Large Number of Connections to Server Questions

[alone_lover]

Hi
my server is under syn flood ddos attack
[email protected] [~]# netstat -n | grep :80 |wc -l
2329

I dont know which account is under attack ! because in apache & process just nobody exists
how can I defense against this method? (( I configured the firewall and installed a ddos script))
& how can I know which account is under attack?
please help
thanks

 

[CounterForce]

This script can help with this kind of attacks and many more.

I use this for several years and it's really helpful... complete UI in the plugins section to configure the firewall and other settings...

ConfigServer Security & Firewall

 

[alone_lover]

I used it , but when I limited syn port... the speed of loading decreases & sites show up and down in monitoring system
how can I know which account is under attack?

 

[cPanelMichael]

Hello,

You can find additional discussion of this on the following thread:

ddos protection linux cloud server..

Thank you.