Shell script automatically pull black SSH login failed more than 3 times IP

#!/bin/bash

#Created by T.sweet

Iptables_file=/etc/sysconfig/iptables #防火墙配置文件

Ip_addr= ' Tail-n 500/var/log/secure | grep "Failed Password" | awk ' {print $11} ' | uniq-c | awk ' $1>= 3{print '

#取出登录错误3次以上的IP

Cat $iptables _file | grep $IP _addr >/dev/null

If [$?-ne 0];then

Sed-i "/lo/a-a input-s $IP _addr-p tcp--dport 22-j DROP" $iptables _file

/etc/init.d/iptables restart

Else

echo "This IP has already Deny"

Fi

Practice writing to play .....

This article from "Self-reliance Thick tak" blog, declined reprint!

Shell script automatically pull black SSH login failed more than 3 times IP