Differences

This shows you the differences between two versions of the page.

--- internet:security:ddos [2018/09/08 10:04]
gcooper
+++ internet:security:ddos [2018/09/08 10:16]
gcooper
@@ Line 13: / Line 13: @@
 http://365hostingsupport.com/blog/dos-how-to-check-it/
-===== Tools =====
+===== Are You Under Attack? =====
-==== Linux Shell ====
+<file>
+netstat -alpn | grep :80 | awk '{print $4}' |awk -F: '{print $(NF-1)}' |sort | uniq -c | sort -n
+</file>
-Are you under attack?
+Which IP address of your server is targeted by the DDoS attack:
 <file>
-netstat -alpn | grep :80 | awk '{print $4}' |awk -F: '{print $(NF-1)}' |sort | uniq -c | sort -n
+netstat -plan  | grep  :80 | awk '{print $4}' | cut -d: -f1 |sort |uniq -c
 </file>
-==== Apache Logs Viewer ====
+From which IPs the attack is coming:
+<file>
+netstat -plan  | grep  :80 | awk '{print $5}' | cut -d: -f1 |sort |uniq -c
+</file>
+===== CSF Firewall =====
+https://www.supportsages.com/configure-csf-prevent-ddos-attacks/
+===== Apache Logs Viewer =====
   * Windows Application
@@ Line 30: / Line 42: @@
 http://www.apacheviewer.com/index.php
-==== DDoS Deflate ====
+===== DDoS Deflate =====
 http://deflate.medialayer.com/

Virtual Architects Support Wiki