My server is being attacked.
Moderator: Staff
My server is being attacked.
My server is having high load on it. I think my server is being attacked by someone.. How can I check the attack? Could you help me?
cPanel Server Management
@ 30$ Onwards
@ 30$ Onwards
Re: My server is being attacked.
Hello Sharma,
You can check attack from IP’s using the netstat command.
#netstat -tn
This will show the connections from IP’s and ports
You can sort the connections to port 80 and 443 by using the below command.
#netstat -tn 2>/dev/null | grep ':80\|:443' | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -rn | head
This will show the number of connections to port 80 and 443. Block that IP if you find it suspicious.
Nadal N
Linux Support Engineer.
Nixtree Solutions
Managed Full Server Backups
https://www.nixtree.com/managed-backups.php
Follow us on https://twitter.com/nixtree
You can check attack from IP’s using the netstat command.
#netstat -tn
This will show the connections from IP’s and ports
You can sort the connections to port 80 and 443 by using the below command.
#netstat -tn 2>/dev/null | grep ':80\|:443' | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -rn | head
This will show the number of connections to port 80 and 443. Block that IP if you find it suspicious.
Nadal N
Linux Support Engineer.
Nixtree Solutions
Managed Full Server Backups
https://www.nixtree.com/managed-backups.php
Follow us on https://twitter.com/nixtree
