apnakohat
New Member
Hello,
My server is under attack from last 2 days i have contacted Softlayer team but problem was not solved. here is what i m facing.
when i use the command
netstat -plan|grep :80|awk {'print $5'}|cut -d: -f 1|sort|uniq -c|sort -nk 1
there is no such IP which have more connections established. but when i use the command
netstat -plan | grep :80 | awk '{print $4 }' | sort -n | uniq -c | sort
here is what i get
[root@server ~]# netstat -plan | grep :80 | awk '{print $4 }' | sort -n | uniq -c | sort
1 0.0.0.0:80
191 first IP, which is shared IP i mean have many sites on it
988 here is under attack IP only one main site on it.
as you see the second one seems to be under attack the connection even reached 2000 its very much up and down.
Now the point is why its now showing with the first command that which Ip is making that much connection?
+ i m running Ddos defleate, CSF, also i will let you people know that Softlayer team nulled routed the IP for some time, but the problem was not solved.
Please guide me.
Regards.
My server is under attack from last 2 days i have contacted Softlayer team but problem was not solved. here is what i m facing.
when i use the command
netstat -plan|grep :80|awk {'print $5'}|cut -d: -f 1|sort|uniq -c|sort -nk 1
there is no such IP which have more connections established. but when i use the command
netstat -plan | grep :80 | awk '{print $4 }' | sort -n | uniq -c | sort
here is what i get
[root@server ~]# netstat -plan | grep :80 | awk '{print $4 }' | sort -n | uniq -c | sort
1 0.0.0.0:80
191 first IP, which is shared IP i mean have many sites on it
988 here is under attack IP only one main site on it.
as you see the second one seems to be under attack the connection even reached 2000 its very much up and down.
Now the point is why its now showing with the first command that which Ip is making that much connection?
+ i m running Ddos defleate, CSF, also i will let you people know that Softlayer team nulled routed the IP for some time, but the problem was not solved.
Please guide me.
Regards.
![[AS]Richard](/forums/data/avatars/m/16853/16853464.jpg?1424873980){kind=avatar}
