Portal Home > Knowledgebase > Articles Database > Detecting IP address' Ddosing server
Detecting IP address' Ddosing server
Posted by justdosit, 04-18-2010, 06:08 AM |
How can this be done? If your server was being dossed how would you be able to detect the IP doing it so it can be banned?
Thank you
|
Posted by ksv2nash, 04-18-2010, 06:46 AM |
Hello,
What exact you want to do?
|
Posted by ksv2nash, 04-18-2010, 06:50 AM |
Hello,
If you want to see how much IP connection at your server so you can use following
netstat -anp | grep 'tcp\|udp' | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
|
Posted by justdosit, 04-18-2010, 06:52 AM |
Hi, the goal is to block the ip address' dossing the server. The problem with netstat is I'd be unable to RDC the server as its being Ddossed.
I seen people block a full on doss attack within seconds
|
Posted by badboyx, 04-18-2010, 09:48 AM |
a company that provide a real ddos protection using a special firewall devices ( cisco,riorey..etc) can do that automatically so you can sleep while these devices working without bothering yourself, monitoring the server 24/7 is a hard job
|
Posted by samurai7, 04-18-2010, 10:24 AM |
To prevent ddos, presently, the effective way is to place a firewall at the isp. Upto a particular limit firewalls like csf will do the job, but it will cause heavy load on the system.
|
Add to Favourites Print this Article
Also Read
EV SSL impact (Views: 585)