for i in $(/bin/grep Failed /var/log/auth.log* | /bin/egrep -v 'tim|tlyles|168.215.84.4' | /usr/bin/awk -Ffrom '{print $2}' | /usr/bin/awk '{print $1}' | /usr/bin/sort -u)
do 
    isblocked="$(/sbin/iptables -L -n | grep $i)"
    if [ -z "$isblocked" ]; then
        /sbin/iptables -A INPUT -s $i -j DROP
    fi
done