Paid Advertising
-----start script-----
#!/bin/sh
grep sshd /var/log/authlog | grep "Invalid" | awk '{print $10}' | sort | uniq -c | \
(while read num ips; do
if [ $num -gt 5 ]; then
if ! pfctl -s rules | grep -q $ips ; then
pfctl -t attackers -T add $ips
fi
fi
done
)
grep sshd /var/log/authlog | grep "Failed" | rev | cut -d\ -f 4 | rev | sort | uniq -c | \
( while read num ips; do
if [ $num -gt 5 ]; then
if ! pfctl -s rules | grep -q $ips ; then
pfctl -t attackers -T add $ips
fi
fi
done
)
----end script-------------
