mashihua · August 6, 2014 06:34
diff --git a/ddos.sh b/ddos.sh
 #!/bin/bash

 for i in `netstat -an | grep -i ':80 '| grep 'EST' | awk '{print $5}' | cut -d : -f 1 | sort | uniq -c | awk '{if($1 > 5) {print $2}}'`
 do
  echo $i >> /tmp/blockip
  /sbin/iptables -A INPUT -p tcp -j DROP -s $i
 done
	#!/bin/bash

	for i in `netstat -an \| grep -i ':80 '\| grep 'EST' \| awk '{print $5}' \| cut -d : -f 1 \| sort \| uniq -c \| awk '{if($1 > 5) {print $2}}'`
	do
	echo $i >> /tmp/blockip
	/sbin/iptables -A INPUT -p tcp -j DROP -s $i
	done