Differences

This shows you the differences between two versions of the page.

--- internet:security:ddos [2018/09/08 10:06]
gcooper
+++ internet:security:ddos [2018/09/08 10:17] (current)
gcooper
@@ Line 14: / Line 14: @@
 ===== Are You Under Attack? =====
+:!: You may want to change the port ''80'' to some other port.
 <file>
 netstat -alpn | grep :80 | awk '{print $4}' |awk -F: '{print $(NF-1)}' |sort | uniq -c | sort -n
+</file>
+Which IP address of your server is targeted by the DDoS attack:
+<file>
+netstat -plan  | grep  :80 | awk '{print $4}' | cut -d: -f1 |sort |uniq -c
+</file>
+From which IPs the attack is coming:
+<file>
+netstat -plan  | grep  :80 | awk '{print $5}' | cut -d: -f1 |sort |uniq -c
 </file>

Virtual Architects Support Wiki