centos redhat系列對(duì)抗ddos之居家必備利器 banip.txt

2019-11-02 16:16:27

字體：大中小

來(lái)源：轉(zhuǎn)載

供稿：網(wǎng)友

復(fù)制代碼代碼如下:

##############################################

#version="20100718"

#author="phpsir"

#author_email="phpsir@phpsir.com"

##############################################

maxnum=50

runmin_max=300

#runmin_max is clear time

ipfile="/tmp/80link.txt"

banip_data_file="/root/banip_data.txt"

ipopenfile="/root/openip.txt"

nsfile="/tmp/netstat80.txt"

myip=`/sbin/ifconfig eth0 | grep inet | awk '{print $2}' | sed 's/addr://' | grep .`

if [ ! -f $ipopenfile ]

then

echo "init $ipopenfile"

touch $ipopenfile

if [ -f $banip_data_file ]

then

source $banip_data_file

echo "last runtime=$runtime"

else

echo "init $banip_data_file"

echo 'runtime='`date "+%s"` > $banip_data_file

source $banip_data_file

runmin_max=-1

echo "start shell" `date "+%Y-%m-%d %H:%M:%S"`

runmin=$((`date "+%s"`-$runtime))

if [ $runmin -gt $runmin_max ]

then

echo $runmin "is bigger than " $runmin_max

echo "clear ips"

/sbin/iptables -F

echo 'runtime='`date "+%s"` > $banip_data_file

else

echo $runmin "is lowwer than " $runmin_max

netstat -an | grep "$myip:80" > $nsfile

echo "Total Links = " `cat $nsfile | wc -l `

echo "Total Links ESTABLISHED = " `cat $nsfile | grep ESTABLISHED | wc -l `

echo "Total Links SYNC = " `cat $nsfile | grep SYN | wc -l `

cat $nsfile | awk '{print $5}' | awk -F: '{print $1}' | sort|uniq -c|sort -rn | head -n 10 > $ipfile

cat $ipfile | while read oneline

ip=`echo $oneline | cut -d " " -f 2`

num=`echo $oneline | cut -d " " -f 1`

str="$ip has linked $num "

banme="yes"

for allowip in `cat $ipopenfile`

echo $ip | grep $allowip > /dev/null

if [ $? -eq 0 ]

then

banme="no"

echo $allowip "banme = " $banme

/sbin/iptables -D INPUT -p tcp -s $ip -d $myip --dport 80 -j REJECT > /dev/null 2>&1

continue

done

if [ $banme = "yes" ]

then

if [ $num -gt "$maxnum" ]

then

/sbin/iptables -L -n | grep "$ip" >/dev/null

status=`echo $?`

if [ $status -eq 1 ]

then

echo "deny $ip ,because $str "

/sbin/iptables -A INPUT -p tcp -s $ip -d $myip --dport 80 -j REJECT

echo "BAN " $ip " OK "

#/sbin/iptables -L -n | grep "$ip"

else

echo > /dev/null

#echo "$str alread reject"

else

echo > /dev/null

#echo "$str $ip ok ,less $maxnum "

done

echo "stop shell" `date "+%Y-%m-%d %H:%M:%S"`

上一篇：完美解決IIS和APACHE的301重定向(帶參數(shù))

下一篇：nginx封空user

學(xué)習(xí)交流

索泰發(fā)布一款GTX 1070 Mini迷你版本:小機(jī)

索泰發(fā)布一款GTX 1070 Mini迷你版本:小機(jī)箱大愛(ài)...

熱門(mén)圖片

猜你喜歡的新聞

猜你喜歡的關(guān)注

国产探花免费观看_亚洲丰满少妇自慰呻吟_97日韩有码在线_资源在线日韩欧美_一区二区精品毛片,辰东完美世界有声小说,欢乐颂第一季,yy玄幻小说排行榜完本

centos redhat系列對(duì)抗ddos之居家必備利器 banip.txt