How to find your server is under DDOS Attack
Here is a command line to run on your server if you think your server is under DDOS attack. The commands given below prints out list of open connections on your server and sorts them by connection amount. RedHat: netstat -ntu | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n BSD: netstat -na |awk ‘{print $5}’ |cut -d “.” -f1,2,3,4 |sort |uniq -c |sort -n You can also check for connections by running the following command. netstat -plan [...]
