\n
![\"9](\"https:\/\/img.php.cn\/upload\/article\/001\/275\/013\/3395947128e19f6f73da1d1b8db9f5b5-0.png\" "\\"9")
<\/p>\n
\n <\/p>\n
#!\/bin\/bashDATE=$(date +%d\/%b\/%Y:%H:%M)LOG_FILE=\/usr\/local\/nginx\/logs\/demo2.access.logABNORMAL_IP=$(tail -n5000 $LOG_FILE |grep $DATE |awk '{a[$1]++}END{for(i in a)if(a[i]>10)print i}')for IP in $ABNORMAL_IP; do if [ $(iptables -vnL |grep -c \"$IP\") -eq 0 ]; then iptables -I INPUT -s $IP -j DROP echo \"$(date +'%F_%T') $IP\" >> \/tmp\/drop_ip.log fidone<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- Linux \u7cfb\u7edf\u53d1\u9001\u544a\u8b66\u811a\u672c <\/li>\n<\/ol>\n
# yum install mailx# vi \/etc\/mail.rcset from=baojingtongzhi@163.com smtp=smtp.163.comset smtp-auth-user=baojingtongzhi@163.com smtp-auth-password=123456set smtp-auth=login<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- MySQL \u6570\u636e\u5e93\u5907\u4efd\u5355\u5faa\u73af <\/li>\n<\/ol>\n
#!\/bin\/bashDATE=$(date +%F_%H-%M-%S)HOST=localhostUSER=backupPASS=123.comBACKUP_DIR=\/data\/db_backupDB_LIST=$(mysql -h$HOST -u$USER -p$PASS -s -e \"show databases;\" 2>\/dev\/null |egrep -v \"Database|information_schema|mysql|performance_schema|sys\")for DB in $DB_LIST; do BACKUP_NAME=$BACKUP_DIR\/${DB}_${DATE}.sql if ! mysqldump -h$HOST -u$USER -p$PASS -B $DB > $BACKUP_NAME 2>\/dev\/null; then echo \"$BACKUP_NAME \u5907\u4efd\u5931\u8d25!\" fidone<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- MySQL \u6570\u636e\u5e93\u5907\u4efd\u591a\u5faa\u73af <\/li>\n<\/ol>\n
#!\/bin\/bashDATE=$(date +%F_%H-%M-%S)HOST=localhostUSER=backupPASS=123.comBACKUP_DIR=\/data\/db_backupDB_LIST=$(mysql -h$HOST -u$USER -p$PASS -s -e \"show databases;\" 2>\/dev\/null |egrep -v \"Database|information_schema|mysql|performance_schema|sys\")for DB in $DB_LIST; do BACKUP_DB_DIR=$BACKUP_DIR\/${DB}_${DATE} [ ! -d $BACKUP_DB_DIR ] && mkdir -p $BACKUP_DB_DIR &>\/dev\/null TABLE_LIST=$(mysql -h$HOST -u$USER -p$PASS -s -e \"use $DB;show tables;\" 2>\/dev\/null) for TABLE in $TABLE_LIST; do BACKUP_NAME=$BACKUP_DB_DIR\/${TABLE}.sql if ! mysqldump -h$HOST -u$USER -p$PASS $DB $TABLE > $BACKUP_NAME 2>\/dev\/null; then echo \"$BACKUP_NAME \u5907\u4efd\u5931\u8d25!\" fi donedone<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- Nginx \u8bbf\u95ee\u8bbf\u95ee\u65e5\u5fd7\u6309\u5929\u5207\u5272 <\/li>\n<\/ol>\n
#!\/bin\/bashLOG_DIR=\/usr\/local\/nginx\/logsYESTERDAY_TIME=$(date -d \"yesterday\" +%F)LOG_MONTH_DIR=$LOG_DIR\/$(date +\"%Y-%m\")LOG_FILE_LIST=\"default.access.log\"for LOG_FILE in $LOG_FILE_LIST; do [ ! -d $LOG_MONTH_DIR ] && mkdir -p $LOG_MONTH_DIR mv $LOG_DIR\/$LOG_FILE $LOG_MONTH_DIR\/${LOG_FILE}_${YESTERDAY_TIME}donekill -USR1 $(cat \/var\/run\/nginx.pid)<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- Nginx \u8bbf\u95ee\u65e5\u5fd7\u5206\u6790\u811a\u672c <\/li>\n<\/ol>\n
