awk, cut, sort, uniq 隞, 臭誑啣箸 ip 蝺賊, 銝衣券蝺賊摨勗撠, 隞乩撠 TCP ESTABLISHED 蝺瑼X:- netstat -an|grep ESTABLISHED|awk '/^tcp/ {print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|more
銴鋆賭誨蝣 撠 port 80 蝺, 撠瘥 ip 蝺賊啣箔蒂脰摨:- netstat -ntu | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr|more
銴鋆賭誨蝣 箸憭交貊 10 IP 園交賂嗡葉 :80 舫亙嚗舀寞唾瑼X亦- netstat -atnp -A inet | grep ":80" | awk -F " " '{print $5}' | awk -F ":" '{print $1}' | sort | uniq -c | sort -nr | head -10
銴鋆賭誨蝣 # m7 a! A" J% n5 z+ ?0 f" X' @
隞乩寞曉唬皞 ip 敺, 靘憒 ip x.x.x.x, 臭誑 iptables 餅餅
* S* w2 T' B( Q! ]撠 IP- iptables -A INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 閫文 IP- iptables -D INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 隞乩:; p* u# ]$ h/ n; }( Y G
https://www.phpini.com/linux/linux-netstat-detect-ddos# R4 M1 f. R4 K3 z2 ]; b9 D
https://www.phpini.com/linux/count-ip-connections* h8 L$ F! u2 r' K$ U4 m5 |+ @8 z
https://www.phpini.com/linux/netstat-check-connections# D3 S8 G: u2 t$ I+ C
=================================================
5 B0 V, R4 m+ E# m1 C) ~血嚗7 |7 C- p# B7 q" `1 V" u$ ]
亥岷芯port鋡怠芯函撘雿剁$ z0 @4 X$ }% i: d5 z
1.)- netstat -tulpn | grep LISTEN
銴鋆賭誨蝣 2.)- lsof -i -P -n | grep LISTEN
銴鋆賭誨蝣 3.)- sudo nmap -sT -O localhost
銴鋆賭誨蝣 =================================================- I& ~# |% \3 j% i" Z
亥岷port雿函backlogbacklog閰脣憭改 嚗 https://cloud.tencent.com/developer/article/1644836
# j$ y: Z7 R1 g6 |5 b |
|