Watch Connections per IP (DDOS)

To watch the number of connections per IP, enter the following command on your linux server.

netstat -alpn | grep :80 | awk '{print $5}' |awk -F: '{print $(NF-1)}' |sort | uniq -c | sort -nr