#!\/bin\/bash# \u65e5\u5fd7\u683c\u5f0f: $remote_addr - $remote_user [$time_local] \"$request\" $status $body_bytes_sent \"$http_referer\" \"$http_user_agent\" \"$http_x_forwarded_for\"LOG_FILE=$1echo \"\u7edf\u8ba1\u8bbf\u95ee\u6700\u591a\u768410\u4e2aIP\"awk '{a[$1]++}END{print \"UV:\",length(a);for(v in a)print v,a[v]}' $LOG_FILE |sort -k2 -nr |head -10echo \"----------------------\"echo \"\u7edf\u8ba1\u65f6\u95f4\u6bb5\u8bbf\u95ee\u6700\u591a\u7684IP\"awk '$4>=\"[01\/Dec\/2018:13:20:25\" && $410)print v,a[v]}}' $LOG_FILE |sort -k2 -nrecho \"----------------------\"echo \"\u7edf\u8ba1\u8bbf\u95ee\u9875\u9762\u72b6\u6001\u7801\u6570\u91cf\"awk '{a[$7\" \"$9]++}END{for(v in a){if(a[v]>5)print v,a[v]}}'<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- \u67e5\u770b\u7f51\u5361\u5b9e\u65f6\u6d41\u91cf\u811a\u672c <\/li>\n<\/ol>\n
#!\/bin\/bashNIC=$1echo -e \" In ------ Out\"while true; do OLD_IN=$(awk '$0~\"'$NIC'\"{print $2}' \/proc\/net\/dev) OLD_OUT=$(awk '$0~\"'$NIC'\"{print $10}' \/proc\/net\/dev) sleep 1 NEW_IN=$(awk '$0~\"'$NIC'\"{print $2}' \/proc\/net\/dev) NEW_OUT=$(awk '$0~\"'$NIC'\"{print $10}' \/proc\/net\/dev) IN=$(printf \"%.1f%s\" \"$((($NEW_IN-$OLD_IN)\/1024))\" \"KB\/s\") OUT=$(printf \"%.1f%s\" \"$((($NEW_OUT-$OLD_OUT)\/1024))\" \"KB\/s\") echo \"$IN $OUT\" sleep 1done<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- \u670d\u52a1\u5668\u7cfb\u7edf\u914d\u7f6e\u521d\u59cb\u5316\u811a\u672c \u53e6\u5916\uff0c\u641c\u7d22\u516c\u4f17\u53f7Linux\u5c31\u8be5\u8fd9\u6837\u5b66\u540e\u53f0\u56de\u590d\u201cLinux\u201d\uff0c\u83b7\u53d6\u4e00\u4efd\u60ca\u559c\u793c\u5305\u3002 <\/li>\n<\/ol>\n
#\/bin\/bash# \u8bbe\u7f6e\u65f6\u533a\u5e76\u540c\u6b65\u65f6\u95f4ln -s \/usr\/share\/zoneinfo\/Asia\/Shanghai \/etc\/localtimeif ! crontab -l |grep ntpdate &>\/dev\/null ; then (echo \"* 1 * * * ntpdate time.windows.com >\/dev\/null 2>&1\";crontab -l) |crontabfi# \u7981\u7528selinuxsed -i '\/SELINUX\/{s\/permissive\/disabled\/}' \/etc\/selinux\/config# \u5173\u95ed\u9632\u706b\u5899if egrep \"7.[0-9]\" \/etc\/redhat-release &>\/dev\/null; then systemctl stop firewalld systemctl disable firewalldelif egrep \"6.[0-9]\" \/etc\/redhat-release &>\/dev\/null; then service iptables stop chkconfig iptables offfi# \u5386\u53f2\u547d\u4ee4\u663e\u793a\u64cd\u4f5c\u65f6\u95f4if ! grep HISTTIMEFORMAT \/etc\/bashrc; then echo 'export HISTTIMEFORMAT=\"%F %T `whoami` \"' >> \/etc\/bashrcfi# SSH\u8d85\u65f6\u65f6\u95f4if ! grep \"TMOUT=600\" \/etc\/profile &>\/dev\/null; then echo \"export TMOUT=600\" >> \/etc\/profilefi# \u7981\u6b62root\u8fdc\u7a0b\u767b\u5f55sed -i 's\/#PermitRootLogin yes\/PermitRootLogin no\/' \/etc\/ssh\/sshd_config# \u7981\u6b62\u5b9a\u65f6\u4efb\u52a1\u5411\u53d1\u9001\u90ae\u4ef6sed -i 's\/^MAILTO=root\/MAILTO=\"\"\/' \/etc\/crontab# \u8bbe\u7f6e\u6700\u5927\u6253\u5f00\u6587\u4ef6\u6570if ! grep \"* soft nofile 65535\" \/etc\/security\/limits.conf &>\/dev\/null; then cat >> \/etc\/security\/limits.conf > \/etc\/sysctl.conf \/proc\/sys\/vm\/swappiness# \u5b89\u88c5\u7cfb\u7edf\u6027\u80fd\u5206\u6790\u5de5\u5177\u53ca\u5176\u4ed6yum install gcc make autoconf vim sysstat net-tools iostat if<\/pre>\n \u767b\u5f55\u540e\u590d\u5236 <\/p>\n
