forum.lissyara.su

Код: Выделить всё

# get all requests
tail -20000 /var/log/nginx-access.log | grep -v "www.test-hf.ru" | grep -v -f $patterns_file | \
        tail -10000 | awk '{print $1" "$3" "$7" "$12}' | sort | uniq -c | sort | tail -100 |
{
while read count ip site request useragent
do
        if [ $count -ge $ddos_limit ]
        then
                # add to ipfw table
                echo $ip >> $table
                # add to temporary file
                echo "banned $site: $ip with limit $ddos_limit"
                # add to log file
                echo $start_time $site $count $ip >> $log_file
        fi
done
}