Portal Home > Knowledgebase > Articles Database > Detecting IP address' Ddosing server


Detecting IP address' Ddosing server




Posted by justdosit, 04-18-2010, 06:08 AM
How can this be done? If your server was being dossed how would you be able to detect the IP doing it so it can be banned? Thank you

Posted by ksv2nash, 04-18-2010, 06:46 AM
Hello, What exact you want to do?

Posted by ksv2nash, 04-18-2010, 06:50 AM
Hello, If you want to see how much IP connection at your server so you can use following netstat -anp | grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n

Posted by justdosit, 04-18-2010, 06:52 AM
Hi, the goal is to block the ip address' dossing the server. The problem with netstat is I'd be unable to RDC the server as its being Ddossed. I seen people block a full on doss attack within seconds

Posted by badboyx, 04-18-2010, 09:48 AM
a company that provide a real ddos protection using a special firewall devices ( cisco,riorey..etc) can do that automatically so you can sleep while these devices working without bothering yourself, monitoring the server 24/7 is a hard job

Posted by samurai7, 04-18-2010, 10:24 AM
To prevent ddos, presently, the effective way is to place a firewall at the isp. Upto a particular limit firewalls like csf will do the job, but it will cause heavy load on the system.



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
JaguarPC Down ? (Views: 622)
EV SSL impact (Views: 585)