#!/bin/bash netstat -antup|grep SYN_RECV|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c>/opt/tmp exec</opt/tmp while read line do count=echo $line|awk '{print $1}' ip=echo $line |awk '{print $2}' if [ $count -gt 128 ] then iptables -I INPUT -s $ip -j DROP fi done