hello there,
can i have a command to show me the IP`s from where i get a lot of connections? i am under some kind of DDOS attack and i have no idea to isolate the ip-s doing it
for now am using
netstat -plan |grep :80 | awk '{print $4}' | cut -d: -f1 | sort | uniq -c | sort -n
to check how many connections my website has
703b17d5-3b5d-412a-93cb-be1181dbc27e
1.03.01

*nix?
windows?

centos
703b17d5-3b5d-412a-93cb-be1181dbc27e
1.03.01

netstat -anpl|grep :80|awk {'print $5'}|cut -d":" -f1|sort|uniq -c|sort -n
Try this.

That fine but i have more websites on same server, on different IP each, is there a way to see those connections on what ip belongs each?