CentOS防CC攻击shell脚本

君子邪

1. #!/bin/sh
   
2. cd /var/log/httpd/
   
3. cat access_log|awk '{print $1}'|sort|uniq -c|sort -n -r|head -n 20 > a
   
4. cp /dev/null access_log
   
5. cp /dev/null error_log
   
6. cp /dev/null limit.sh
   
7. cp /dev/null c
   
8. #awk '{print $2}' a|awk -F. '{print $1"."$2"."$3}'|sort|uniq > b
   
9. cat a|while read num ip
   
10. do
    
11. if [ "$num" -gt "20" ]
    
12. then
    
13. echo $ip >> c
    
14. fi
    
15. done
    
16. cat c|awk -F. '{print $1"."$2"."$3}'|sort|uniq > b
    
17. #cat c|sort|uniq > b
    
18. for i in `cat b`
    
19. #cat b|sed 's/\./ /g'|while read i1 i2 i3 i4
    
20. do
    
21. if `cat ourip |grep $i > /dev/null 2>&1`
    
22. then
    
23. echo "`date` $i" >> test
    
24. else
    
25. echo "iptables -I INPUT -p tcp -dport 80 -s $i.0/24 -j DROP" >> limit.sh
    
26. fi
    
27. done

复制代码

运行命令：sh limit.sh