Share shell Anti DDos

Shell chống ddos. Bài viết này mình xin chia sẻ một đoạn shell chống ddos trên server họ linux. Dạo rùi server chạy dịch vụ web bên mình lượ...

Shell chống ddos.

Bài viết này mình xin chia sẻ một đoạn shell chống ddos trên server họ linux.
Dạo rùi server chạy dịch vụ web bên mình lượng ip connect tới lên tới hơn 12 nghìn ip.
=> chắc mẩm bị ddos server ssh rất chậm có khi treo và mình đã thử với cách trình bày bên dưới đây và đạt hiệu quả tức thì.
Câu lệnh kiểm tra lượng ip đang kết nối port 80 server: netstat -an|grep 80|wc -l
Với trường hợp của mình số ip connect tới port 80 lên trên 12k.

Xử lý:
cd /usr/local

mkdir ddos

cd ddos

Tạo các file sau:
1. ddos.conf

Nội dung:


##### Paths of the script and other files
PROGDIR="/usr/local/ddos"
PROG="/usr/local/ddos/ddos.sh"
IGNORE_IP_LIST="/usr/local/ddos/ignore.ip.list"
CRON="/etc/cron.d/ddos.cron"
APF="/etc/apf/apf"
IPT="/sbin/iptables"


##### frequency in minutes for running the script
##### Caution: Every time this setting is changed, run the script with --cron
##### option so that the new frequency takes effect
FREQ=1


##### How many connections define a bad IP? Indicate that below.
NO_OF_CONNECTIONS=150


##### APF_BAN=1 (Make sure your APF version is atleast 0.96)
##### APF_BAN=0 (Uses iptables for banning ips instead of APF)
APF_BAN=1


##### KILL=0 (Bad IPs are'nt banned, good for interactive execution of script)
##### KILL=1 (Recommended setting)
KILL=1


##### An email is sent to the following address when an IP is banned.
##### Blank would suppress sending of mails
EMAIL_TO="root"


##### Number of seconds the banned ip should remain in blacklist.
BAN_PERIOD=600

2. ignore.ip.list

Nội dung:

127.0.0.1

3.
ddos.sh
#!/bin/sh################################################ ##############################
# DDoS-Deflate version 0.6 Author: Zaf <zaf@vsnl.com> #
################################################## ############################
# This program is distributed under the "Artistic License" Agreement #
# #
# The LICENSE file is located in the same directory as this program. Please #
# read the LICENSE file before you make copies or distribute this program #
################################################## ############################
load_conf()
{
CONF="/usr/local/ddos/ddos.conf"
if [ -f "$CONF" ] && [ ! "$CONF" == "" ]; then
source $CONF
else
head
echo "\$CONF not found."
exit 1
fi
}


head()
{
echo "DDoS-Deflate version 0.6"
echo "Copyright (C) 2005, Zaf <zaf@vsnl.com>"
echo
}


showhelp()
{
head
echo 'Usage: ddos.sh [OPTIONS] [N]'
echo 'N : number of tcp/udp connections (default 150)'
echo 'OPTIONS:'
echo '-h | --help: Show this help screen'
echo '-c | --cron: Create cron job to run this script regularly (default 1 mins)'
echo '-k | --kill: Block the offending ip making more than N connections'
}


unbanip()
{
UNBAN_SCRIPT=`mktemp /tmp/unban.XXXXXXXX`
TMP_FILE=`mktemp /tmp/unban.XXXXXXXX`
UNBAN_IP_LIST=`mktemp /tmp/unban.XXXXXXXX`
echo '#!/bin/sh' > $UNBAN_SCRIPT
echo "sleep $BAN_PERIOD" >> $UNBAN_SCRIPT
if [ $APF_BAN -eq 1 ]; then
while read line; do
echo "$APF -u $line" >> $UNBAN_SCRIPT
echo $line >> $UNBAN_IP_LIST
done < $BANNED_IP_LIST
else
while read line; do
echo "$IPT -D INPUT -s $line -j DROP" >> $UNBAN_SCRIPT
echo $line >> $UNBAN_IP_LIST
done < $BANNED_IP_LIST
fi
echo "grep -v --file=$UNBAN_IP_LIST $IGNORE_IP_LIST > $TMP_FILE" >> $UNBAN_SCRIPT
echo "mv $TMP_FILE $IGNORE_IP_LIST" >> $UNBAN_SCRIPT
echo "rm -f $UNBAN_SCRIPT" >> $UNBAN_SCRIPT
echo "rm -f $UNBAN_IP_LIST" >> $UNBAN_SCRIPT
echo "rm -f $TMP_FILE" >> $UNBAN_SCRIPT
. $UNBAN_SCRIPT &
}


