The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

httpd DOS attack

Discussion in 'Security' started by avantec, Dec 16, 2013.

  1. avantec

    avantec Registered

    Joined:
    Dec 16, 2013
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    hi pls i need your help i'm two days with this problem and i can't fix this, i have a Ddos attack but my dtacenter say that no is an attack, i have 200 Reading Request and 2b ram, my vps is down, my MaxClients / ServerLimit are 256 but the server is to limit, pls very thanks for your help
     
  2. cPanelJared

    cPanelJared Technical Analyst
    Staff Member

    Joined:
    Feb 25, 2010
    Messages:
    1,842
    Likes Received:
    18
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
  3. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    942
    Likes Received:
    57
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
    Have you figured out what domain is being targeted? (That is, if you host multiple domains).

    Try using a httpd fullstatus to see what domain is being targeted. Then, tail -f the domains access log, i.e.

    Code:
    tail -f /home/$USERNAME/access-logs/$DOMAIN.COM
    Try to get as much information on the requests as possible, and paste part of the log here if you see the repeated requests. You can remove your domain name from the logs.
     
  4. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,146
    Likes Received:
    34
    Trophy Points:
    48
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello,


    I will suggest you monitor all connection on your through netstat command. You can use following command to check your ESTABLISHED connection on port 80 t

    Code:
    netstat -anp | grep :80 | grep ESTABLISHED | wc -l
     
Loading...

Share This Page