title: Little assistance needed regarding linux shell script
body: <p>Actually this script is well know, <a href="http://deflate.medialayer.com/" rel="nofollow noreferrer">DDos Deflate</a> .</p>
  
  <p>But after using, i notice im getting some emails without ip like</p>
  
  <pre><code>Banned the following ip addresses on Thu Mar 21 21:19:01 CET 2013
  
  138 with 138 connections
  </code></pre>
  
  <p>From <a href="http://codepad.org/YUziwU8O#line-1" rel="nofollow noreferrer">source</a>, and from "netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr" command, i notice maybe we need to avoid first line , because looks like first line is just number of total open connections.</p>
  
  <p><img src="https://i.stack.imgur.com/LnDRe.png" alt="command"></p>
  
  <p>Can someone who know this scripting language, check if i`m right and fix it? Maybe some additional basic check like if ip == number of connections , break?</p>