Results 1 to 2 of 2

Thread: Linux question

  1. #1
    Join Date
    Jan 2005

    Linux question

    hi there

    sorry abotu silly question:

    i got this in ssh:
    # netstat -n | grep :80 |wc -l
    # netstat -n | grep :80 |wc -l
    # netstat -n | grep :80 |wc -l

    i know this is not good,since my server got attacked, How do i know which ips are hitting my server most ?

    Sometime my server load high, and i use this command " tail -f /usr/local/apache/logs/error_log " to trace the error, is this right ? or what command do i need to trace the cause of my high server load ? thank guys

  2. #2
    Join Date
    Nov 2004
    Hi AndyJ,

    Yep! your apache server is under DOS attack it seems...execute the following command ::

    netstat -np | grep SYN_RECV

    And see which ip is receiving more SYN can configure your APF AD(Anti Dos) Feature to automat ip blocking..
    AssistanZ - Beyond Boundaries...
    Cloudstack Consultancy / 24x7 Web Hosting Support / 24x7 Server Management / Infrastructure Management Services
    Web & Mobile Apps Development / Web Designing Services / Php, Grails, Java Development

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts