debian封堵dropbear SSH密码错误20次以上的IP

2014-9-29 lqy linux

cat /var/log/auth.log|awk -F 'from |:' /dropbear.*attempt.*from/'{print $(NF-1)}'|awk '{a[$1]++}END{for(i in a)if(a[i]>20)print "ufw insert 1 deny from "i}'|bash

标签: debian

发表评论:

Powered by emlog