-1

May I know what is the command that I should use to get the output of all IP & its frequent while they are accessing my server? I need this command to know the frequency of IP that access my server so that I can block the most frequent IP that access my server. Please help me since I am a newbie to Iptables

sara
  • 1
  • Have a look at `fail2ban` that may better suit you. Otherwise banning an IP just because of its frequency will give you a lot of false positives... – Patrick Mevzek Aug 05 '18 at 00:36

1 Answers1

0

Iptables is the command line interface to the linux firewall system, it does not record IP addresses uses and/or frequencies

If you want to see this kind of information you will need to use another tool, it's usualy done using a packet capture tool.

You could for example run tshark/tcpdump on the server, store the result in a pcap file and open it with wireshark on a desktop to get some statistics.

silmaril
  • 491
  • 3
  • 9