Differences

This shows you the differences between two versions of the page.

--- internet:security:ddos [2014/04/01 09:22]
gcooper
+++ internet:security:ddos [2018/09/08 10:17]
gcooper
@@ Line 13: / Line 13: @@
 http://365hostingsupport.com/blog/dos-how-to-check-it/
-===== Tools =====
+===== Are You Under Attack? =====
-==== Apache Logs Viewer ====
+:!: You may want to change the port ''80'' to some other port.
+<file>
+netstat -alpn | grep :80 | awk '{print $4}' |awk -F: '{print $(NF-1)}' |sort | uniq -c | sort -n
+</file>
+Which IP address of your server is targeted by the DDoS attack:
+<file>
+netstat -plan  | grep  :80 | awk '{print $4}' | cut -d: -f1 |sort |uniq -c
+</file>
+From which IPs the attack is coming:
+<file>
+netstat -plan  | grep  :80 | awk '{print $5}' | cut -d: -f1 |sort |uniq -c
+</file>
+===== CSF Firewall =====
+https://www.supportsages.com/configure-csf-prevent-ddos-attacks/
+===== Apache Logs Viewer =====
   * Windows Application
@@ Line 22: / Line 44: @@
 http://www.apacheviewer.com/index.php
-==== DDoS Deflate ====
+===== DDoS Deflate =====
 http://deflate.medialayer.com/

Virtual Architects Support Wiki