How Can i tell if my server is being DoS/DDoS'd (denial of service ) ?

You can use this command to see the number of connections per IP. It's a bit easier on the eye that the raw output of netstat.

netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n

 

If you suspect any IPs there with too many connections you can obviously add the IP to the deny list in your firewall

APF: apf -d xx.xx.xx.xx
CSF: csf -d xx.xx.xx.xx

OR if you dont use APF or CSF, just add it straight into iptables

iptables -I INPUT 1 -s -j DROP xx.xx.xx.xx

  • 62 Users Found This Useful
Was this answer helpful?

Related Articles

How can I backup my whole server using rsync?

To backup your dedicated server to a new server you can log in to the server you want to back up...

Terms & Conditions

Terms & Conditions Terms Of Service (TOS) The Parties 1. hosting--solutions / Y-net UK ("the...

What do I do if I can't (can not) connect to my server?

What do I do if i can not (can't) connect to my server? Its always best to check if there...

What Program do i use to connect via SSH?

What Program do i use to connect to SSH? We recommend that you use Putty. This can be...

When do i have to pay for my dedicated server?

We Use a Pro-Rata Billing System for our Dedicated Server Sales. Your Billing period will be...