恶意IP攻击拒绝访问并加入hosts.deny

#!/bin/bash
#by authoures lihc 2016
#The script is do deny Warning IP


tail -n 2000 /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"="$1;}' > /root/deny_IP.txt
hosts_file=/etc/hosts.deny
echo "########Welcome used auto_deny_ip.sh#######"
echo "###########################################"
echo "###########################################"
echo "###########################################"
DEFINE="5"

cd /root ;rm -rf hosts.deny.old
cp $hosts_file /root/hosts.deny.old



for i in `cat /root/deny_IP.txt`
do

IP=`echo $i |awk -F= '{print $1}'`
NUM=`echo $i|awk -F= '{print $2}'`

if [ $NUM -ge $DEFINE ]; then
        grep $IP /etc/hosts.deny > /dev/null

if [ $? -gt 0 ]; then
        echo "sshd:$IP" >> /etc/hosts.deny
fi

fi

done
#rm -rf /root/deny_IP.txt

if [ $? -ge 0 ];then
        echo "The script is ok"
else
        echo "The script is error ,please check..."
fi