awk, cut, sort, uniq 隞, 臭誑啣箸 ip 蝺賊, 銝衣券蝺賊摨勗撠, 隞乩撠 TCP ESTABLISHED 蝺瑼X:- netstat -an|grep ESTABLISHED|awk '/^tcp/ {print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|more
銴鋆賭誨蝣 撠 port 80 蝺, 撠瘥 ip 蝺賊啣箔蒂脰摨:- netstat -ntu | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr|more
銴鋆賭誨蝣 箸憭交貊 10 IP 園交賂嗡葉 :80 舫亙嚗舀寞唾瑼X亦- netstat -atnp -A inet | grep ":80" | awk -F " " '{print $5}' | awk -F ":" '{print $1}' | sort | uniq -c | sort -nr | head -10
銴鋆賭誨蝣
/ L6 e3 m- G7 x* h隞乩寞曉唬皞 ip 敺, 靘憒 ip x.x.x.x, 臭誑 iptables 餅餅
4 `2 F7 i) r: t4 m8 e+ h' |撠 IP- iptables -A INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 閫文 IP- iptables -D INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 隞乩:
`' K) ?( g, ^, q7 Z7 \0 ^ dhttps://www.phpini.com/linux/linux-netstat-detect-ddos6 Q3 S6 J$ k- C) F; ^) y! O. j
https://www.phpini.com/linux/count-ip-connections* C4 S" w# p" `) R& ~+ {
https://www.phpini.com/linux/netstat-check-connections! |6 {( c/ `2 x% D. t; m
=================================================1 @3 H' t8 M& Y: h4 O2 Q
血嚗0 K1 I) `, `1 s4 ?4 x
亥岷芯port鋡怠芯函撘雿剁
) s8 j7 k7 y* ]* ^1.)- netstat -tulpn | grep LISTEN
銴鋆賭誨蝣 2.)- lsof -i -P -n | grep LISTEN
銴鋆賭誨蝣 3.)- sudo nmap -sT -O localhost
銴鋆賭誨蝣 =================================================; z* P) D3 c3 i) O5 U" g0 V
亥岷port雿函backlogbacklog閰脣憭改 嚗 https://cloud.tencent.com/developer/article/1644836
8 o! t8 u, x8 @4 D/ B0 S+ {, k |
|