You can also run the command via ssh netstat -ntu | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n
and see if you see an abnormal amount of connections although this method does not work for all ddos attacks as there's quite a few such as slowloris which is hard to detect as it...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.