 hosts_options' and 'man 5 hosts_access'

for information on rule syntax.

See 'man tcpd' for information on tcp_wrappers

vsftpd:172.16.16.1