Mt s cu lnh ssh kim tra server khi b tn cng DDoS

Mt s cu lnh ssh kim tra server khi b tn

cng DDoS
Kim tra s connection trn port 80:
M:
netstat -n | grep :80 |wc -l

Kim tra s lng connection ang trng thi SYN_RECV:

M:
netstat -n | grep :80 | grep SYN_RECV|wc -l

Hin th tt c cc IP ang kt ni v s lng kt ni t mi IP:

M:

netstat -an|grep :80 |awk '{print $5}'|cut -d":" -f1|sort|uniq -c|sort -rn

Nu mun kim tra IP no m nhiu SYN th thm vo:

M:
netstat -an|grep :80|grep SYN |awk '{print $5}'|cut -d":" -f1|sort|uniq -c|
sort -rn

- i vi server c nhiu IP, kim tra IP no ang b tn cng:

M:
netstat -plan

| grep

:80 | awk '{print $4}'| cut -d: -f1 |sort |uniq -c

- Hin th tt c cc IP ang kt ni v s lng kt ni t mi IP:

M:

netstat -an | grep ':80' | awk '{print $5}' | sed s/'::ffff:'// | cut -d":"
-f1 | sort | uniq -c

- Hin th s lng kt ni mi loi

M:

netstat -an | grep :80 | awk '{print $6}' | sort | uniq -c

Trch dn:61 ESTABLISHED

13 FIN_WAIT1
17 FIN_WAIT2
1 LISTEN
25 SYN_RECV
298 TIME_WAIT
- Hin th tt c cc IP ang kt ni v s lng kt ni t mi IP

M:
watch "netstat -an | grep ':80' | awk '{print \$5}' | sed s/'::ffff:'// | cut
-d\":\" -f1 | sort | uniq -c"

- Hin th s lng kt ni mi loi :

M:
watch "netstat -an | grep :80 | awk '{print \$6}' | sort | uniq -c"