生产环境中用到的二个shell脚本

#!/bin/bash
#edit: www.jb200.com
#Prevent SSH attack
#
SLEEPTIME=30
lastb -n 500| grep -v "^$" | grep -v "btmp" | linuxjishu/13830.html target=_blank class=infotextkey>awk '{print $3}' | sort | uniq -c  | grep -v "公司IP" |sort -nr > attack.log
while true
do
     while read line
     do
          IP=`echo $line | awk '{print $2}'`
          TIME=`echo $line | awk '{print $1}'`
          if [ "$TIME" -gt 10 ]; then
               grep "$IP"  /etc/hosts.deny &> /dev/null
               if [ "$?" -ne "0" ]; then
                   echo "sshd: $IP" >> /etc/hosts.deny
               fi
          fi
     done < attack.log
     /bin/sleep $SLEEPTIME
done

#/bin/bash
# edit: www.jb200.com
#
SLEEPTIME=30
while true
do
     id=`ps aux | grep httpd | grep -v "grep" | wc -l`
     if [ $id -lt 1 ]; then
         echo "---`date +"%F %H:%M:%S"`-----httpd restart." >> /u/scripts/httpd_monitor.log
         /etc/init.d/httpd start
     fi
     sleep $SLEEPTIME
done