The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Maybe DDos Attack, Need help!

Discussion in 'General Discussion' started by ukhost4u, Nov 3, 2004.

  1. ukhost4u

    ukhost4u Active Member
    PartnerNOC

    Joined:
    Apr 24, 2003
    Messages:
    42
    Likes Received:
    0
    Trophy Points:
    6
    Hello,

    Im seeing an odd problem with my server. Its load averages are sky high but both the CPU and Memory are perfectly fine. My Managment team have advised me that this is a Ddos attack and they have installed a firewall and it should pass.

    Its not actually effecting that much except from making everyting run very slowely and showing high loads. The odd thing is that even then no services are running on the box the load is still between 5 - 6 which should not be.

    I have noticed something else in LogWatch.

    Dropped 19925 packets on interface eth0 but when I look at this the odd thing is the following line:

    From 209.67.xx.xx - 17764 packets to ip(2202,0)682 udp ports903 tcp ports

    This is my own server IP. Does this show that someone is running an out going DDOS attack from my server?

    Im totally at a loss here and any advise would be great.

    Have a nice day,

    Paul Hughes
     
  2. fikse

    fikse Well-Known Member

    Joined:
    May 10, 2003
    Messages:
    112
    Likes Received:
    0
    Trophy Points:
    16
  3. ukhost4u

    ukhost4u Active Member
    PartnerNOC

    Joined:
    Apr 24, 2003
    Messages:
    42
    Likes Received:
    0
    Trophy Points:
    6
    We are running APF with the DDOS mod installed, and its just a standard cPanel install, nothing special.
     

Share This Page