Results 1 to 5 of 5

Thread: dos help

  1. #1
    Join Date
    Jan 2011
    Posts
    671

    dos help

    My cPanel server was recently attacked with over 3000 IP connections (appeared to be from Georgia). How can I find out which domain name on the shared server the attackers were trying to connect to?

  2. #2
    Join Date
    Dec 2011
    Location
    Brazil
    Posts
    39
    If the attack was made using HTTP connection, you may find the access_logs the requests. You will have to make a shell script to find all the access_log files and search for the attacking IPs (that you seem to already have the list).

  3. #3
    Join Date
    Aug 2011
    Location
    India
    Posts
    283
    In most cases, the domain which is being attacked will have a large access_log file and this will help you to locate the domains. Then update the domains stats using /scripts/runweblogs username . This will help you to have visual analysis of the domain traffic.
    Fred Bruner
    Business Analyst
    SupportSages.com- Bytes of Wisdom @ Work - Where guarantees and promises are made to keep!
    24/7 Support with 15 mins response time & no charge guarantees

  4. #4
    Join Date
    Dec 2011
    Location
    Germany
    Posts
    1,023
    This will help you to determine the path of the file/domain being attacked.
    r00t-Services.net | DDoS Protected VMs & Remote DDoS Protection, Security, Optimization.
    In business since 2011 | Contact us: support[at]r00t-services.net
    Affordable & Powerful DDoS Protection Service in Europe and the USA! (⌐■_■)--︻╦╤─ - - - DDoS

  5. #5
    Join Date
    May 2009
    Location
    SLASH ROOT
    Posts
    821
    Since you are on a cPanel server, login to WHM as root user and navigate to Main >> Server Status >> Apache Status. Also see the output of the netstat to see if it is targeting a domain or just a SYN flood.
    █ WebHostRepo.com
    █ Linux | Windows
    | VPS | Cloud
    █ Outsourced Technical Support since 2009
    █ sales@webhostrepo.com

  6. Newsletters

    Subscribe Now & Get The WHT Quick Start Guide!

Similar Threads

  1. What to do when my site gets DoS'ed (and what hosts can help filter DoS)?
    By funkywizard in forum Hosting Security and Technology
    Replies: 10
    Last Post: 09-07-2005, 05:52 PM
  2. MS-DOS
    By websterworld in forum Web Hosting Lounge
    Replies: 14
    Last Post: 12-26-2003, 06:56 PM
  3. Dos & Dos & Dos
    By AlphaAdmin in forum Hosting Security and Technology
    Replies: 16
    Last Post: 11-05-2002, 07:49 PM

Related Posts from theWHIR.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •