Linux server under a DDoS attack from an IP address? | Easy Instructions

Find out what IP addresses are connected to your server.

[code]sudo apt-get install net-tools -y[/code]

Check Server Load

Be sure to check when everything is running normally, so you have a base number to compare it to.

[code]grep processor /proc/cpuinfo | wc -l[/code]

Checking Your Network Load

We need to install nload for this operation. There are other tools but this is the one we use.

[code]sudo apt-get install nload -y[/code]

Cent OS Command

[code]sudo dnf install nload -y[/code]

Running The Tool

In order to run the tool use this command.

[code]nload[/code]

Find Out What IP addresses Are Connected To Your Server

[code]netstat -ntu|awk ‘{print $5}’|cut -d: -f1 -s|sort|uniq -c|sort -nk1 -r[/code]

If you see an ip address that has numerous connections they are the ones responsible for the attack. Block them by entering this command.

[code]sudo route add IP-ADDRESS reject[/code]

Image by Bruno /Germany from Pixabay

Image by OpenClipart-Vectors from Pixabay