How to Find Users Who Have Opened a TCP Connection to Your Server on a Certain Number

Finding multiple connections to your server over an IP can always be useful. In many cases, when you receive a DDOS attack, you will see multiple connections over an IP. A command that can be very useful, especially in such a case. For example, you want to list IPs that open more than 50 connections on your server. In this case, you can use the following code;

 

 

When you execute the command, you receive an output similar to the following; (Of course, if more than 50 connections are available from a single IP)

 

 

If we only want to list the IPs, then we need to change the last line in the command as follows;

So we only see the connecting IP addresses.

 

 

If you have a question, you can drop it under the article. Or you can email us.

I hope it has been a useful article.