linux ssh防暴力破解登录

# 防暴力破解登录
```
#!/bin/bash

#Denyhosts SHELL SCRIPT

cat /var/log/secure|awk '/Failed/{print $(NF-3)}'|sort|uniq -c|awk '{print $2"=" $1;}' >/tmp/Denyhosts.txt
DEFINE="5"
for i in `cat /tmp/Denyhosts.txt`
do
    IP=`echo $i|awk -F= '{print $1}'`
    NUM=`echo $i|awk -F= '{print $2}'`
    if [ $NUM -gt $DEFINE ]
    then
        ipExists=`grep $IP /etc/hosts.deny |grep -v grep |wc -l`
        if [ $ipExists -lt 1 ];then
            echo "sshd:$IP" >> /etc/hosts.deny
        fi
    fi
done
```
# 定时任务
```
*/1 * * * * /bin/bash /root/Denyhosts.sh
```