awk, cut, sort, uniq 隞, 臭誑啣箸 ip 蝺賊, 銝衣券蝺賊摨勗撠, 隞乩撠 TCP ESTABLISHED 蝺瑼X:- netstat -an|grep ESTABLISHED|awk '/^tcp/ {print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|more
銴鋆賭誨蝣 撠 port 80 蝺, 撠瘥 ip 蝺賊啣箔蒂脰摨:- netstat -ntu | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr|more
銴鋆賭誨蝣 箸憭交貊 10 IP 園交賂嗡葉 :80 舫亙嚗舀寞唾瑼X亦- netstat -atnp -A inet | grep ":80" | awk -F " " '{print $5}' | awk -F ":" '{print $1}' | sort | uniq -c | sort -nr | head -10
銴鋆賭誨蝣 % P5 G9 ?, N- o O$ c5 s: ~
隞乩寞曉唬皞 ip 敺, 靘憒 ip x.x.x.x, 臭誑 iptables 餅餅' d& v& }+ G' R: g, j# g5 B
撠 IP- iptables -A INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 閫文 IP- iptables -D INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 隞乩:7 d: g+ y2 p+ n; u- }: j0 G
https://www.phpini.com/linux/linux-netstat-detect-ddos
1 R9 b; {& Y: p5 C, khttps://www.phpini.com/linux/count-ip-connections
7 H* h' h# K jhttps://www.phpini.com/linux/netstat-check-connections4 w* L9 E, _; E' s/ I
=================================================0 O. ?- w; x! Y, k) W$ {
血嚗
* i t. {6 S! L6 l- T亥岷芯port鋡怠芯函撘雿剁
! S+ `3 T8 }% {% e' Q( `1.)- netstat -tulpn | grep LISTEN
銴鋆賭誨蝣 2.)- lsof -i -P -n | grep LISTEN
銴鋆賭誨蝣 3.)- sudo nmap -sT -O localhost
銴鋆賭誨蝣 =================================================' k( C0 _- G! e: A4 W: h7 s1 g# X
亥岷port雿函backlogbacklog閰脣憭改 嚗 https://cloud.tencent.com/developer/article/16448366 O; K: }, a5 k" @
|
|