ssh登录失败安全脚本

[飞飞侠]

#!/bin/bash
cat /var/log/secure | awk '/Failed/{print $(NF-3)}' | sort | uniq -c|awk '{print $2"="$1;}' > /root/black.txt
DEFINE=20
for i in cat /root/black.txt
do
  IP=<span class="hljs-built_in">echo</span> <span class="hljs-variable">$i</span> | awk -F= <span class="hljs-string">'{print $1}'</span>
  NUM=<span class="hljs-built_in">echo</span> <span class="hljs-variable">$i</span>| awk -F= <span class="hljs-string">'{print $2}'</span>
#  echo $IP
 # echo $NUM
  if [ $NUM -gt $DEFINE ];
  then
     grep $IP /etc/hosts.deny > /dev/null
	if [ $? -gt 0 ];
	then
	echo "sshd:$IP" >> /etc/hosts.deny
	fi
   fi
done

[作者]

帖子