首页 > 代码库 > BADIP filter

BADIP filter

#!/bin/bashtouch /tmp/badipnew.log;touch /tmp/newip.log;if [ ! -f "/tmp/badip.log" ];thencat /var/log/secure|grep "authentication failure\|Did not receive identification"|grep -o [0-9]\+\.[0-9\.]\+|grep \. |sort|uniq > /tmp/badip.log;for i in `cat /tmp/badip.log`;doecho $i;iptables -t filter -A INPUT -s $i -m state --state NEW -j DROP ;done;ficat /var/log/secure|grep "authentication failure\|Did not receive identification"|grep -o [0-9]\+\.[0-9\.]\+|grep \. |sort|uniq > /tmp/badipnew.log;diff /tmp/badip.log /tmp/badipnew.log |sed 1d|grep ">"|awk {print $2} > /tmp/newip.logcat /tmp/newip.log >> badip.log;for i in `cat /tmp/newip.log`;doecho $i;iptables -t filter -A INPUT -s $i -m state --state NEW -j DROP ;done;:>/tmp/badipnew.log;:>/tmp/newip.log

 

BADIP filter