\n- \u76d1\u63a7 100 \u53f0\u670d\u52a1\u5668\u78c1\u76d8\u5229\u7528\u7387\u811a\u672c <\/li>\n<\/ol>\n
#!\/bin\/bashHOST_INFO=host.infofor IP in $(awk '\/^[^#]\/{print $1}' $HOST_INFO); do USER=$(awk -v ip=$IP 'ip==$1{print $2}' $HOST_INFO) PORT=$(awk -v ip=$IP 'ip==$1{print $3}' $HOST_INFO) TMP_FILE=\/tmp\/disk.tmp ssh -p $PORT $USER@$IP 'df -h' > $TMP_FILE USE_RATE_LIST=$(awk 'BEGIN{OFS=\"=\"}\/^\/dev\/{print $NF,int($5)}' $TMP_FILE) for USE_RATE in $USE_RATE_LIST; do PART_NAME=${USE_RATE%=*} USE_RATE=${USE_RATE#*=} if [ $USE_RATE -ge 80 ]; then echo \"Warning: $PART_NAME Partition usage $USE_RATE%!\" fi donedone<\/pre>\n \u767b\u5f55\u540e\u590d\u5236
\n<\/em><\/span><\/strong><\/span><\/strong> <\/p>\n\u4ee5\u4e0a\u5c31\u662f9 \u4e2a\u5b9e\u7528 shell \u811a\u672c\uff0c\u5efa\u8bae\u6536\u85cf\uff01\u7684\u8be6\u7ec6\u5185\u5bb9\uff0c\u66f4\u591a\u8bf7\u5173\u6ce8\u7c73\u4e91\u5176\u5b83\u76f8\u5173\u6587\u7ae0\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
Dos \u653b\u51fb\u9632\u8303\uff08\u81ea\u52a8\u5c4f\u853d\u653b\u51fb IP\uff09 #!\/bin\/bashDATE=$(date +%d\/%b\/%Y:%H:%M)LOG_FILE=\/usr\/local\/nginx\/logs\/demo2.access.logABNORMAL_IP=$(tail -n5000 $LOG_FILE |grep $DATE |awk ‘{a[$1]++}END{for(i in a)if(a[i]>10)print i}’)for IP in $ABNORMAL_IP; do if [ $(iptables -vnL |grep -c “$IP”) -eq 0 ]; then iptables -I INPUT -s $IP -j DROP echo “$(date +’%F_%T’) $IP” >> \/tmp\/drop_ip.log fidone \u767b\u5f55\u540e\u590d\u5236 Linux \u7cfb\u7edf\u53d1\u9001\u544a\u8b66\u811a\u672c # yum install mailx# vi \/etc\/mail.rcset from=baojingtongzhi@163.com smtp=smtp.163.comset smtp-auth-user=baojingtongzhi@163.com smtp-auth-password=123456set smtp-auth=login \u767b\u5f55\u540e\u590d\u5236 MySQL \u6570\u636e\u5e93\u5907\u4efd\u5355\u5faa\u73af #!\/bin\/bashDATE=$(date +%F_%H-%M-%S)HOST=localhostUSER=backupPASS=123.comBACKUP_DIR=\/data\/db_backupDB_LIST=$(mysql -h$HOST -u$USER -p$PASS -s -e “show databases;” 2>\/dev\/null |egrep -v “Database|information_schema|mysql|performance_schema|sys”)for DB in $DB_LIST; do BACKUP_NAME=$BACKUP_DIR\/${DB}_${DATE}.sql if ! mysqldump -h$HOST -u$USER -p$PASS -B $DB > $BACKUP_NAME 2>\/dev\/null; then echo “$BACKUP_NAME \u5907\u4efd\u5931\u8d25!” fidone \u767b\u5f55\u540e\u590d\u5236 MySQL \u6570\u636e\u5e93\u5907\u4efd\u591a\u5faa\u73af #!