linux系统防CC攻击自动拉黑IP增强版(Shell脚本)

#!/bin/bash
 
cat /var/log/secure | awk '/Failed/{print $(NF-3)}' | sort | uniq -c |awk '{print $2"="$1}' > /tmp/blacklist
 
 
 
MAXCOUNT="3"
 
 
 
for i in `cat /tmp/blacklist`
 
do
 
    IP=`echo $i | awk -F= '{print $1}'`
 
    NUM=`echo $i | awk -F= '{print $2}'`
 
 
 
if [ $NUM -gt $MAXCOUNT ];then
 
 
 
   grep $IP /etc/hosts.deny > /dev/null
 
   if [ $? -gt 0 ];then
 
       echo "sshd:$IP" >> /etc/hosts.deny
 
   fi
 
fi
 
done