My server is being attacked.

Discussions related with hosting control panels used, which include cPanel, Plesk, Directadmin etc..
Post Reply
sharma
Posts: 0
Joined: Thu Apr 30, 2015 3:21 pm

My server is being attacked.

Post by sharma »

My server is having high load on it. I think my server is being attacked by someone.. How can I check the attack? Could you help me?



Nadal N
Posts: 0
Joined: Mon Apr 23, 2018 7:54 am

Re: My server is being attacked.

Post by Nadal N »

Hello Sharma,

You can check attack from IP’s using the netstat command.

#netstat -tn

This will show the connections from IP’s and ports

You can sort the connections to port 80 and 443 by using the below command.

#netstat -tn 2>/dev/null | grep ':80\|:443' | awk '{print $5}' | cut -f1 -d: | sort | uniq -c | sort -rn | head

This will show the number of connections to port 80 and 443. Block that IP if you find it suspicious.

Nadal N
Linux Support Engineer.
Nixtree Solutions
Managed Full Server Backups
https://www.nixtree.com/managed-backups.php
Follow us on https://twitter.com/nixtree



sharma
Posts: 0
Joined: Thu Apr 30, 2015 3:21 pm

Re: My server is being attacked.

Post by sharma »

Haa I got some IP. Thanks man.



Post Reply