add: ip collection for ddos detect. Incomplete support on ddos detection.

Signed-off-by: liuyanghejerry <liuyanghejerry@126.com>