Results 1 to 5 of 5

Thread: dos help

  1. #1
    Join Date
    Jan 2011
    Posts
    669

    dos help

    My cPanel server was recently attacked with over 3000 IP connections (appeared to be from Georgia). How can I find out which domain name on the shared server the attackers were trying to connect to?

  2. #2
    Join Date
    Dec 2011
    Location
    Brazil
    Posts
    39
    If the attack was made using HTTP connection, you may find the access_logs the requests. You will have to make a shell script to find all the access_log files and search for the attacking IPs (that you seem to already have the list).

  3. #3
    Join Date
    Aug 2011
    Location
    India
    Posts
    283
    In most cases, the domain which is being attacked will have a large access_log file and this will help you to locate the domains. Then update the domains stats using /scripts/runweblogs username . This will help you to have visual analysis of the domain traffic.
    Fred Bruner
    Business Analyst
    SupportSages.com- Bytes of Wisdom @ Work - Where guarantees and promises are made to keep!
    24/7 Support with 15 mins response time & no charge guarantees

  4. #4
    Join Date
    Dec 2011
    Location
    Germany
    Posts
    1,019
    This will help you to determine the path of the file/domain being attacked.
    r00t-Services.net | DDoS Protected VMs & Remote DDoS Protection, Security, Optimization.
    In business since 2011 | Contact us: support[at]r00t-services.net
    Affordable & Powerful DDoS Protection Service in Europe and the USA! (⌐■_■)--︻╦╤─ - - - DDoS

  5. #5
    Join Date
    May 2009
    Location
    SLASH ROOT
    Posts
    803
    Since you are on a cPanel server, login to WHM as root user and navigate to Main >> Server Status >> Apache Status. Also see the output of the netstat to see if it is targeting a domain or just a SYN flood.
    █ WebHostRepo.com
    █ Linux | Windows
    | VPS | Cloud
    █ Outsourced Technical Support since 2009
    █ sales@webhostrepo.com

Similar Threads

  1. What to do when my site gets DoS'ed (and what hosts can help filter DoS)?
    By funkywizard in forum Hosting Security and Technology
    Replies: 10
    Last Post: 09-07-2005, 05:52 PM
  2. MS-DOS
    By websterworld in forum Web Hosting Lounge
    Replies: 14
    Last Post: 12-26-2003, 06:56 PM
  3. Dos & Dos & Dos
    By AlphaAdmin in forum Hosting Security and Technology
    Replies: 16
    Last Post: 11-05-2002, 07:49 PM

Related Posts from theWHIR.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •