- Apr 25, 2015
- 1,845
- 2
- 2,199
- 327
Code:
lsof -Pnl +M -i4 | grep 443 | grep ESTABLISHED | grep -Eo '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' | sort | uniq -u
Kind of a baller method to find a listing of IPs, mentioning a specific port (443).
Then we could toss this at an IP threat score checker w/ APIs for example: