Linux Anti DDos

ss -tun state connected

netstat -tn 2>/dev/null | grep -E '\s[0-9.]+:443\s' | awk '{print $5}' | cut -d : -f 1 | sort | uniq -c | sort -nr

sudo systemctl status firewalld
sudo firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='202.61.254.136' reject"
sudo firewall-cmd --reload
sudo firewall-cmd --list-all

tcpkill host <ip>