Linux - Command to find ddos attack, Netstat command

Command to find ddos attack

To find DDOS Attack

 netstat -tn | grep :80 | awk '\''{print $5}'\'' | cut -f1 -d: | sort | uniq -c | sort -rn | head

The above command will print the number of hits from the a specific IP address

Top 10 Users of your system

 ps -eo user,pcpu,pid,command | sort -r -k2 | head -11

This command will print the user, process id, and the commandor process used by the user
Output:

USER     %CPU   PID COMMAND
yingqila  5.0 20295 [php] <defunct>
mailnull  1.0 20286 /usr/sbin/exim -bd -q60m
mailnull  0.6 19710 /usr/sbin/exim -bd -q60m
root      0.5  5398 spamd child
mailnull  0.5 20253 /usr/sbin/exim -bd -q60m

To list all the process

 ps -uxa | more

The above command will list all the process

The topic on Linux - Command to find ddos attack is posted by - Parthi

Hope you have enjoyed, Linux - Command to find ddos attackThanks for your time