\/bin\/bashDATE=$(date +%F_%H-%M-%S)HOST=localhostUSER=backupPASS=123.comBACKUP_DIR=\/data\/db_backupDB_LIST=$(mysql -h$HOST -u$USER -p$PASS -s -e “show databases;” 2>\/dev\/null |egrep -v “Database|information_schema|mysql|performance_schema|sys”)for DB in $DB_LIST; do BACKUP_DB_DIR=$BACKUP_DIR\/${DB}_${DATE} [ ! -d $BACKUP_DB_DIR ] && mkdir -p $BACKUP_DB_DIR &>\/dev\/null TABLE_LIST=$(mysql -h$HOST -u$USER -p$PASS -s -e “use $DB;show tables;” 2>\/dev\/null) for TABLE in $TABLE_LIST; do BACKUP_NAME=$BACKUP_DB_DIR\/${TABLE}.sql if ! mysqldump -h$HOST -u$USER -p$PASS $DB $TABLE > $BACKUP_NAME 2>\/dev\/null; then echo “$BACKUP_NAME \u5907\u4efd\u5931\u8d25!” fi donedone \u767b\u5f55\u540e\u590d\u5236 Nginx \u8bbf\u95ee\u8bbf\u95ee\u65e5\u5fd7\u6309\u5929\u5207\u5272 #!\/bin\/bashLOG_DIR=\/usr\/local\/nginx\/logsYESTERDAY_TIME=$(date -d “yesterday” +%F)LOG_MONTH_DIR=$LOG_DIR\/$(date +”%Y-%m”)LOG_FILE_LIST=”default.access.log”for LOG_FILE in $LOG_FILE_LIST; do [ ! -d $LOG_MONTH_DIR ] && mkdir -p $LOG_MONTH_DIR mv $LOG_DIR\/$LOG_FILE $LOG_MONTH_DIR\/${LOG_FILE}_${YESTERDAY_TIME}donekill -USR1 $(cat \/var\/run\/nginx.pid) \u767b\u5f55\u540e\u590d\u5236 Nginx \u8bbf\u95ee\u65e5\u5fd7\u5206\u6790\u811a\u672c #!\/bin\/bash# \u65e5\u5fd7\u683c\u5f0f: $remote_addr – $remote_user [$time_local] “$request” $status $body_bytes_sent “$http_referer” “$http_user_agent” “$http_x_forwarded_for”LOG_FILE=$1echo “\u7edf\u8ba1\u8bbf\u95ee\u6700\u591a\u768410\u4e2aIP”awk ‘{a[$1]++}END{print “UV:”,length(a);for(v in a)print v,a[v]}’ $LOG_FILE |sort -k2 -nr |head -10echo “———————-“echo “\u7edf\u8ba1\u65f6\u95f4\u6bb5\u8bbf\u95ee\u6700\u591a\u7684IP”awk ‘$4>=”[01\/Dec\/2018:13:20:25” && $410)print v,a[v]}}’ $LOG_FILE |sort -k2 -nrecho “———————-“echo “\u7edf\u8ba1\u8bbf\u95ee\u9875\u9762\u72b6\u6001\u7801\u6570\u91cf”awk ‘{a[$7” “$9]++}END{for(v in a){if(a[v]>5)print v,a[v]}}’ \u767b\u5f55\u540e\u590d\u5236 \u67e5\u770b\u7f51\u5361\u5b9e\u65f6\u6d41\u91cf\u811a\u672c #!\/bin\/bashNIC=$1echo -e ” In —— Out”while true; do OLD_IN=$(awk ‘$0~”‘$NIC'”{print $2}’ \/proc\/net\/dev) OLD_OUT=$(awk ‘$0~”‘$NIC'”{print $10}’ \/proc\/net\/dev) sleep 1 NEW_IN=$(awk ‘$0~”‘$NIC'”{print $2}’ \/proc\/net\/dev) NEW_OUT=$(awk ‘$0~”‘$NIC'”{print $10}’ \/proc\/net\/dev) IN=$(printf “%.1f%s” “$((($NEW_IN-$OLD_IN)\/1024))” “KB\/s”) OUT=$(printf “%.1f%s” “$((($NEW_OUT-$OLD_OUT)\/1024))” “KB\/s”) echo “$IN $OUT” sleep 1done \u767b\u5f55\u540e\u590d\u5236 \u670d\u52a1\u5668\u7cfb\u7edf\u914d\u7f6e\u521d\u59cb\u5316\u811a\u672c \u53e6\u5916\uff0c\u641c\u7d22\u516c\u4f17\u53f7Linux\u5c31\u8be5\u8fd9\u6837\u5b66\u540e\u53f0\u56de\u590d\u201cLinux\u201d\uff0c\u83b7\u53d6\u4e00\u4efd\u60ca\u559c\u793c\u5305\u3002 #\/bin\/bash# \u8bbe\u7f6e\u65f6\u533a\u5e76\u540c\u6b65\u65f6\u95f4ln -s \/usr\/share\/zoneinfo\/Asia\/Shanghai \/etc\/localtimeif ! crontab -l |grep ntpdate &>\/dev\/null ; then (echo “* 1 * * * ntpdate time.windows.com >\/dev\/null 2>&1”;crontab -l) |crontabfi# \u7981\u7528selinuxsed -i ‘\/SELINUX\/{s\/permissive\/disabled\/}’ \/etc\/selinux\/config# \u5173\u95ed\u9632\u706b\u5899if egrep “7.