# tail -f /home/*/logs/*ss.log | grep ' 404 ' | /usr/local/bin/evasive.pl --warn --count=2 --ipset

# netstat -pant4 | awk '{print $5}'| grep -vE '(:80|:443|:3306|:8080)' | cut -d. -f1,2,3 | sort | uniq -c | sort -nk1 | tail -n 10