add_to_cron()
{
rm -f $CRON
sleep 1
service crond restart
sleep 1
echo "SHELL=/bin/sh" > $CRON
if [ $FREQ -le 2 ]; then
echo "0-59/$FREQ * * * * root /usr/local/ddos/ddos.sh >/dev/null 2>&1" >> $CRON
else
let "START_MINUTE = $RANDOM % ($FREQ - 1)"
let "START_MINUTE = $START_MINUTE + 1"
let "END_MINUTE = 60 - $FREQ + $START_MINUTE"
echo "$START_MINUTE-$END_MINUTE/$FREQ * * * * root /usr/local/ddos/ddos.sh >/dev/null 2>&1" >> $CRON
fi
service crond restart
}


load_conf
while [ $1 ]; do
case $1 in
'-h' | '--help' | '?' )
showhelp
exit
;;
'--cron' | '-c' )
add_to_cron
exit
;;
'--kill' | '-k' )
KILL=1
;;
*[0-9]* )
NO_OF_CONNECTIONS=$1
;;
* )
showhelp
exit
;;
esac
shift
done


TMP_PREFIX='/tmp/ddos'
TMP_FILE="mktemp $TMP_PREFIX.XXXXXXXX"
BANNED_IP_MAIL=`$TMP_FILE`
BANNED_IP_LIST=`$TMP_FILE`
echo "Banned the following ip addresses on `date`" > $BANNED_IP_MAIL
echo >> $BANNED_IP_MAIL
BAD_IP_LIST=`$TMP_FILE`
netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -nr > $BAD_IP_LIST
cat $BAD_IP_LIST
if [ $KILL -eq 1 ]; then
IP_BAN_NOW=0
while read line; do
CURR_LINE_CONN=$(echo $line | cut -d" " -f1)
CURR_LINE_IP=$(echo $line | cut -d" " -f2)
if [ $CURR_LINE_CONN -lt $NO_OF_CONNECTIONS ]; then
break
fi
IGNORE_BAN=`grep -c $CURR_LINE_IP $IGNORE_IP_LIST`
if [ $IGNORE_BAN -ge 1 ]; then
continue
fi
IP_BAN_NOW=1
echo "$CURR_LINE_IP with $CURR_LINE_CONN connections" >> $BANNED_IP_MAIL
echo $CURR_LINE_IP >> $BANNED_IP_LIST
echo $CURR_LINE_IP >> $IGNORE_IP_LIST
if [ $APF_BAN -eq 1 ]; then
$APF -d $CURR_LINE_IP
else
$IPT -I INPUT -s $CURR_LINE_IP -j DROP
fi
done < $BAD_IP_LIST
if [ $IP_BAN_NOW -eq 1 ]; then
dt=`date`
if [ $EMAIL_TO != "" ]; then
cat $BANNED_IP_MAIL | mail -s "IP addresses banned on $dt" $EMAIL_TO
fi
unbanip
fi
fi
rm -f $TMP_PREFIX.*