[0-9]” \/etc\/redhat-release &>\/dev\/null; then systemctl stop firewalld systemctl disable firewalldelif egrep “6.[0-9]” \/etc\/redhat-release &>\/dev\/null; then service iptables stop chkconfig iptables offfi# \u5386\u53f2\u547d\u4ee4\u663e\u793a\u64cd\u4f5c\u65f6\u95f4if ! grep HISTTIMEFORMAT \/etc\/bashrc; then echo ‘export HISTTIMEFORMAT=”%F %T `whoami` “‘ >> \/etc\/bashrcfi# SSH\u8d85\u65f6\u65f6\u95f4if ! grep “TMOUT=600” \/etc\/profile &>\/dev\/null; then echo “export TMOUT=600” >> \/etc\/profilefi# \u7981\u6b62root\u8fdc\u7a0b\u767b\u5f55sed -i ‘s\/#PermitRootLogin yes\/PermitRootLogin no\/’ \/etc\/ssh\/sshd_config# \u7981\u6b62\u5b9a\u65f6\u4efb\u52a1\u5411\u53d1\u9001\u90ae\u4ef6sed -i ‘s\/^MAILTO=root\/MAILTO=””\/’ \/etc\/crontab# \u8bbe\u7f6e\u6700\u5927\u6253\u5f00\u6587\u4ef6\u6570if ! grep “* soft nofile 65535″ \/etc\/security\/limits.conf &>\/dev\/null; then cat >> \/etc\/security\/limits.conf > \/etc\/sysctl.conf \/proc\/sys\/vm\/swappiness# \u5b89\u88c5\u7cfb\u7edf\u6027\u80fd\u5206\u6790\u5de5\u5177\u53ca\u5176\u4ed6yum install gcc make autoconf vim sysstat net-tools iostat if \u767b\u5f55\u540e\u590d\u5236 \u76d1\u63a7 100 \u53f0\u670d\u52a1\u5668\u78c1\u76d8\u5229\u7528\u7387\u811a\u672c #!\/bin\/bashHOST_INFO=host.infofor IP in $(awk ‘\/^[^#]\/{print $1}’ $HOST_INFO); do USER=$(awk -v ip=$IP ‘ip==$1{print $2}’ $HOST_INFO) PORT=$(awk -v ip=$IP ‘ip==$1{print $3}’ $HOST_INFO) TMP_FILE=\/tmp\/disk.tmp ssh -p $PORT $USER@$IP ‘df -h’ > $TMP_FILE USE_RATE_LIST=$(awk ‘BEGIN{OFS=”=”}\/^\/dev\/{print $NF,int($5)}’ $TMP_FILE) for USE_RATE in $USE_RATE_LIST; do PART_NAME=${USE_RATE%=*} USE_RATE=${USE_RATE#*=} if [ $USE_RATE -ge 80 ]; then echo “Warning: $PART_NAME Partition usage $USE_RATE%!” fi donedone \u767b\u5f55\u540e\u590d\u5236 \u4ee5\u4e0a\u5c31\u662f9 \u4e2a\u5b9e\u7528 shell \u811a\u672c\uff0c\u5efa\u8bae\u6536\u85cf\uff01\u7684\u8be6\u7ec6\u5185\u5bb9\uff0c\u66f4\u591a\u8bf7\u5173\u6ce8\u7c73\u4e91\u5176\u5b83\u76f8\u5173\u6587\u7ae0\uff01<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-16618","post","type-post","status-publish","format-standard","hentry","category-os"],"_links":{"self":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/16618","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/comments?post=16618"}],"version-history":[{"count":0,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/posts\/16618\/revisions"}],"wp:attachment":[{"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/media?parent=16618"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/categories?post=16618"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fwq.ai\/blog\/wp-json\/wp\/v2\/tags?post=16618"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}