awk, cut, sort, uniq 隞, 臭誑啣箸 ip 蝺賊, 銝衣券蝺賊摨勗撠, 隞乩撠 TCP ESTABLISHED 蝺瑼X:- netstat -an|grep ESTABLISHED|awk '/^tcp/ {print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -nr|more
銴鋆賭誨蝣 撠 port 80 蝺, 撠瘥 ip 蝺賊啣箔蒂脰摨:- netstat -ntu | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr|more
銴鋆賭誨蝣 箸憭交貊 10 IP 園交賂嗡葉 :80 舫亙嚗舀寞唾瑼X亦- netstat -atnp -A inet | grep ":80" | awk -F " " '{print $5}' | awk -F ":" '{print $1}' | sort | uniq -c | sort -nr | head -10
銴鋆賭誨蝣
6 o* V# e, [0 a! J8 R' ?隞乩寞曉唬皞 ip 敺, 靘憒 ip x.x.x.x, 臭誑 iptables 餅餅
4 t' J4 {9 @) ^, }! ]8 U5 F0 |撠 IP- iptables -A INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 閫文 IP- iptables -D INPUT -p all -s x.x.x.x/32 -j DROP
銴鋆賭誨蝣 隞乩:* r- a$ i* y/ K
https://www.phpini.com/linux/linux-netstat-detect-ddos
- |/ r& x( o2 `; l/ \8 m4 d) ihttps://www.phpini.com/linux/count-ip-connections
! {+ _; V; I' v& b+ mhttps://www.phpini.com/linux/netstat-check-connections
, o8 o% l% g/ S: J" M=================================================. L! W b# S- x1 f* K' y* P
血嚗; C. n9 L: [' Q f1 F1 K
亥岷芯port鋡怠芯函撘雿剁
) ?6 h" J( E% Z( c1.)- netstat -tulpn | grep LISTEN
銴鋆賭誨蝣 2.)- lsof -i -P -n | grep LISTEN
銴鋆賭誨蝣 3.)- sudo nmap -sT -O localhost
銴鋆賭誨蝣 =================================================
; C/ `' `: i; o0 ?: ^亥岷port雿函backlogbacklog閰脣憭改 嚗 https://cloud.tencent.com/developer/article/1644836, r+ v4 j& g! D
|
|