i know this is not good,since my server got attacked, How do i know which ips are hitting my server most ?
Sometime my server load high, and i use this command " tail -f /usr/local/apache/logs/error_log " to trace the error, is this right ? or what command do i need to trace the cause of my high server load ? thank guys
Yep! your apache server is under DOS attack it seems...execute the following command ::
netstat -np | grep SYN_RECV
And see which ip is receiving more SYN packets..you can configure your APF AD(Anti Dos) Feature to automat ip blocking..
AssistanZ - Beyond Boundaries... Cloudstack Consultancy / 24x7 Web Hosting Support / 24x7 Server Management / Infrastructure Management Services Web & Mobile Apps Development / Web Designing Services / Php, Grails, Java Development