how to auto deny ip's via csf

[adanrott]

is there a script or something i can use to automatically add ip's to csf.deny when they have more than X number of connections?

right now im using

netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head

which displays the top 10 ip's that are currently trying to connect with the most connections.

is there a way to auto deny ones with say over 15 ?

adanrott Reviewed by adanrott on 13th Mar 2011. how to auto deny ip's via csf is there a script or something i can use to automatically add ip's to csf.deny when they have more than X number of connections? right now im using netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr | head which displays the top 10 ip's that are currently trying to connect with the most connections. is there a way to auto deny ones with say over 15 ? Rating: 5

[Gavo]

install ddosdeflate

[adanrott]

installing now thanks

[ipcoders]

You can use mod_geoIP. It's very useful and highly configurable.