awk, cut, sort, uniq 隞, 臭誑啣箸 ip 蝺賊, 銝衣券蝺賊摨勗撠, 隞乩撠 TCP ESTABLISHED 蝺瑼X:- netstat -an|grep ESTABLISHED|awk '/^tcp/ {print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|more
銴鋆賭誨蝣 撠 port 80 蝺, 撠瘥 ip 蝺賊啣箔蒂脰摨:- netstat -ntu | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr|more
銴鋆賭誨蝣 箸憭交貊 10 IP 園交賂嗡葉 :80 舫亙嚗舀寞唾瑼X亦- netstat -atnp -A inet | grep ":80" | awk -F " " '{print $5}' | awk -F ":" '{print $1}' | sort | uniq -c | sort -nr | head -10
銴鋆賭誨蝣
5 m" a: X7 j$ h$ }) T隞乩寞曉唬皞 ip 敺, 靘憒 ip x.x.x.x, 臭誑 iptables 餅餅5 w% \' y) }1 m" M$ R3 X2 e7 n
撠 IP- iptables -A INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 閫文 IP- iptables -D INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 隞乩:$ P5 c' X% b! f) s
https://www.phpini.com/linux/linux-netstat-detect-ddos( b1 Z% V. O m
https://www.phpini.com/linux/count-ip-connections
* X0 G# w# d; Rhttps://www.phpini.com/linux/netstat-check-connections
) _. Y/ B _. G6 N- |=================================================- W& r- f* g: P3 J
血嚗
& t/ {! p7 Z/ z9 Y/ D% h0 q亥岷芯port鋡怠芯函撘雿剁
; D( I) @7 {) m% n1.)- netstat -tulpn | grep LISTEN
銴鋆賭誨蝣 2.)- lsof -i -P -n | grep LISTEN
銴鋆賭誨蝣 3.)- sudo nmap -sT -O localhost
銴鋆賭誨蝣 =================================================
9 i. x+ f+ h' A9 t& F/ R. X" E: n亥岷port雿函backlogbacklog閰脣憭改 嚗 https://cloud.tencent.com/developer/article/1644836
: u8 v. r. O& n V2 {* _) f7 E: T |
|