[Nginx] 在Nginx服务器上屏蔽IP的一些基本配置方法分享

awk '{print $1}' nginx.access.log |sort |uniq -c|sort -n

165.91.122.67
 
 ...
 13610 202.112.113.192
 95772 180.169.22.135
 337418 219.220.141.2
 558378 165.91.122.67

deny 165.91.122.67;

include blockip.conf;

# 屏蔽单个ip访问
 
deny IP; 
# 允许单个ip访问
 
allow IP; 
# 屏蔽所有ip访问
 
deny all; 
# 允许所有ip访问
 
allow all; 
#屏蔽整个段即从123.0.0.1到123.255.255.254访问的命令
 
deny 123.0.0.0/8
#屏蔽IP段即从123.45.0.1到123.45.255.254访问的命令
 
deny 124.45.0.0/16
#屏蔽IP段即从123.45.6.1到123.45.6.254访问的命令
 
deny 123.45.6.0/24

allow 1.1.1.1; 
allow 1.1.1.2;
deny all;

include ./vhost/blockip.conf;

#!/bin/bash
   nginx_home=/usr/local/webserver/nginx
   log_path=/usr/local/webserver/nginx/logs
   tail -n50000 /usr/local/webserver/nginx/logs/access.log \
   |awk '{print $1,$12}' \
   |grep -i -v -E "google|yahoo|baidu|msnbot|FeedSky|sogou" \
   |awk '{print $1}'|sort|uniq -c|sort -rn \
   |awk '{if($1>1000)print "deny "$2";"}' >$nginx_home/conf/vhost/blockip.conf
   /etc/init.d/nginx reload