查看nginx日志上一分钟前访问大于500的ip

#!/bin/bash
TIME=$(date -d "1 minute ago" +"%H:%M")
#echo "$TIME"
 
for i in `tail -50000 /usr/local/nginx/logs/xx.log |grep "$TIME" |awk '{print $1}'| sort -n |uniq -c |awk '{if($1 >500) print $0}'|awk '{print $2}'`;do
echo "$i" >>/tmp/iplist.txt
/sbin/iptables -I INPUT -m state --state NEW -m tcp -p tcp -s $i --dport 80 -j DROP
done