1 [root@nginx shell]# cat /etc/redhat-release
2 CentOS release 6.7 (Final)
3 [root@nginx shell]# uname -r
4 2.6.32-573.el6.x86_64
5 [root@nginx shell]# /application/nginx/sbin/nginx -v
6 nginx version: nginx/1.10.3

#!/bin/bash#-------------CopyRight-------------
#   Name:Cut Ningx logs
#   Version Number:1.1
#   Type:sh
#   Language:bash shell
#   Date:2018-05-16
#   Author:xubing
#   QQ:442656067
#   Email:eeexu123@163.com
#   Blog:https://www.cnblogs.com/eeexu123/
#Nginx日志轮询切割备份
IP=$(ifconfig eth0 | awk -F "[ :]+" 'NR==2 {print $4}')#cut every day nginx log
cut(){[ -d "/application/nginx/logs" ]||{echo "Nginx logs is not exist."exit 1 }cd /application/nginx/logs/bin/mv www_access.log www_access_$(date +%F).log/application/nginx/sbin/nginx -s reload
}#tar nginx log file to /backup
backup(){[ -d "/backup/$IP" ]||{mkdir -p /backup/$IP}tar -zcf /backup/$IP/www_access_$(date +%F).log.tar.gz www_access_$(date +%F).log#rysnc /backup file to backup serverrsync -avz /backup/$IP rsync_backup@172.16.1.41::backup/ --password-file=/etc/rsync.password  //推送到备份服务器上
}#del before 7 day nginx log
del(){find /application/nginx/logs -type f -name "*$(date +%F).log" -mtime +7 | xargs rm -ffind /backup/$IP -type f -name "*.tar.gz" -mtime +7 | xargs rm -f
}main(){cutsleep 2backupsleep 2del
}
main

#!/bin/bash#-------------CopyRight-------------
#   Name:defined DoS
#   Version Number:1.1
#   Type:sh
#   Language:bash shell
#   Date:2018-05-16
#   Author:xubing
#   QQ:442656067
#   Email:eeexu123@163.com
#   Blog:https://www.cnblogs.com/eeexu123/

ch_web_log(){awk '{print $1}' /application/nginx/logs/www_access_$(date +%F).log|sort|uniq -c|sort -rn -k1>/tmp/ip.log  //将统计的IP访问次数放到ip.log文件中while read linedoPV=`echo $line|awk '{print $1}'`    //IP访问次数IP=`echo $line|awk '{print $2}'`if [ $PV -ge 100 -a `iptables -nL|grep "$IP"|wc -l` -lt 1 ];then   //将PV大于100的IP,并且防火墙上并没有封堵此IP。不然防火墙会重复封堵IPiptables -I INPUT -s $IP -j DROP     //防火墙封堵echo "$IP" >>/tmp/`date +%F`_ip.log  //将封堵的IP放到此文件中echo "The DROP ip is $IP"fidone</tmp/ip.log
}
#删除被防火墙封堵的IP
del(){exec </tmp/$(date +%F -d '1day ago')_ip.logwhile read linedoiptables -D INPUT -s $line -j DROPdone
}main(){ch_web_logsleep 2del
}
main