Simple Commad to detect DOSS attack

Try this command as one of the method to check if your server is under doss attack

netstat -anp |grep ‘tcp\|udp’ | awk ‘{print $5}’ | cut -d: -f1 | sort | uniq -c | sort -n

You can block ips using apf -d ipnumber

Leave a Reply

You must be logged in to post a comment.