Sau đó phân quyền file ddos.sh
chmod 775 ddos.sh

chạy bằng lệnh:
./ddos.sh


script sẽ bock các ip có số session >150 như file ddos.conf

Nguồn thao khảo: 
http://dcvizcayno.wordpress.com/
Ads Here
Tên

1st,2,8051,3,AAG,1,ADS,2,ADSL,2,AIO,1,Alarm,1,Altcoin,1,AMD,2,Amplifier,4,Android,2,Android TV,3,AOE,1,APG,1,APK,3,ASIC,2,ATX,2,AVG,3,Ấp trứng,2,Bàn phím cơ,1,Bản quyền,1,baner,3,Bảng giá,5,Banggood,1,Báo giá,1,Báo hỏng,1,Bảo Mật,4,BCC,1,BCN,1,Binance,1,Bitcoin,5,Bitmex,1,Bittrex,1,BIX,1,blogger,2,BNB,1,bootrom,1,BTC,4,Build PC,1,ByteCoin,1,cable,1,Cài đặt,3,Cài Win,2,Camera,6,Camera giám sát,3,camera IP,2,Cáp quang,8,Cáp quang Cá nhân,2,Cáp quang Doanh nghiệp,1,Cấu hình máy,1,CCTV,1,Chống nước,1,Clicksense,2,Cloud,1,Cloud camera,2,Code,8,Code web,8,coin,5,Combo,1,Controller,1,Covid-19,9,Công nghệ mới,1,Cryptocurrency,26,Cung hoàng đạo,1,DAG,1,DDos,39,DEEP WEB,3,Dịch vụ FPT,4,DIY,8,Đại Từ,1,Đánh giá,5,Đào coin,6,Đâu là đúng,5,Địa chỉ,1,Điện thoại,2,Điều khiển giọng nói,1,Đồng hồ,1,Electronics,1,English,2,epon,1,ETC,1,ETH,6,Facebook,10,featured,1,Foxy,1,fpt,12,FPT camera,4,FPT internet,3,FPT Play,1,FPT Play Box,32,FPT Playbox,3,FPT Telecom,5,FPT Thái Nguyên,6,FPT TV,1,FPT TV 4K,1,FPT TVOnly,1,fshare,1,G-97D2,3,G97RG6M1,1,Game,2,Game gear,1,Game PC,2,getlink,1,Ghost,2,Ghost Windows 10,2,Ghost Windows 7,7,Gói cá nhân,2,Gói cước,2,Gói cước FPT,8,Gói Doanh Nghiệp,4,Gói kênh FPT Play,1,GPON,3,GPU,2,Hà Nội,1,Hacker,1,Hàn Quốc,1,HBO,1,HG531,2,Hi FPT,3,HiFPT,1,Học Online,1,Hot,15,houbi,3,HT,1,HTC,1,Hướng dẫn,10,Hướng dẫn FPT,8,IC555,4,ICO,3,Ifan,1,Infographic,2,internet,8,Inverter,1,IP tĩnh,1,IPTV,1,ISO,1,K+,1,KCS,1,Key,1,keypad,1,Kho Tut,59,Khuyến mại,10,kích sóng wifi,1,Kiếm tiền trên mạng,1,Kiến thức,2,Kinh nghiệm,1,Lan,1,Laptop,1,Lắp mạng,3,LED,6,leech link,1,Li-Ion,1,Light,1,LM386,1,Love,2,Lừa đảo,1,Ma kết,1,Mạch Audio,1,Mạch điện tử,1,Mạch sạc,5,Mainboard,1,Mạng chậm,1,Mạng internet,3,Mạng LAN,3,Máy ảnh,1,Máy tính,3,Meter,1,Miband,3,Microsoft,1,Minning,4,MMO,3,Mobile,3,Modem,17,Mở két,1,Music,1,Netflix,1,News,7,Ngoại ngữ,1,Nguồn,3,Nvidia,1,offer,1,Office,2,Onedrive,1,Online,1,OS,2,Others,1,Paypal,1,PC,1,PCB,1,PDF,1,Phấn Mễ,1,Phần mềm,2,Phim,1,Phòng nét,1,Photo,1,Phổ Yên,1,Phú Lương,1,Phụ nữ,1,PIC,2,Pin - Ắc qui,4,proxy,1,PUBG,1,Python,4,Remitano,3,Repeater,1,Review,4,Review FPT,2,Root,1,Router,2,Rút gọn link,1,sạc dụng phòng,1,Sạc điện thoại,1,Sàn giao dịch,2,Scam,3,Sensor,2,setup,2,smarthome,1,Softwares,5,sonoff,1,SQL,3,Super 22,2,Tài liệu,182,Tenda Nova MW3,1,Thái Nguyên,19,Thẻ visa,1,Thể thao,1,Thi công,1,Thơ thẩn,3,Thủ thuật,89,Tiền bạc,1,Tiền điện tử,3,Tin FPT,5,Tin tức,41,Tình yêu,4,Tivi box,1,Tivi Gold,1,TNUT,1,Tool,2,Tool đào coin,6,Tools,45,TP Link,1,TP-Link,3,trade coin,8,Trading,1,Transitsor,2,Trâu cày,2,Truyện,3,Truyền hình,4,Truyền hình FPT,29,Tuyển dụng,3,Tư vấn,4,TV Box,3,UG,15,USB,1,USDT,2,VGA,1,Video,1,Viettel,2,Viễn thông,1,Vinaphone,1,Virus,11,VPN,1,Web,1,wifi,17,Wifi Maketting,1,Window XP,3,Windows,4,Windows 10,6,Windows 10 Mobile,1,Windows 7,2,Xiaomi,4,XMR,2,Youtube,1,Zcash,1,Zec,1,
ltr
item
Tổng đài lắp mạng FPT Thái Nguyên |Cáp quang | Wifi | Truyền hình 4K |FPT Play Box: Share shell Anti DDos
Share shell Anti DDos
Tổng đài lắp mạng FPT Thái Nguyên |Cáp quang | Wifi | Truyền hình 4K |FPT Play Box
https://www.xn--fptthinguyn-o7a6j.vn/2015/08/share-shell-anti-ddos.html
https://www.xn--fptthinguyn-o7a6j.vn/
https://www.xn--fptthinguyn-o7a6j.vn/
https://www.xn--fptthinguyn-o7a6j.vn/2015/08/share-shell-anti-ddos.html
true
8240370674769512952
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS CONTENT IS PREMIUM Please share to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy