netstat to track connections in server | help identify ddos attacks
Use either of these commands to track ddos in your server. This will give you an idea of number of connections and the network activity in server. Any unethically high number of connections can conclude that you are a victim.
netstat -tan | grep ‘:80 ‘ | awk ‘{print $6}’ | sort | uniq -c
netstat -anp |grep ‘tcp\|udp’ | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n
Similar Posts:
- None Found
Categories: Apache / PHP, Newbie, cPanel and WHM Awk, ddos, Ddos Attacks, ddos attacks in cpanel, Grep, help ddos attacks, Netstat, netstat whm, Network Server, Server Help, Tcp Udp