自動檢查掃描ssh連接埠的ip，掃描100次的使用者自動禁止命令

自動檢查掃描ssh連接埠的ip，掃描100次的使用者自動禁止命令 01#! /bin/bash02#sshd,failed03cd /var/bak  www.2cto.com  04cat /var/log/secure | grep Failed |awk '{print $13}'| sort | uniq -c >loginfailed.txt05cat /var/log/secure | grep Failed |awk '{print $11}'| sort | uniq -c >>loginfailed.txt06sed -i '/[a-z]/d' loginfailed.txt07sed -i '/[A-Z]/d' loginfailed.txt08cat loginfailed.txt | awk '{if(length($2)>7) print }'|sort -n >abc.txt09mail -s "198,sshd failed" 411876027@qq.com < abc.txt10cat abc.txt | awk '{if (length($1)>2) print }'| awk '{print $2}'>bb.txt11#cat abc.txt | awk '{if ($1~/5|6|7|8|9/) print }'| awk '{print $2}'>>bb.txt12cat bb.txt| xargs -I {} echo "sshd:{}" >> /etc/hosts.deny13rm abc.txt14rm bb.txt15rm loginfailed.txt16cp /var/log/secure /var/logbak/secure`date +%F-%T`17>/var/log/secure    www.2cto.com