cat /var/log/auth.log|awk -F 'from |:' /dropbear.*attempt.*from/'{print $(NF-1)}'|awk '{a[$1]++}END{for(i in a)if(a[i]>20)print "ufw insert 1 deny from "i}'|bash