Sunday, May 26, 2013

How many web hits are coming from which IP addresses?

Sometimes apache's getting beat up, either by accident or on purpose.  Who's doing it?  What IP addresses are hitting web ports, and how heavily?

netstat -pant | sed -e 's/::ffff://g' | awk -F' *|:' ' $5 ~ /80|443/ {print  $6  } ' | sort | uniq -c | sort -n

The resulting list will show which IPs are hitting the websites the hardest at the bottom of the list.

No comments:

Post a Comment