Find DDOS/DOS Attach IPs Most of the Hits on Linux server with netstat command

netstat -anp | grep ‘tcp\|udp’ | awk ‘{print$5}’ | cut -d: -f1 | sort | uniq -c | sort -n
OR
netstat -anp | grep ‘tcp\|udp’|grep -vi “wait” | awk ‘{print$5}’ | cut -d: -f1 | sort | uniq -c | sort -n

Leave a Reply